VYPR

CVEs

407,996 total · page 5899 of 8,160

AllCriticalHighKEV
  • CVE-2018-19357HigDec 24, 2018
    XMPlay
    XMPlay
    risk 0.51cvss 7.8epss 0.03

    XMPlay 3.8.3 allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted http:// URL in a .m3u file.

  • CVE-2018-20431MedDec 24, 2018
    GNU
    Libextractor
    risk 0.42cvss 6.5epss 0.02

    GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function process_metadata() in plugins/ole2_extractor.c.

  • CVE-2018-20430MedDec 24, 2018
    GNU
    Libextractor
    risk 0.42cvss 6.5epss 0.02

    GNU Libextractor through 1.8 has an out-of-bounds read vulnerability in the function history_extract() in plugins/ole2_extractor.c, related to EXTRACTOR_common_convert_to_utf8 in common/convert.c.

  • CVE-2018-20429HigDec 24, 2018
    Libming
    Libming
    risk 0.57cvss 8.8epss 0.01

    libming 0.4.8 has a NULL pointer dereference in the getName function of the decompile.c file, a different vulnerability than CVE-2018-7872 and CVE-2018-9165.

  • CVE-2018-20428HigDec 24, 2018
    Libming
    Libming
    risk 0.57cvss 8.8epss 0.01

    libming 0.4.8 has a NULL pointer dereference in the strlenext function of the decompile.c file, a different vulnerability than CVE-2018-7874.

  • CVE-2018-20427HigDec 24, 2018
    Libming
    Libming
    risk 0.57cvss 8.8epss 0.02

    libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file, a different vulnerability than CVE-2018-9132.

  • CVE-2018-20426HigDec 24, 2018
    Libming
    Libming
    risk 0.57cvss 8.8epss 0.01

    libming 0.4.8 has a NULL pointer dereference in the newVar3 function of the decompile.c file, a different vulnerability than CVE-2018-7866.

  • CVE-2018-20425HigDec 24, 2018
    Libming
    Libming
    risk 0.57cvss 8.8epss 0.01

    libming 0.4.8 has a NULL pointer dereference in the pushdup function of the decompile.c file.

  • CVE-2018-20424MedDec 24, 2018
    Discuz
    Discuzx
    risk 0.38cvss 5.9epss 0.01

    Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to delete the common_member_wechatmp data structure via an ac=unbindmp request to plugin.php.

  • CVE-2018-20423HigDec 24, 2018
    Discuz
    Discuzx
    risk 0.53cvss 8.1epss 0.01

    Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass a "disabled registration" setting by adding a non-existing wxopenid value to the plugin.php ac=wxregister query string.

  • CVE-2018-20422HigDec 24, 2018
    Discuz
    Discuzx
    risk 0.53cvss 8.1epss 0.01

    Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass authentication by leveraging a non-empty #wechat#common_member_wechatmp to gain login access to an account via a plugin.php ac=wxregister request (the attacker does not have control over which…

  • CVE-2018-20418MedDec 24, 2018
    Craftcms
    Craft CMS
    risk 0.34cvss 4.8epss 0.04

    index.php?p=admin/actions/entries/save-entry in Craft CMS 3.0.25 allows XSS by saving a new title from the console tab.

  • CVE-2018-20421HigDec 24, 2018
    Ethereum
    Go Ethereum
    risk 0.49cvss 7.5epss 0.01

    Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array in memory, and then writing data to a single memory location with a large index number, as demonstrated by use of "assembly { mstore }"…

  • CVE-2018-20420MedDec 24, 2018
    Weberp
    Weberp
    risk 0.32cvss 4.9epss 0.01

    In webERP 4.15, Z_CreateCompanyTemplateFile.php has Incorrect Access Control, leading to the overwrite of an existing .sql file on the target web site by creating a template and then using ../ directory traversal in the TemplateName parameter.

  • CVE-2018-20419HigDec 24, 2018
    Douco
    Douphp
    risk 0.57cvss 8.8epss 0.00

    DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account.

  • CVE-2018-20410HigDec 24, 2018
    Wellintech
    Kingscada
    risk 0.49cvss 7.5epss 0.02

    WellinTech KingSCADA before 3.7.0.0.1 contains a stack-based buffer overflow. The vulnerability is triggered when sending a specially crafted packet to the AlarmServer (AEserver.exe) service listening on TCP port 12401.

  • CVE-2018-20409MedDec 23, 2018
    Bento4
    Bento4
    risk 0.42cvss 6.5epss 0.01

    An issue was discovered in Bento4 1.5.1-627. There is a heap-based buffer over-read in AP4_AvccAtom::Create in Core/Ap4AvccAtom.cpp, as demonstrated by mp42hls.

  • CVE-2018-20408MedDec 23, 2018
    Bento4
    Bento4
    risk 0.42cvss 6.5epss 0.01

    An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4_StdcFileByteStream::Create in System/StdC/Ap4StdCFileByteStream.cpp, as demonstrated by mp42hls.

  • CVE-2018-20407MedDec 23, 2018
    Bento4
    Bento4
    risk 0.42cvss 6.5epss 0.01

    An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp, as demonstrated by mp42hls.

  • CVE-2018-20406HigDec 23, 2018
    Python (programming language)
    Python
    risk 0.49cvss 7.5epss 0.06

    Modules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value that is mishandled during a "resize to twice the size" attempt. This issue might cause memory exhaustion, but is only relevant if the pickle format is used for serializing tens or…

  • CVE-2018-20405LowDec 23, 2018
    Bigtreecms
    Bigtree
    risk 0.18cvss 2.7epss 0.01

    BigTree 4.3 allows full path disclosure via authenticated admin/news/ input that triggers a syntax error. NOTE: This has been disputed with the following reasoning: "The issue reported requires full developer level access to the content management system where cross site…

  • CVE-2018-20402HigDec 23, 2018
    Safe
    Fme Server
    risk 0.57cvss 8.8epss 0.01

    Safe Software FME Server through 2018.1 creates and enables three additional accounts in addition to the initial administrator account. The passwords to the three accounts are the same as the usernames, which are guest, user, and author. Logging in with these accounts will grant…

  • CVE-2018-20401CriDec 23, 2018
    Zoomtel
    5352 Firmware
    risk 0.64cvss 9.8epss 0.02

    Zoom 5352 v5.5.8.6Y devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20400CriDec 23, 2018
    Ubee
    DVW2108
    risk 0.64cvss 9.8epss 0.02

    Ubee DVW2108 6.28.1017 and DVW2110 6.28.2012 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20399CriDec 23, 2018
    Motorola
    SBG901
    risk 0.64cvss 9.8epss 0.03

    Motorola SBG901 SBG901-2.10.1.1-GA-00-581-NOSH, SBG941 SBG941-2.11.0.0-GA-07-624-NOSH, and SVG1202 SVG1202-2.1.0.0-GA-14-LTSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20398CriDec 23, 2018
    Skyworth
    CM5100-511
    risk 0.64cvss 9.8epss 0.02

    Skyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2, and CM5100.g2 4.1.0.17 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20397CriDec 23, 2018
    Mplus
    CBC383Z
    risk 0.64cvss 9.8epss 0.02

    mplus CBC383Z CBC383Z_mplus_MDr026 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20396CriDec 23, 2018
    NET&SYS
    MNG2120J
    risk 0.64cvss 9.8epss 0.01

    NET&SYS MNG2120J 5.76.1006c and MNG6300 5.83.6305jrc2 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20395CriDec 23, 2018
    NETWAVE
    MNG6200
    risk 0.64cvss 9.8epss 0.02

    NETWAVE MNG6200 C4835805jrc12FU121413.cpr devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20394CriDec 23, 2018
    Thomson
    DWG849
    risk 0.64cvss 9.8epss 0.02

    Thomson DWG849 STC0.01.16, DWG850-4 ST9C.05.25, DWG855 ST80.20.26, and TWG870 STB2.01.36 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20393CriDec 23, 2018
    Technicolor
    Tc7200
    risk 0.64cvss 9.8epss 0.02

    Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a, TC7110.AR STD3.38.03, TC7110.B STC8.62.02, TC7110.D STDB.79.02, TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT,…

  • CVE-2018-20392CriDec 23, 2018
    S A
    WebSTAR DPC2100
    risk 0.64cvss 9.8epss 0.02

    S-A WebSTAR DPC2100 v2.0.2r1256-060303 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20391CriDec 23, 2018
    TEKNOTEL
    CBW700N
    risk 0.64cvss 9.8epss 0.02

    TEKNOTEL CBW700N 81.447.392110.729.024 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20390CriDec 23, 2018
    KAON
    CG2001-AN22A
    risk 0.64cvss 9.8epss 0.02

    Kaonmedia CG2001-AN22A 1.2.1, CG2001-UDBNA 3.0.8, and CG2001-UN2NA 3.0.8 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20389CriDec 23, 2018
    Dlink
    DCM-604
    risk 0.64cvss 9.8epss 0.02

    D-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20388CriDec 23, 2018
    Comtrend
    CM-6200un
    risk 0.64cvss 9.8epss 0.02

    Comtrend CM-6200un 123.447.007 and CM-6300n 123.553mp1.005 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20387CriDec 23, 2018
    Bnmux
    BCW700J
    risk 0.64cvss 9.8epss 0.02

    Bnmux BCW700J 5.20.7, BCW710J 5.30.6a, and BCW710J2 5.30.16 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20386CriDec 23, 2018
    Arris
    SBG6580
    risk 0.64cvss 9.8epss 0.02

    ARRIS SBG6580-2 D30GW-SEAEAGLE-1.5.2.5-GA-00-NOSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20385CriDec 23, 2018
    Castlenet
    CBV38Z4EC
    risk 0.64cvss 9.8epss 0.02

    CastleNet CBV38Z4EC 125.553mp1.39219mp1.899.007, CBV38Z4ECNIT 125.553mp1.39219mp1.899.005ITT, CBW383G4J 37.556mp5.008, and CBW38G4J 37.553mp1.008 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0…

  • CVE-2018-20384CriDec 23, 2018
    iNovo Broadband
    IB-8120-W21
    risk 0.64cvss 9.8epss 0.02

    iNovo Broadband IB-8120-W21 139.4410mp1.004200.002 and IB-8120-W21E1 139.4410mp1.3921132mp1.899.004404.004 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20383CriDec 23, 2018
    Arris
    DG950A
    risk 0.64cvss 9.8epss 0.02

    ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20382CriDec 23, 2018
    Jiuzhou
    BCM93383WRG
    risk 0.64cvss 9.8epss 0.02

    Jiuzhou BCM93383WRG 139.4410mp1.3921132mp1.899.004404.004 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20381CriDec 23, 2018
    Technicolor
    DPC2320
    risk 0.64cvss 9.8epss 0.02

    Technicolor DPC2320 dpc2300r2-v202r1244101-150420a-v6 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20380CriDec 23, 2018
    Ambit
    DDW2600
    risk 0.64cvss 9.8epss 0.02

    Ambit DDW2600 5.100.1009, DDW2602 5.105.1003, T60C926 4.64.1012, and U10C019 5.66.1026 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

  • CVE-2018-20379MedDec 23, 2018
    Technicolor
    DPC3928SL
    risk 0.31cvss 4.7epss 0.01

    Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-160428a devices allow XSS via a Cross Protocol Injection attack with setSSID of 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.1.1.3.10001.

  • CVE-2018-20377CriDec 23, 2018
    Arcadyan
    ARV7519RW22-A-L T VR9 1.2
    risk 0.64cvss 9.8epss 0.08

    Orange Livebox 00.96.320S devices allow remote attackers to discover Wi-Fi credentials via /get_getnetworkconf.cgi on port 8080, leading to full control if the admin password equals the Wi-Fi password or has the default admin value. This is related to Firmware…

  • CVE-2018-20376MedDec 23, 2018
    Tinycc
    Tinycc
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 8 byte out of bounds write in the asm_parse_directive function in tccasm.c.

  • CVE-2018-20375MedDec 23, 2018
    Tinycc
    Tinycc
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 8 byte out of bounds write in the sym_pop function in tccgen.c.

  • CVE-2018-20374MedDec 23, 2018
    Tinycc
    Tinycc
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 8 byte out of bounds write in the use_section1 function in tccasm.c.

  • CVE-2018-20373MedDec 23, 2018
    Tenda
    ADSL modem routers
    risk 0.35cvss 5.4epss 0.01

    Tenda ADSL modem routers 1.0.1 allow XSS via the hostname of a DHCP client.