|
247791
|
6.1 |
MEDIUM
Network
|
asus
|
rt-ac3200_firmware
|
Cross-site scripting in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute JavaScript via the "hook" URL parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2018-14710
|
2024-11-21 12:49 |
2019-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247792
|
9.8 |
CRITICAL
Network
|
blogengine
|
blogengine.net
|
BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd.
|
CWE-611
XXE
|
CVE-2018-14485
|
2024-11-21 12:49 |
2019-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247793
|
6.1 |
MEDIUM
Network
|
coppermine-gallery
|
coppermine_photo_gallery
|
ecard.php in Coppermine Photo Gallery (CPG) 1.5.46 has XSS via the sender_name, recipient_email, greetings, or recipient_name parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2018-14478
|
2024-11-21 12:49 |
2019-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247794
|
5.4 |
MEDIUM
Network
|
polarisft
|
intellect_core_banking
|
An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. Reflected XSS exists with an authenticated session via the Customerid, formName, FrameId, or MODE pa…
|
CWE-79
Cross-site Scripting
|
CVE-2018-14875
|
2024-11-21 12:49 |
2019-05-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247795
|
8.8 |
HIGH
Network
|
polarisft
|
intellect_core_banking
|
An issue was discovered in the Armor module in Polaris FT Intellect Core Banking 9.7.1. Input passed through the code parameter in three pages as collaterals/colexe3t.jsp and /references/refsuppu.jsp…
|
CWE-89
SQL Injection
|
CVE-2018-14874
|
2024-11-21 12:49 |
2019-05-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247796
|
7.5 |
HIGH
Network
|
tenda
|
ac7_firmware
ac9_firmware
ac10_firmware
|
An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-14559
|
2024-11-21 12:49 |
2019-04-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247797
|
7.5 |
HIGH
Network
|
tenda
|
ac7_firmware
ac9_firmware
ac10_firmware
|
An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-14557
|
2024-11-21 12:49 |
2019-04-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247798
|
6.1 |
MEDIUM
Network
|
paessler
|
prtg_network_monitor
|
PRTG before 19.1.49.1966 has Cross Site Scripting (XSS) in the WEBGUI.
|
CWE-79
Cross-site Scripting
|
CVE-2018-14683
|
2024-11-21 12:49 |
2019-04-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247799
|
6.5 |
MEDIUM
Network
|
we-con
|
pi_studio
pi_studio_hmi
|
WECON Technology PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior lacks proper validation of user-supplied data, which may result in a read past the end of an allocated …
|
CWE-125
Out-of-bounds Read
|
CVE-2018-14814
|
2024-11-21 12:49 |
2019-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247800
|
8.8 |
HIGH
Adjacent
|
samsung
|
galaxy_s6_firmware
|
Buffer overflow in prot_get_ring_space in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtained code execution on the Wi-Fi chip) to overwri…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-14745
|
2024-11-21 12:49 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
