|
247271
|
6.8 |
MEDIUM
Physics
|
ismartalarm
|
ismartalarm
|
Cleartext Storage of credentials in the iSmartAlarmData.xml configuration file in the iSmartAlarm application through 2.0.8 for Android allows an attacker to retrieve the username and password.
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2018-16222
|
2024-11-21 12:52 |
2018-11-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247272
|
8.1 |
HIGH
Network
|
ruby-lang
canonical
debian
redhat
|
ruby
ubuntu_linux
debian_linux
enterprise_linux
|
An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. It does not taint strings that result from unpacking tainted strings with some f…
|
NVD-CWE-noinfo
|
CVE-2018-16396
|
2024-11-21 12:52 |
2018-11-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247273
|
9.8 |
CRITICAL
Network
|
ruby-lang
canonical
debian
redhat
|
ruby
openssl
ubuntu_linux
debian_linux
enterprise_linux
|
An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using =…
|
NVD-CWE-noinfo
|
CVE-2018-16395
|
2024-11-21 12:52 |
2018-11-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247274
|
6.5 |
MEDIUM
Network
|
opendolphin
|
opendolphin
|
OpenDolphin 2.7.0 and earlier allows authenticated attackers to bypass authentication to create and/or delete other users accounts via unspecified vectors.
|
NVD-CWE-noinfo
|
CVE-2018-16163
|
2024-11-21 12:52 |
2018-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247275
|
8.8 |
HIGH
Network
|
opendolphin
|
opendolphin
|
OpenDolphin 2.7.0 and earlier allows authenticated attackers to obtain other users credentials such as a user ID and/or its password via unspecified vectors.
|
NVD-CWE-noinfo
|
CVE-2018-16162
|
2024-11-21 12:52 |
2018-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247276
|
8.8 |
HIGH
Network
|
opendolphin
|
opendolphin
|
OpenDolphin 2.7.0 and earlier allows authenticated users to gain administrative privileges and perform unintended operations.
|
NVD-CWE-noinfo
|
CVE-2018-16161
|
2024-11-21 12:52 |
2018-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247277
|
7.8 |
HIGH
Local
|
ftsafe
|
securecore
|
SecureCore Standard Edition Version 2.x allows an attacker to bypass the product 's authentication to log in to a Windows PC.
|
CWE-287
Improper Authentication
|
CVE-2018-16160
|
2024-11-21 12:52 |
2018-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247278
|
7.5 |
HIGH
Network
|
rack_project
|
rack
|
There is a possible DoS vulnerability in the multipart parser in Rack before 2.0.6. Specially crafted requests can cause the multipart parser to enter a pathological state, causing the parser to use …
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2018-16470
|
2024-11-21 12:52 |
2018-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247279
|
6.1 |
MEDIUM
Network
|
rack_project
debian
|
rack
debian_linux
|
There is a possible XSS vulnerability in Rack before 2.0.6 and 1.6.11. Carefully crafted requests can impact the data returned by the `scheme` method on `Rack::Request`. Applications that expect the …
|
CWE-79
Cross-site Scripting
|
CVE-2018-16471
|
2024-11-21 12:52 |
2018-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247280
|
5.9 |
MEDIUM
Network
|
axtls_project
|
axtls
|
In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification does not properly verify the ASN.1 metadata. Consequently, a remote attacker can forge signatures w…
|
CWE-347
Improper Verification of Cryptographic Signature
|
CVE-2018-16253
|
2024-11-21 12:52 |
2018-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
