|
249441
|
6.8 |
MEDIUM
Network
|
onosproject
|
onos
|
Time-of-check to time-of-use (TOCTOU) race condition in org.onosproject.acl (aka the access control application) in ONOS v1.13 and earlier allows attackers to bypass network access control via data p…
|
CWE-362
Race Condition
|
CVE-2018-12691
|
2024-11-21 12:45 |
2018-07-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249442
|
9.8 |
CRITICAL
Network
|
3cx
|
live_chat
|
The WP Live Chat Support Pro plugin before 8.0.07 for WordPress is vulnerable to unauthenticated Remote Code Execution due to client-side validation of allowed file types, as demonstrated by a v1/rem…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2018-12426
|
2024-11-21 12:45 |
2018-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249443
|
8.8 |
HIGH
Network
|
tp-link
|
tl-wr841n_firmware
|
The Ping and Traceroute features on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow authenticated blind Command Injection.
|
CWE-78
OS Command
|
CVE-2018-12577
|
2024-11-21 12:45 |
2018-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249444
|
4.3 |
MEDIUM
Network
|
tp-link
|
tl-wr841n_firmware
|
TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking.
|
CWE-1021
Improper Restriction of Rendered UI Layers or Frames
|
CVE-2018-12576
|
2024-11-21 12:45 |
2018-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249445
|
9.8 |
CRITICAL
Network
|
tp-link
|
tl-wr841n_firmware
|
On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n devices, all actions in the web interface are affected by bypass of authentication via an HTTP request.
|
CWE-287
Improper Authentication
|
CVE-2018-12575
|
2024-11-21 12:45 |
2018-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249446
|
8.8 |
HIGH
Network
|
tp-link
|
tl-wr841n_firmware
|
CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices.
|
CWE-352
Origin Validation Error
|
CVE-2018-12574
|
2024-11-21 12:45 |
2018-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249447
|
8.8 |
HIGH
Network
|
intex
|
n150_firmware
|
An issue was discovered on Intex N150 devices. The router firmware suffers from multiple CSRF injection point vulnerabilities including changing user passwords and router settings.
|
CWE-352
Origin Validation Error
|
CVE-2018-12529
|
2024-11-21 12:45 |
2018-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249448
|
8.1 |
HIGH
Network
|
intex
|
n150_firmware
|
An issue was discovered on Intex N150 devices. The backup/restore option does not check the file extension uploaded for importing a configuration files backup, which can lead to corrupting the router…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2018-12528
|
2024-11-21 12:45 |
2018-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249449
|
7.4 |
HIGH
Network
|
motorola
|
mbp853_firmware
|
The Motorola MBP853 firmware does not correctly validate server certificates. This allows for a Man in The Middle (MiTM) attack to take place between a Motorola MBP853 camera and the servers it commu…
|
CWE-295
Improper Certificate Validation
|
CVE-2018-12499
|
2024-11-21 12:45 |
2018-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249450
|
7.2 |
HIGH
Network
|
microfocus
|
secure_messaging_gateway
|
An OS command injection vulnerability in the web administration component of Micro Focus Secure Messaging Gateway (SMG) allows a remote attacker authenticated as a privileged user to execute arbitrar…
|
CWE-78
OS Command
|
CVE-2018-12465
|
2024-11-21 12:45 |
2018-06-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|