|
247371
|
7.8 |
HIGH
Local
|
debian artifex canonical redhat
|
debian_linux ghostscript ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_eus ent…
|
An issue was discovered in Artifex Ghostscript before 9.24. A type confusion in "ztype" could be used by remote attackers able to supply crafted PostScript to crash the interpreter or possibly have u…
|
CWE-704
Incorrect Type Conversion or Cast
|
CVE-2018-16511
|
2024-11-21 12:52 |
2018-09-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247372
|
7.8 |
HIGH
Local
|
artifex canonical
|
ghostscript ubuntu_linux gpl_ghostscript
|
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the "CS" and "SC" PDF primitives could be used by remote attackers able to supply crafted PDFs to crash th…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-16510
|
2024-11-21 12:52 |
2018-09-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247373
|
7.8 |
HIGH
Local
|
debian artifex canonical redhat
|
debian_linux ghostscript ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus gpl_ghostscript
|
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafte…
|
NVD-CWE-noinfo
|
CVE-2018-16509
|
2024-11-21 12:52 |
2018-09-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247374
|
6.5 |
MEDIUM
Network
|
baigo
|
baigo_cms
|
An issue was discovered in baigo CMS v2.1.1. There is an index.php?m=article&c=request CSRF that can cause publication of any article.
|
CWE-352
Origin Validation Error
|
CVE-2018-16458
|
2024-11-21 12:52 |
2018-09-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247375
|
6.1 |
MEDIUM
Network
|
craftedweb_project
|
craftedweb
|
CraftedWeb through 2013-09-24 has reflected XSS via the p parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2018-16450
|
2024-11-21 12:52 |
2018-09-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247376
|
6.5 |
MEDIUM
Network
|
onethink
|
onethink
|
OneThink 1.1.141212 allows CSRF for adding a page via admin.php?s=/Channel/add.html, adding a blog via admin.php?s=/Article/update.html, and setting the audit state via admin.php?s=/Article/setStatus…
|
CWE-352
Origin Validation Error
|
CVE-2018-16449
|
2024-11-21 12:52 |
2018-09-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247377
|
8.8 |
HIGH
Network
|
chshcms
|
cscms
|
Cscms 4 allows CSRF for creating a member via upload/admin.php/user/save, authenticating vip members via upload/admin.php/user/init/tid and upload/admin.php/user/init/rzid, and creating a super admin…
|
CWE-352
Origin Validation Error
|
CVE-2018-16448
|
2024-11-21 12:52 |
2018-09-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247378
|
8.8 |
HIGH
Network
|
frogcms_project
|
frogcms
|
Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF.
|
CWE-352
Origin Validation Error
|
CVE-2018-16447
|
2024-11-21 12:52 |
2018-09-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247379
|
7.5 |
HIGH
Network
|
seamcms
|
seacms
|
An issue was discovered in SeaCMS through 6.61. adm1n/admin_database.php allows remote attackers to delete arbitrary files via directory traversal sequences in the bakfiles parameter. This can allow …
|
CWE-22
Path Traversal
|
CVE-2018-16446
|
2024-11-21 12:52 |
2018-09-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247380
|
9.8 |
CRITICAL
Network
|
seacms
|
seacms
|
An issue was discovered in SeaCMS through 6.61. SQL injection exists via the tid parameter in an adm1n/admin_topic_vod.php request.
|
CWE-89
SQL Injection
|
CVE-2018-16445
|
2024-11-21 12:52 |
2018-09-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|