|
246491
|
4.8 |
MEDIUM
Network
|
victor_cms_project
|
victor_cms
|
An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the site name in the "Categories" menu.
|
CWE-79
Cross-site Scripting
|
CVE-2018-16775
|
2024-11-21 12:53 |
2018-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246492
|
7.5 |
HIGH
Network
|
hongcms_project
|
hongcms
|
HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/language/ajax?action=delete.
|
CWE-22
Path Traversal
|
CVE-2018-16774
|
2024-11-21 12:53 |
2018-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246493
|
4.8 |
MEDIUM
Network
|
easycms
|
easycms
|
EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field.
|
CWE-79
Cross-site Scripting
|
CVE-2018-16773
|
2024-11-21 12:53 |
2018-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246494
|
4.8 |
MEDIUM
Network
|
hoosk
|
hoosk
|
Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new.
|
CWE-79
Cross-site Scripting
|
CVE-2018-16772
|
2024-11-21 12:53 |
2018-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246495
|
9.8 |
CRITICAL
Network
|
hoosk
|
hoosk
|
Hoosk v1.7.0 allows PHP code execution via a SiteUrl that is provided during installation and mishandled in config.php.
|
CWE-94
Code Injection
|
CVE-2018-16771
|
2024-11-21 12:53 |
2018-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246496
|
8.8 |
HIGH
Network
|
webassembly_virtual_machine_project
|
webassembly_virtual_machine
|
In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because a certain new_al…
|
NVD-CWE-noinfo
|
CVE-2018-16770
|
2024-11-21 12:53 |
2018-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246497
|
8.8 |
HIGH
Network
|
webassembly_virtual_machine_project
|
webassembly_virtual_machine
|
In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because libRuntime.so!ll…
|
NVD-CWE-noinfo
|
CVE-2018-16769
|
2024-11-21 12:53 |
2018-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246498
|
8.8 |
HIGH
Network
|
webassembly_virtual_machine_project
|
webassembly_virtual_machine
|
In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecifie…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-16768
|
2024-11-21 12:53 |
2018-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246499
|
8.8 |
HIGH
Network
|
webassembly_virtual_machine_project
|
webassembly_virtual_machine
|
In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecifie…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-16767
|
2024-11-21 12:53 |
2018-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246500
|
8.8 |
HIGH
Network
|
webassembly_virtual_machine_project
|
webassembly_virtual_machine
|
In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because Errors::unreacha…
|
CWE-670
Always-Incorrect Control Flow Implementation
|
CVE-2018-16766
|
2024-11-21 12:53 |
2018-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|