Export limit exceeded: 92861 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (92861 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2018-16335 | 2 Debian, Libtiff | 2 Debian Linux, Libtiff | 2024-11-21 | N/A |
| newoffsets handling in ChopUpSingleUncompressedStrip in tif_dirread.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file, as demonstrated by tiff2pdf. This is a different vulnerability than CVE-2018-15209. | ||||
| CVE-2018-16334 | 1 Tendacn | 4 Ac10, Ac10 Firmware, Ac9 and 1 more | 2024-11-21 | N/A |
| An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN and AC10 V15.03.06.23_CN devices. The mac parameter in a POST request is used directly in a doSystemCmd call, causing OS command injection. | ||||
| CVE-2018-16330 | 1 Ipandao | 1 Editor.md | 2024-11-21 | N/A |
| Pandao Editor.md 1.5.0 allows XSS via crafted attributes of an invalid IMG element. | ||||
| CVE-2018-16327 | 1 Intelliants | 1 Subrion | 2024-11-21 | N/A |
| There is Stored XSS in Subrion 4.2.1 via the admin panel URL configuration. | ||||
| CVE-2018-16326 | 1 Phpscriptsmall | 1 Olx Clone | 2024-11-21 | N/A |
| PHP Scripts Mall Olx Clone 3.4.2 has XSS. | ||||
| CVE-2018-16325 | 1 Get-simple | 1 Getsimple Cms | 2024-11-21 | N/A |
| There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field. | ||||
| CVE-2018-16324 | 1 Icewarp | 1 Mail Server | 2024-11-21 | N/A |
| In IceWarp Server 12.0.3.1 and before, there is XSS in the /webmail/ username field. | ||||
| CVE-2018-16316 | 1 Portainer | 1 Portainer | 2024-11-21 | N/A |
| A stored Cross-site scripting (XSS) vulnerability in Portainer through 1.19.1 allows remote authenticated users to inject arbitrary JavaScript and/or HTML via the Team Name field. | ||||
| CVE-2018-16313 | 1 Bludit | 1 Bludit | 2024-11-21 | N/A |
| Bludit 2.3.4 allows XSS via a user name. | ||||
| CVE-2018-16301 | 1 Tcpdump | 1 Tcpdump | 2024-11-21 | 7.8 High |
| The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump. | ||||
| CVE-2018-16298 | 1 1234n | 1 Minicms | 2024-11-21 | N/A |
| An issue was discovered in MiniCMS 1.10. There is an mc-admin/post.php?tag= XSS vulnerability for a state=delete, state=draft, or state=publish request. | ||||
| CVE-2018-16285 | 1 Userproplugin | 1 Userpro | 2024-11-21 | N/A |
| The UserPro plugin through 4.9.23 for WordPress allows XSS via the shortcode parameter in a userpro_shortcode_template action to wp-admin/admin-ajax.php. | ||||
| CVE-2018-16282 | 1 Moxa | 2 Edr-810, Edr-810 Firmware | 2024-11-21 | N/A |
| A command injection vulnerability in the web server functionality of Moxa EDR-810 V4.2 build 18041013 allows remote attackers to execute arbitrary OS commands with root privilege via the caname parameter to the /xml/net_WebCADELETEGetValue URI. | ||||
| CVE-2018-16277 | 1 Xwiki | 1 Xwiki | 2024-11-21 | N/A |
| The Image Import function in XWiki through 10.7 has XSS. | ||||
| CVE-2018-16276 | 3 Canonical, Debian, Linux | 3 Ubuntu Linux, Debian Linux, Linux Kernel | 2024-11-21 | 7.8 High |
| An issue was discovered in yurex_read in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. Local attackers could use user access read/writes with incorrect bounds checking in the yurex USB driver to crash the kernel or potentially escalate privileges. | ||||
| CVE-2018-16259 | 1 Soflyy | 1 Wp All Import | 2024-11-21 | N/A |
| There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-settings large_feed_limit. NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of by a logged in administrator | ||||
| CVE-2018-16258 | 1 Soflyy | 1 Wp All Import | 2024-11-21 | N/A |
| There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-import custom_type. NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of by a logged in administrator | ||||
| CVE-2018-16257 | 1 Soflyy | 1 Wp All Import | 2024-11-21 | N/A |
| There are multiple XSS vulnerabilities in WP All Import plugin 3.4.9 for WordPress via action=template. NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of by a logged in administrator | ||||
| CVE-2018-16256 | 1 Soflyy | 1 Wp All Import | 2024-11-21 | N/A |
| There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via Add Filtering Options(Add Rule). NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of by a logged in administrator | ||||
| CVE-2018-16255 | 1 Soflyy | 1 Wp All Import | 2024-11-21 | N/A |
| There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=evaluate. NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of by a logged in administrator | ||||