|
246961
|
8.8 |
HIGH
Network
|
moodle
|
moodle
|
moodle before versions 3.5.2, 3.4.5, 3.3.8, 3.1.14 is vulnerable to an XML import of ddwtos could lead to intentional remote code execution. When importing legacy 'drag and drop into text' (ddwtos) t…
|
CWE-94
Code Injection
|
CVE-2018-14630
|
2024-11-21 12:49 |
2018-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246962
|
7.5 |
HIGH
Network
|
fedoraproject redhat
|
389_directory_server enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_aus
|
A flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in delete_passwdPolicy function when persistent search connections are terminated unexpectedly leading to remot…
|
CWE-415
Double Free
|
CVE-2018-14638
|
2024-11-21 12:49 |
2018-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246963
|
5.3 |
MEDIUM
Network
|
openstack
|
neutron
|
Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief window could be extended indefinitely if the instance's port is set administratively…
|
NVD-CWE-noinfo
|
CVE-2018-14636
|
2024-11-21 12:49 |
2018-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246964
|
6.5 |
MEDIUM
Network
|
redhat openstack
|
openstack neutron
|
When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service cou…
|
CWE-20
Improper Input Validation
|
CVE-2018-14635
|
2024-11-21 12:49 |
2018-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246965
|
9.8 |
CRITICAL
Network
|
redhat
|
openstack
|
The OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over HTTP during the build stage. This could potentially allow an attacker to serve malicious code to the …
|
CWE-20
Improper Input Validation
|
CVE-2018-14620
|
2024-11-21 12:49 |
2018-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246966
|
7.0 |
HIGH
Local
|
linux canonical debian
|
linux_kernel ubuntu_linux debian_linux
|
A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition between connect() and close() function may al…
|
-
|
CVE-2018-14625
|
2024-11-21 12:49 |
2018-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246967
|
7.7 |
HIGH
Network
|
redhat starcounter-jack
|
openshift_container_platform json-patch
|
An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of ser…
|
CWE-787
Out-of-bounds Write
|
CVE-2018-14632
|
2024-11-21 12:49 |
2018-09-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246968
|
7.5 |
HIGH
Network
|
fedoraproject redhat debian
|
389_directory_server enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_server_au…
|
A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16. The lock controlling the error log was not correctly used when re-opening the log file in log__error_eme…
|
-
|
CVE-2018-14624
|
2024-11-21 12:49 |
2018-09-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246969
|
8.8 |
HIGH
Network
|
vivotek
|
camera
|
VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 2 of 2) via eventscript.cgi.
|
NVD-CWE-noinfo
|
CVE-2018-14771
|
2024-11-21 12:49 |
2018-09-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246970
|
8.8 |
HIGH
Network
|
vivotek
|
camera
|
VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 1 of 2) via the ONVIF interface, (/onvif/device_service).
|
NVD-CWE-noinfo
|
CVE-2018-14770
|
2024-11-21 12:49 |
2018-09-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|