Export limit exceeded: 44685 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (44685 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2018-17384 | 1 Thephpfactory | 1 Swap Factory | 2024-11-21 | N/A |
| SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filter_order_Dir or filter_order parameter. | ||||
| CVE-2018-17383 | 1 Thephpfactory | 1 Collection Factory | 2024-11-21 | N/A |
| SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filter_order or filter_order_Dir parameter. | ||||
| CVE-2018-17382 | 1 Thephpfactory | 1 Jobs Factory | 2024-11-21 | N/A |
| SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filter_letter parameter. | ||||
| CVE-2018-17381 | 1 Thephpfactory | 1 Dutch Auction Factory | 2024-11-21 | N/A |
| SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the filter_order_Dir or filter_order parameter. | ||||
| CVE-2018-17380 | 1 Thephpfactory | 1 Article Factory Manager | 2024-11-21 | N/A |
| SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the start_date, m_start_date, or m_end_date parameter. | ||||
| CVE-2018-17379 | 1 Thephpfactory | 1 Raffle Factory | 2024-11-21 | N/A |
| SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filter_order_Dir or filter_order parameter. | ||||
| CVE-2018-17378 | 1 Thephpfactory | 1 Penny Auction Factory | 2024-11-21 | N/A |
| SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filter_order_Dir or filter_order parameter. | ||||
| CVE-2018-17377 | 1 Extensiondeveloper | 1 Questions | 2024-11-21 | N/A |
| SQL Injection exists in the Questions 1.4.3 component for Joomla! via the term, userid, users, or groups parameter. | ||||
| CVE-2018-17376 | 1 Thephpfactory | 1 Reverse Auction Factory | 2024-11-21 | N/A |
| SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filter_order_Dir, cat, or filter_letter parameter. | ||||
| CVE-2018-17375 | 1 Joomlathat | 1 Music Collection | 2024-11-21 | N/A |
| SQL Injection exists in the Music Collection 3.0.3 component for Joomla! via the id parameter. | ||||
| CVE-2018-17374 | 1 Thephpfactory | 1 Auction Factory | 2024-11-21 | N/A |
| SQL Injection exists in the Auction Factory 4.5.5 component for Joomla! via the filter_order_Dir or filter_order parameter. | ||||
| CVE-2018-17283 | 1 Zohocorp | 1 Manageengine Opmanager | 2024-11-21 | N/A |
| Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Analyzer to add an admin user via /api/json/v2/admin/addUser or conduct a SQL Injection attack via the /api/json/device/setManaged name parameter. | ||||
| CVE-2018-17254 | 1 Arkextensions | 1 Jck Editor | 2024-11-21 | 9.8 Critical |
| The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter. | ||||
| CVE-2018-17246 | 2 Elastic, Redhat | 3 Kibana, Openshift, Openshift Container Platform | 2024-11-21 | N/A |
| Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system. | ||||
| CVE-2018-17243 | 1 Zohocorp | 1 Manageengine Opmanager | 2024-11-21 | N/A |
| Global Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection. | ||||
| CVE-2018-17232 | 1 Slack Archivebot Project | 1 Slack Archivebot | 2024-11-21 | 9.8 Critical |
| SQL injection vulnerability in archivebot.py in docmarionum1 Slack ArchiveBot (aka slack-archive-bot) before 2018-09-19 allows remote attackers to execute arbitrary SQL commands via the text parameter to cursor.execute(). | ||||
| CVE-2018-17202 | 1 Apache | 1 Commons Imaging | 2024-11-21 | N/A |
| Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging. | ||||
| CVE-2018-17197 | 1 Apache | 1 Tika | 2024-11-21 | N/A |
| A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika. | ||||
| CVE-2018-17195 | 1 Apache | 1 Nifi | 2024-11-21 | N/A |
| The template upload API endpoint accepted requests from different domain when sent in conjunction with ARP spoofing + man in the middle (MiTM) attack, resulting in a CSRF attack. The required attack vector is complex, requiring a scenario with client certificate authentication, same subnet access, and injecting malicious code into an unprotected (plaintext HTTP) website which the targeted user later visits, but the possible damage warranted a Severe severity level. Mitigation: The fix to apply Cross-Origin Resource Sharing (CORS) policy request filtering was applied on the Apache NiFi 1.8.0 release. Users running a prior 1.x release should upgrade to the appropriate release. | ||||
| CVE-2018-17181 | 1 Open-emr | 1 Openemr | 2024-11-21 | N/A |
| An issue was discovered in OpenEMR before 5.0.1 Patch 7. SQL Injection exists in the SaveAudit function in /portal/lib/paylib.php and the portalAudit function in /portal/lib/appsql.class.php. | ||||