17 November 2018

20 results · Feed

• Unscored —
  CVE-2018-19349

  In SeaCMS v6.64, there is SQL injection via the admin_makehtml.php topic parameter because of mishandling in include/mk…

  Nov 17, 2018
• Unscored —
  CVE-2018-19350

  In SeaCMS v6.6.4, there is stored XSS via the member.php?action=chgpwdsubmit email parameter during a password change, …

  Nov 17, 2018
• Unscored —
  CVE-2018-19346

  The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote at…

  Nov 17, 2018
• Unscored —
  CVE-2018-19348

  The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote at…

  Nov 17, 2018
• Unscored —
  CVE-2018-19341

  The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote at…

  Nov 17, 2018
• Unscored —
  CVE-2018-19345

  The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote at…

  Nov 17, 2018
• Unscored —
  CVE-2018-19342

  The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote at…

  Nov 17, 2018
• Unscored —
  CVE-2018-19347

  The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote at…

  Nov 17, 2018
• Unscored —
  CVE-2018-19343

  The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote at…

  Nov 17, 2018
• Unscored —
  CVE-2018-19344

  The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote at…

  Nov 17, 2018
• Unscored —
  CVE-2018-19340

  Guriddo Form PHP 5.3 has XSS via the demos/jqform/defaultnodb/default.php OrderID, ShipName, ShipAddress, ShipCity, Shi…

  Nov 17, 2018
• Unscored —
  CVE-2018-19333

  pkg/sentry/kernel/shm/shm.go in Google gVisor before 2018-11-01 allows attackers to overwrite memory locations in proce…

  Nov 17, 2018
• Unscored —
  CVE-2018-19328

  LAOBANCMS 2.0 allows install/mysql_hy.php?riqi=../ Directory Traversal.

  Nov 17, 2018
• Unscored —
  CVE-2018-19329

  GreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files by modifying a base64-encoded p…

  Nov 17, 2018
• Unscored —
  CVE-2018-19327

  An issue was discovered in JTBC(PHP) 3.0.1.7. aboutus/manage.php?type=action&action=add allows CSRF.

  Nov 17, 2018
• Unscored —
  CVE-2018-19332

  An issue was discovered in S-CMS v1.5. There is a CSRF vulnerability that can add a new user via the admin/ajax.php?typ…

  Nov 17, 2018
• Unscored —
  CVE-2018-19331

  An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter.

  Nov 17, 2018
• Unscored —
  CVE-2018-19326 Scanner template

  Zyxel VMG1312-B10D devices before 5.13(AAXA.8)C0 allow ../ Directory Traversal, as demonstrated by reading /etc/passwd.

  Nov 17, 2018
• Unscored —
  CVE-2018-19324

  kimsQ Rb 2.3.0 allows XSS via the second input field to the /?r=home&mod=mypage&page=info URI.

  Nov 17, 2018
• High 7.2
  CVE-2018-19274

  phpBB Remote Code Execution

  Passing an absolute path to a file_exists check in phpBB before 3.2.4 allows Remote Code Execution through Object Injection by employing Phar deserialization when an attacker has access to the Admin Control Panel with founder permissions.

  phpbb/phpbb phpbb3 Ubuntu Packagist
  Nov 17, 2018