|
252021
|
6.5 |
MEDIUM
Network
|
bfgminer
cgminer_project
|
bfgminer
cgminer
|
The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to write the miner configuration file to arbitrary locations on the server due to missing …
|
CWE-22
Path Traversal
|
CVE-2018-10057
|
2024-11-21 12:40 |
2018-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252022
|
5.5 |
MEDIUM
Local
|
kubernetes
|
kubernetes
|
In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior to version 1.9.6, the kubectl cp command insecurely handles tar data returned from the container, and can be caused to overwrite arbitrary…
|
CWE-20
Improper Input Validation
|
CVE-2018-1002100
|
2024-11-21 12:40 |
2018-06-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252023
|
5.5 |
MEDIUM
Local
|
graphviz
fedoraproject
canonical
|
graphviz
fedora
ubuntu_linux
|
NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application c…
|
CWE-476
NULL Pointer Dereference
|
CVE-2018-10196
|
2024-11-21 12:40 |
2018-05-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252024
|
6.1 |
MEDIUM
Network
|
dolibarr
|
dolibarr
|
Cross-site scripting (XSS) vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php.
|
CWE-79
Cross-site Scripting
|
CVE-2018-10095
|
2024-11-21 12:40 |
2018-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252025
|
9.8 |
CRITICAL
Network
|
dolibarr
|
dolibarr
|
SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes.
|
CWE-89
SQL Injection
|
CVE-2018-10094
|
2024-11-21 12:40 |
2018-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252026
|
8.0 |
HIGH
Network
|
dolibarr
|
dolibarr
|
The admin panel in Dolibarr before 7.0.2 might allow remote attackers to execute arbitrary commands by leveraging support for updating the antivirus command and parameters used to scan file uploads.
|
CWE-862
Missing Authorization
|
CVE-2018-10092
|
2024-11-21 12:40 |
2018-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252027
|
7.8 |
HIGH
Local
|
estsoft
|
alzip
|
ESTsoft ALZip before 10.76 allows local users to execute arbitrary code via creating a malicious .DLL file and installing it in a specific directory: %PROGRAMFILES%\ESTsoft\ALZip\Formats, %PROGRAMFIL…
|
CWE-426
Untrusted Search Path
|
CVE-2018-10027
|
2024-11-21 12:40 |
2018-05-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252028
|
8.8 |
HIGH
Network
|
intenogroup
|
iopsys_firmware
|
p910nd on Inteno IOPSYS 2.0 through 4.2.0 allows remote attackers to read, or append data to, arbitrary files via requests on TCP port 9100.
|
NVD-CWE-noinfo
|
CVE-2018-10123
|
2024-11-21 12:40 |
2018-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252029
|
7.5 |
HIGH
Network
|
haproxy
redhat
|
haproxy
enterprise_linux
|
An issue was discovered in HAProxy before 1.8.8. The incoming H2 frame length was checked against the max_frame_size setting instead of being checked against the bufsize. The max_frame_size only appl…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-10184
|
2024-11-21 12:40 |
2018-05-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252030
|
8.8 |
HIGH
Network
|
tp-link
|
eap_controller
|
TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows do not control privileges for usage of the Web API, allowing a low-privilege user to make any request as an Administra…
|
CWE-269
Improper Privilege Management
|
CVE-2018-10168
|
2024-11-21 12:40 |
2018-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
