VYPR

CVEs

407,981 total · page 5933 of 8,160

AllCriticalHighKEV
  • CVE-2018-19110MedNov 8, 2018
    Tianti
    tianti
    risk 0.42cvss 6.5epss 0.01

    The skin-management feature in tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/user/skin/list directly because controller\usercontroller.java maps a /skin/list request to the function skinList, and lacks an…

  • CVE-2018-19109HigNov 8, 2018
    Tianti
    tianti
    risk 0.57cvss 8.8epss 0.02

    tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/cms/column/list directly to read the column list page or edit a column.

  • CVE-2018-19108MedNov 8, 2018
    Exiv2
    Exiv2
    risk 0.42cvss 6.5epss 0.02

    In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service (infinite loop) caused by an integer overflow via a crafted PSD image file.

  • CVE-2018-19107MedNov 8, 2018
    Exiv2
    Exiv2
    risk 0.42cvss 6.5epss 0.02

    In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image reader) may suffer from a denial of service (heap-based buffer over-read) caused by an integer overflow via a crafted PSD image file.

  • CVE-2018-19105HigNov 8, 2018
    Librecad
    Librecad
    risk 0.51cvss 7.8epss 0.02

    LibreCAD 2.1.3 allows remote attackers to cause a denial of service (0x89C04589 write access violation and application crash) or possibly have unspecified other impact via a crafted file.

  • CVE-2018-19104HigNov 8, 2018
    Bagecms
    Bagecms
    risk 0.57cvss 8.8epss 0.01

    In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can be used to upload arbitrary files and get server privileges.

  • CVE-2018-16253MedNov 7, 2018
    axTLS
    axTLS
    risk 0.38cvss 5.9epss 0.01

    In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification does not properly verify the ASN.1 metadata. Consequently, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation…

  • CVE-2018-16150MedNov 7, 2018
    axTLS
    axTLS
    risk 0.38cvss 5.9epss 0.01

    In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification does not reject excess data after the hash value. Consequently, a remote attacker can forge signatures when small public exponents are being used, which could lead to…

  • CVE-2018-16149MedNov 7, 2018
    axTLS
    axTLS
    risk 0.38cvss 5.9epss 0.01

    In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification blindly trusts the declared lengths in the ASN.1 structure. Consequently, when small public exponents are being used, a remote attacker can generate purposefully crafted…

  • CVE-2018-19093HigNov 7, 2018
    Mz Automation
    Libiec61850
    risk 0.49cvss 7.5epss 0.02

    An issue has been found in libIEC61850 v1.3. It is a SEGV in ControlObjectClient_setCommandTerminationHandler in client/client_control.c. NOTE: the software maintainer disputes this because it requires incorrect usage of the client_example_control program

  • CVE-2018-19092MedNov 7, 2018
    Yzmcms
    Yzmcms
    risk 0.40cvss 6.1epss 0.01

    An issue was discovered in YzmCMS v5.2. It has XSS via a search/index/archives/pubtime/ query string, as demonstrated by the search/index/archives/pubtime/1526387722/page/1.html URI. NOTE: this does not obtain a user's cookie.

  • CVE-2018-19091MedNov 7, 2018
    Tianti
    tianti
    risk 0.35cvss 5.4epss 0.01

    tianti 2.3 has reflected XSS in the user management module via the tianti-module-admin/user/list userName parameter.

  • CVE-2018-19090MedNov 7, 2018
    Tianti
    tianti
    risk 0.35cvss 5.4epss 0.01

    tianti 2.3 has stored XSS in the article management module via an article title.

  • CVE-2018-19089MedNov 7, 2018
    Tianti
    tianti
    risk 0.35cvss 5.4epss 0.01

    tianti 2.3 has stored XSS in the userlist module via the tianti-module-admin/user/ajax/save_role name parameter, which is mishandled in tianti-module-admin\src\main\webapp\WEB-INF\views\user\user_list.jsp.

  • CVE-2018-19083MedNov 7, 2018
    Wecenter
    Wecenter
    risk 0.40cvss 6.1epss 0.01

    WeCenter 3.2.0 through 3.2.2 has XSS in the views/default/question/index.tpl.html htmlspecialchars_decode function via the /?/publish/ajax/publish_question/ question_content parameter.

  • CVE-2018-19082CriNov 7, 2018
    Foscam
    Opticam i5
    risk 0.64cvss 9.8epss 0.02

    An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to conduct stack-based buffer overflow attacks via the IPv4Address field.

  • CVE-2018-19081CriNov 7, 2018
    Foscam
    Opticam i5
    risk 0.64cvss 9.8epss 0.05

    An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to execute arbitrary OS commands via the IPv4Address field.

  • CVE-2018-19080MedNov 7, 2018
    Foscam
    Opticam i5
    risk 0.40cvss 6.1epss 0.01

    An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetHostname method allows unauthenticated persistent XSS.

  • CVE-2018-19079HigNov 7, 2018
    Foscam
    Opticam i5
    risk 0.49cvss 7.5epss 0.02

    An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SystemReboot method allows unauthenticated reboot.

  • CVE-2018-19078CriNov 7, 2018
    Foscam
    Opticam i5
    risk 0.64cvss 9.8epss 0.02

    An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The response to an ONVIF media GetStreamUri request contains the administrator username and password.

  • CVE-2018-19077HigNov 7, 2018
    Foscam
    Opticam i5
    risk 0.49cvss 7.5epss 0.02

    An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. RtspServer allows remote attackers to cause a denial of service (daemon hang or restart) via a negative integer in the RTSP Content-Length header.

  • CVE-2018-19076CriNov 7, 2018
    Foscam
    C2
    risk 0.64cvss 9.8epss 0.02

    An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The FTP and RTSP services make it easier for attackers to conduct brute-force…

  • CVE-2018-19075MedNov 7, 2018
    Foscam
    C2
    risk 0.35cvss 5.3epss 0.02

    An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The firewall feature makes it easier for remote attackers to ascertain…

  • CVE-2018-19074HigNov 7, 2018
    Foscam
    C2
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The firewall has no effect except for blocking port 443 and partially blocking…

  • CVE-2018-19073HigNov 7, 2018
    Foscam
    C2
    risk 0.47cvss 7.2epss 0.02

    An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. They allow attackers to execute arbitrary OS commands via shell metacharacters…

  • CVE-2018-19072MedNov 7, 2018
    Foscam
    C2
    risk 0.36cvss 5.5epss 0.00

    An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. /mnt/mtd/app has 0777 permissions, allowing local users to replace an archive…

  • CVE-2018-19071HigNov 7, 2018
    Foscam
    C2
    risk 0.51cvss 7.8epss 0.00

    An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. /mnt/mtd/boot.sh has 0777 permissions, allowing local users to control the…

  • CVE-2018-19070HigNov 7, 2018
    Foscam
    C2
    risk 0.47cvss 7.2epss 0.04

    An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. They allow remote attackers to execute arbitrary OS commands via shell…

  • CVE-2018-19069CriNov 7, 2018
    Foscam
    C2
    risk 0.64cvss 9.8epss 0.02

    An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The CGIProxy.fcgi?cmd=setTelnetSwitch feature is authorized for the root user…

  • CVE-2018-19068MedNov 7, 2018
    Foscam
    Opticam i5
    risk 0.32cvss 4.9epss 0.01

    An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The CGIProxy.fcgi?cmd=setTelnetSwitch feature is authorized for hidden factory credentials.

  • CVE-2018-19067CriNov 7, 2018
    Foscam
    C2
    risk 0.64cvss 9.8epss 0.02

    An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. There is a hardcoded Ak47@99 password for the factory~ account.

  • CVE-2018-19066HigNov 7, 2018
    Foscam
    C2
    risk 0.49cvss 7.5epss 0.02

    An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The exported device configuration is encrypted with the hardcoded Pxift*…

  • CVE-2018-19065HigNov 7, 2018
    Foscam
    C2
    risk 0.49cvss 7.5epss 0.02

    An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The exported device configuration is encrypted with the hardcoded BpP+2R9*Q…

  • CVE-2018-19064CriNov 7, 2018
    Foscam
    C2
    risk 0.64cvss 9.8epss 0.02

    An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ftpuser1 account has a blank password, which cannot be changed.

  • CVE-2018-19063CriNov 7, 2018
    Foscam
    C2
    risk 0.64cvss 9.8epss 0.02

    An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The admin account has a blank password.

  • CVE-2018-19061CriNov 7, 2018
    Dedecms
    Dedecms
    risk 0.64cvss 9.8epss 0.02

    DedeCMS 5.7 SP2 has SQL Injection via the dede\co_do.php ids parameter.

  • CVE-2018-19060MedNov 7, 2018
    Xorg
    Poppler
    risk 0.42cvss 6.5epss 0.02

    An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating a filename of an embedded file before constructing a save path.

  • CVE-2018-19059MedNov 7, 2018
    Xorg
    Poppler
    risk 0.42cvss 6.5epss 0.02

    An issue was discovered in Poppler 0.71.0. There is a out-of-bounds read in EmbFile::save2 in FileSpec.cc, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating embedded files before save attempts.

  • CVE-2018-19058MedNov 7, 2018
    Xorg
    Poppler
    risk 0.42cvss 6.5epss 0.02

    An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service because EmbFile::save2 in FileSpec.cc lacks a stream check before saving an embedded file.

  • CVE-2018-18590CriNov 7, 2018
    Microfocus
    Operations Bridge
    risk 0.62cvss 9.6epss 0.01

    A potential remote code execution and information disclosure vulnerability exists in Micro Focus Operations Bridge containerized suite versions 2017.11, 2018.02, 2018.05, 2018.08. This vulnerability could allow for information disclosure.

  • CVE-2018-19057MedNov 7, 2018
    Sparksuite
    SimpleMDE
    risk 0.40cvss 6.1epss 0.01

    SimpleMDE 1.11.2 has XSS via an onerror attribute of a crafted IMG element, or via certain input with [ and ( characters, which is mishandled during construction of an A element.

  • CVE-2018-19056MedNov 7, 2018
    Ipandao
    Editor.md
    risk 0.40cvss 6.1epss 0.01

    pandao Editor.md 1.5.0 has DOM XSS via input starting with a "<<" substring, which is mishandled during construction of an A element.

  • CVE-2018-8021CriNov 7, 2018
    Apache
    Superset
    risk 0.64cvss 9.8epss 0.53

    Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to possible remote code execution. Note Superset 0.23 was released prior to any Superset release under the Apache Software Foundation.

  • CVE-2018-16845MedNov 7, 2018
    Nginx
    Nginx
    risk 0.40cvss 6.1epss 0.10

    nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker process, cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted mp4 file.…

  • CVE-2018-16844HigNov 7, 2018
    Nginx
    Nginx
    risk 0.43cvss 7.5epss 0.13

    nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is used in…

  • CVE-2018-16843HigNov 7, 2018
    Nginx
    Nginx
    risk 0.53cvss 7.5epss 0.48

    nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is…

  • CVE-2018-19053HigNov 7, 2018
    Pbootcmspro
    Pbootcms
    risk 0.47cvss 7.2epss 0.01

    PbootCMS 1.2.2 allows remote attackers to execute arbitrary PHP code by specifying a .php filename in a "SET GLOBAL general_log_file" statement, followed by a SELECT statement containing this PHP code.

  • CVE-2018-19052HigNov 7, 2018
    Lighttpd
    Lighttpd
    risk 0.50cvss 7.5epss 0.14

    An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific mod_alias configuration where the matched alias lacks a trailing '/' character, but…

  • CVE-2018-19047CriNov 7, 2018
    Mpdf
    Mpdf
    risk 0.65cvss 10.0epss 0.02

    mPDF through 7.1.6, if deployed as a web application that accepts arbitrary HTML, allows SSRF, as demonstrated by a '<img src="http://192.168' substring that triggers a call to getImage in Image/ImageProcessor.php. NOTE: the software maintainer disputes this, stating "If you…

  • CVE-2018-19051MedNov 7, 2018
    Metinfo
    Metinfo
    risk 0.40cvss 6.1epss 0.01

    MetInfo 6.1.3 has XSS via the admin/index.php?a=dogetpassword abt_type parameter.