CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities (CVSS score between 6 and 6.99)

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
951 CVE-2018-11514 434 2018-05-28 2018-06-28
6.5
None Remote Low Single system Partial Partial Partial
PHP Scripts Mall Naukri Clone Script through 3.0.3 allows Unrestricted Upload of a File with a Dangerous Type in edit_resume_det.php, as demonstrated by changing .docx to .php.
952 CVE-2018-11501 352 CSRF 2018-05-26 2018-08-28
6.8
None Remote Medium Not required Partial Partial Partial
PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via user_submit.php?upd=2.
953 CVE-2018-11500 352 CSRF 2018-05-26 2018-06-29
6.8
None Remote Medium Not required Partial Partial Partial
An issue was discovered in PublicCMS V4.0.20180210. There is a CSRF vulnerability in "admin/sysUser/save.do?callbackType=closeCurrent&navTabId=sysUser/list" that can add an admin account.
954 CVE-2018-11498 119 DoS Exec Code Overflow 2018-05-26 2018-07-05
6.8
None Remote Medium Not required Partial Partial Partial
In Lizard v1.0 and LZ5 v2.0 (the prior release, before the product was renamed), there is an unchecked buffer size during a memcpy in the Lizard_decompress_LIZv1 function (lib/lizard_decompress_liz.h). Remote attackers can leverage this vulnerability to cause a denial of service via a crafted input file, as well as achieve remote code execution.
955 CVE-2018-11494 434 Exec Code Dir. Trav. 2018-05-26 2018-06-29
6.0
None Remote Medium Single system Partial Partial Partial
The "program extension upload" feature in OpenCart through 3.0.2.0 has a six-step process (upload, install, unzip, move, xml, remove) that allows attackers to execute arbitrary code if the remove step is skipped, because the attacker can discover a secret temporary directory name (containing 10 random digits) via a directory traversal attack involving language_info['code'].
956 CVE-2018-11493 352 CSRF 2018-05-26 2018-06-29
6.8
None Remote Medium Not required Partial Partial Partial
An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can add a friendship link via index.php?m=link&f=index&v=add.
957 CVE-2018-11490 119 DoS Overflow 2018-05-26 2018-07-02
6.8
None Remote Medium Not required Partial Partial Partial
The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain "Private->RunningCode - 2" array index is not checked. This will lead to a denial of service or possibly unspecified other impact.
958 CVE-2018-11489 119 DoS Overflow 2018-05-26 2018-07-02
6.8
None Remote Medium Not required Partial Partial Partial
The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain CrntCode array index is not checked. This will lead to a denial of service or possibly unspecified other impact.
959 CVE-2018-11481 20 Exec Code 2018-05-30 2018-07-05
6.5
None Remote Low Single system Partial Partial Partial
TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices allow authenticated remote code execution via crafted JSON data because /usr/lib/lua/luci/torchlight/validator.lua does not block various punctuation characters.
960 CVE-2018-11475 384 2018-05-25 2018-06-28
6.0
None Remote Medium Single system Partial Partial Partial
Monstra CMS 3.0.4 has a Session Management Issue in the Users tab. A password change at users/1/edit does not invalidate a session that is open in a different browser.
961 CVE-2018-11474 384 2018-05-25 2018-06-28
6.0
None Remote Medium Single system Partial Partial Partial
Monstra CMS 3.0.4 has a Session Management Issue in the Administrations Tab. A password change at admin/index.php?id=users&action=edit&user_id=1 does not invalidate a session that is open in a different browser.
962 CVE-2018-11470 89 Sql 2018-05-25 2018-06-27
6.5
None Remote Low Single system Partial Partial Partial
iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel.
963 CVE-2018-11455 22 Exec Code Dir. Trav. 2018-08-07 2018-10-10
6.8
None Remote Medium Not required Partial Partial Partial
A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4), Automation License Manager 6 (All versions < 6.0.1). A directory traversal vulnerability could allow a remote attacker to move arbitrary files, which can result in code execution, compromising confidentiality, integrity and availability of the system. Successful exploitation requires a network connection to the affected device. The attacker does not need privileges or special conditions of the system, but user interaction is required.
964 CVE-2018-11447 352 CSRF 2018-06-26 2018-08-24
6.8
None Remote Medium Not required Partial Partial Partial
A vulnerability has been identified in SCALANCE M875 (All versions). The web interface on port 443/tcp could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by an legitimate user, who must be authenticated to the web interface as administrative user. A successful attack could allow an attacker to interact with the web interface as an administrative user. This could allow the attacker to read or modify the device configuration, or to exploit other vulnerabilities that require authentication as administrative user. At the time of advisory publication no public exploitation of this security vulnerability was known.
965 CVE-2018-11445 352 CSRF 2018-05-25 2018-07-02
6.8
None Remote Medium Not required Partial Partial Partial
A CSRF issue was discovered on the User Add/System Settings Page (system-settings-user-new2.php) in EasyService Billing 1.0. A User can be added with the Admin role.
966 CVE-2018-11442 352 CSRF 2018-05-25 2018-07-02
6.8
None Remote Medium Not required Partial Partial Partial
A CSRF issue was discovered in EasyService Billing 1.0, which was triggered via a quotation-new3-new2.php?add=true&id= URI, as demonstrated by adding a new quotation.
967 CVE-2018-11440 119 Overflow 2018-05-25 2018-06-25
6.8
None Remote Medium Not required Partial Partial Partial
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c.
968 CVE-2018-11438 119 Exec Code Overflow 2018-05-30 2018-06-26
6.8
None Remote Medium Not required Partial Partial Partial
The mobi_decompress_lz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution (heap-based buffer overflow) via a crafted mobi file.
969 CVE-2018-11416 415 DoS 2018-05-24 2018-06-26
6.8
None Remote Medium Not required Partial Partial Partial
jpegoptim.c in jpegoptim 1.4.5 (fixed in 1.4.6) has an invalid use of realloc() and free(), which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
970 CVE-2018-11414 89 Sql 2018-05-24 2018-06-25
6.5
None Remote Low Single system Partial Partial Partial
An issue was discovered in BearAdmin 0.5. There is admin/admin_log/index.html?user_id= SQL injection because admin\controller\AdminLog.php constructs a MySQL query improperly.
971 CVE-2018-11406 352 CSRF 2018-06-13 2018-08-05
6.8
None Remote Medium Not required Partial Partial Partial
An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11. By default, a user's session is invalidated when the user is logged out. This behavior can be disabled through the invalidate_session option. In this case, CSRF tokens were not erased during logout which allowed for CSRF token fixation.
972 CVE-2018-11405 352 CSRF 2018-05-24 2018-07-02
6.8
None Remote Medium Not required Partial Partial Partial
Kliqqi 2.0.2 has CSRF in admin/admin_users.php.
973 CVE-2018-11392 434 Exec Code 2018-05-29 2018-12-11
6.5
None Remote Low Single system Partial Partial Partial
An arbitrary file upload vulnerability in /classes/profile.class.php in Jigowatt "PHP Login & User Management" before 4.1.1, as distributed in the Envato Market, allows any remote authenticated user to upload .php files to the web server via a profile avatar field. This results in arbitrary code execution by requesting the .php file.
974 CVE-2018-11385 384 2018-06-13 2018-08-05
6.8
None Remote Medium Not required Partial Partial Partial
An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11. A session fixation vulnerability within the "Guard" login feature may allow an attacker to impersonate a victim towards the web application if the session id value was previously known to the attacker.
975 CVE-2018-11378 119 Overflow 2018-05-22 2018-06-28
6.8
None Remote Medium Not required Partial Partial Partial
The wasm_dis() function in libr/asm/arch/wasm/wasm.c in or possibly have unspecified other impact via a crafted WASM file.
976 CVE-2018-11371 352 CSRF 2018-05-22 2018-07-02
6.8
None Remote Medium Not required Partial Partial Partial
SkyCaiji 1.2 allows CSRF to add an Administrator user.
977 CVE-2018-11349 352 CSRF 2018-07-07 2018-09-05
6.8
None Remote Medium Not required Partial Partial Partial
The administration panel of Jirafeau before 3.4.1 is vulnerable to three CSRF attacks on search functionalities: search_by_name, search_by_hash, and search_link.
978 CVE-2018-11345 434 Exec Code 2018-05-21 2018-08-16
6.5
None Remote Low Single system Partial Partial Partial
An unrestricted file upload vulnerability in upload.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to upload supplied data via the POST parameter filename. This can be used to place attacker controlled code on the file system that can then be executed. Further, the filename parameter is vulnerable to path traversal and allows the attacker to place the file anywhere on the system.
979 CVE-2018-11341 22 Dir. Trav. 2018-05-21 2018-08-16
6.5
None Remote Low Single system Partial Partial Partial
Directory traversal in importuser.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to navigate the file system via the filename parameter.
980 CVE-2018-11323 264 2018-05-22 2018-06-22
6.5
None Remote Low Single system Partial Partial Partial
An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to modify the access levels of user groups with higher permissions.
981 CVE-2018-11322 434 2018-05-22 2018-06-22
6.0
None Remote Medium Single system Partial Partial Partial
An issue was discovered in Joomla! Core before 3.8.8. Depending on the server configuration, PHAR files might be handled as executable PHP scripts by the webserver.
982 CVE-2018-11311 798 2018-05-20 2018-06-26
6.4
None Remote Low Not required Partial Partial None
A hardcoded FTP username of myscada and password of Vikuk63 in 'myscadagate.exe' in mySCADA myPRO 7 allows remote attackers to access the FTP server on port 2121, and upload files or list directories, by entering these credentials.
983 CVE-2018-11278 125 2018-09-18 2018-11-09
6.6
None Local Low Not required Complete None Complete
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Venus HW searches for start code when decoding input bit stream buffers. If start code is not found in entire buffer, there is over-fetch beyond allocation length. This leads to page fault.
984 CVE-2018-11243 415 DoS 2018-05-18 2018-06-20
6.8
None Remote Medium Not required Partial Partial Partial
PackLinuxElf64::unpack in p_lx_elf.cpp in UPX 3.95 allows remote attackers to cause a denial of service (double free), limit the ability of a malware scanner to operate on the entire original data, or possibly have unspecified other impact via a crafted file.
985 CVE-2018-11236 190 Exec Code Overflow 2018-05-18 2018-10-31
6.8
None Remote Medium Not required Partial Partial Partial
stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution.
986 CVE-2018-11235 254 Exec Code Dir. Trav. Bypass 2018-05-30 2018-10-21
6.8
None Remote Medium Not required Partial Partial Partial
In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, a malicious project can execute an arbitrary script on a machine that runs "git clone --recurse-submodules" because submodule "names" are obtained from this file, and then appended to $GIT_DIR/modules, leading to directory traversal with "../" in a name. Finally, post-checkout hooks from a submodule are executed, bypassing the intended design in which hooks are not obtained from a remote server.
987 CVE-2018-11231 89 Sql 2018-05-23 2018-06-26
6.8
None Remote Medium Not required Partial Partial Partial
In the Divido plugin for OpenCart, there is SQL injection. Attackers can use SQL injection to get some confidential information.
988 CVE-2018-11230 416 DoS 2018-05-17 2018-06-20
6.8
None Remote Medium Not required Partial Partial Partial
jbig2_add_page in jbig2enc.cc in libjbig2enc.a in jbig2enc 0.29 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted file.
989 CVE-2018-11226 119 DoS Overflow 2018-05-17 2018-06-20
6.8
None Remote Medium Not required Partial Partial Partial
The getString function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact.
990 CVE-2018-11225 119 DoS Overflow 2018-05-17 2018-06-25
6.8
None Remote Medium Not required Partial Partial Partial
The dcputs function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact.
991 CVE-2018-11188 77 2018-06-01 2018-06-08
6.5
None Remote Low Single system Partial Partial Partial
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 46 of 46).
992 CVE-2018-11187 77 2018-06-01 2018-06-08
6.5
None Remote Low Single system Partial Partial Partial
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 45 of 46).
993 CVE-2018-11186 77 2018-06-01 2018-06-08
6.5
None Remote Low Single system Partial Partial Partial
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 44 of 46).
994 CVE-2018-11185 77 2018-06-01 2018-06-08
6.5
None Remote Low Single system Partial Partial Partial
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 43 of 46).
995 CVE-2018-11184 77 2018-06-01 2018-06-08
6.5
None Remote Low Single system Partial Partial Partial
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 42 of 46).
996 CVE-2018-11183 77 2018-06-01 2018-06-08
6.5
None Remote Low Single system Partial Partial Partial
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 41 of 46).
997 CVE-2018-11182 77 2018-06-01 2018-06-08
6.5
None Remote Low Single system Partial Partial Partial
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 40 of 46).
998 CVE-2018-11181 77 2018-06-01 2018-06-08
6.5
None Remote Low Single system Partial Partial Partial
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 39 of 46).
999 CVE-2018-11180 77 2018-06-01 2018-06-08
6.5
None Remote Low Single system Partial Partial Partial
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 38 of 46).
1000 CVE-2018-11179 77 2018-06-01 2018-06-08
6.5
None Remote Low Single system Partial Partial Partial
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 37 of 46).
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.