|
247181
|
7.5 |
HIGH
Network
|
belkin
|
n750_firmware
|
A remote unauthenticated user can enable telnet on the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to set.cgi. When enabled the telnet session requires no password an…
|
NVD-CWE-noinfo
|
CVE-2018-1146
|
2024-11-21 12:59 |
2018-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247182
|
9.8 |
CRITICAL
Network
|
belkin
|
n750_firmware
|
A remote unauthenticated user can overflow a stack buffer in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to proxy.cgi.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-1145
|
2024-11-21 12:59 |
2018-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247183
|
9.8 |
CRITICAL
Network
|
belkin
|
n750_firmware
|
A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to proxy.cgi.
|
CWE-78
OS Command
|
CVE-2018-1144
|
2024-11-21 12:59 |
2018-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247184
|
9.8 |
CRITICAL
Network
|
belkin
|
n750_firmware
|
A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to twonky_command.cgi.
|
CWE-78
OS Command
|
CVE-2018-1143
|
2024-11-21 12:59 |
2018-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247185
|
5.3 |
MEDIUM
Local
|
microsoft
|
windows_10
windows_server_2016
|
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows 10, Windows 1…
|
NVD-CWE-noinfo
|
CVE-2018-1035
|
2024-11-21 12:59 |
2018-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247186
|
6.1 |
MEDIUM
Network
|
wicket-jquery-ui_project
|
wicket-jquery-ui
|
In Apache wicket-jquery-ui <= 6.29.0, <= 7.10.1, <= 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display.
|
CWE-79
Cross-site Scripting
|
CVE-2018-1325
|
2024-11-21 12:59 |
2018-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247187
|
7.5 |
HIGH
Network
|
pivotal_software
|
spring_data_commons
spring_data_rest
|
Spring Data Commons, versions 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property path parser vulnerability caused by unlimited resource allocation. An unauthenticated r…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2018-1274
|
2024-11-21 12:59 |
2018-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247188
|
8.1 |
HIGH
Network
|
redhat
opensuse
debian
|
enterprise_linux_server
virtualization_host
virtualization
gluster_storage
leap
debian_linux
|
A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by …
|
-
|
CVE-2018-1088
|
2024-11-21 12:59 |
2018-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247189
|
5.4 |
MEDIUM
Network
|
ibm
|
websphere_portal
|
IBM WebSphere Portal 8.0.0 through 8.0.0.1, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the inte…
|
CWE-79
Cross-site Scripting
|
CVE-2018-1445
|
2024-11-21 12:59 |
2018-04-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247190
|
6.5 |
MEDIUM
Network
|
ibm
|
websphere_mq
|
An IBM WebSphere MQ 8.0.0.8, 9.0.0.2, and 9.0.4 Client connecting to a MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it. IBM X-Force ID: 137771.
|
NVD-CWE-noinfo
|
CVE-2018-1371
|
2024-11-21 12:59 |
2018-04-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
