Export limit exceeded: 27572 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 89955 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (89955 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2018-12393 | 4 Canonical, Debian, Mozilla and 1 more | 12 Ubuntu Linux, Debian Linux, Firefox and 9 more | 2024-11-21 | N/A |
| A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an internal UTF-16 representation could result in allocating a buffer too small for the conversion. This leads to a possible out-of-bounds write. *Note: 64-bit builds are not vulnerable to this issue.*. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3. | ||||
| CVE-2018-12357 | 1 Arista | 1 Cloudvision Portal | 2024-11-21 | N/A |
| Arista CloudVision Portal through 2018.1.1 has Incorrect Permissions. | ||||
| CVE-2018-12355 | 1 Eng | 1 Knowage | 2024-11-21 | 6.1 Medium |
| Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name or description field to the "Olap Schemas' Catalogue" catalogue. | ||||
| CVE-2018-12353 | 1 Knowage-suite | 1 Knowage | 2024-11-21 | N/A |
| Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name field to the "Business Model's Catalogue" catalogue. | ||||
| CVE-2018-12339 | 1 Articlecms Project | 1 Articlecms | 2024-11-21 | N/A |
| ArticleCMS through 2017-02-19 has XSS via an "add an article" action. | ||||
| CVE-2018-12335 | 1 Ecos | 1 System Management Appliance | 2024-11-21 | N/A |
| Incorrect access control in ECOS System Management Appliance (aka SMA) 5.2.68 allows a user to compromise authentication keys, and access and manipulate security relevant configurations, via unrestricted database access during Easy Enrollment. | ||||
| CVE-2018-12327 | 2 Ntp, Redhat | 3 Ntp, Enterprise Linux, Rhel Eus | 2024-11-21 | N/A |
| Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whether there are any common situations in which ntpq or ntpdc is used with a command line from an untrusted source. | ||||
| CVE-2018-12323 | 1 Apollotechnologiesinc | 2 Momentum Axel 720p, Momentum Axel 720p Firmware | 2024-11-21 | N/A |
| An issue was discovered on Momentum Axel 720P 5.1.8 devices. A password of EHLGVG is hard-coded for the root and admin accounts, which makes it easier for physically proximate attackers to login at the console. | ||||
| CVE-2018-12319 | 1 Asustor | 2 As602t, Data Master | 2024-11-21 | N/A |
| Denial-of-service in the login page of ASUSTOR ADM 3.1.1 allows attackers to prevent users from signing in by placing malformed text in the title. | ||||
| CVE-2018-12317 | 1 Asustor | 2 As-602t, Data Master | 2024-11-21 | N/A |
| OS command injection in group.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root by modifying the "name" POST parameter. | ||||
| CVE-2018-12316 | 1 Asustor | 2 As602t, Data Master | 2024-11-21 | N/A |
| OS Command Injection in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands by modifying the filename POST parameter. | ||||
| CVE-2018-12313 | 1 Asustor | 2 As602t, Data Master | 2024-11-21 | N/A |
| OS command injection in snmp.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands without authentication via the "rocommunity" URL parameter. | ||||
| CVE-2018-12312 | 1 Asustor | 2 As602t, Data Master | 2024-11-21 | N/A |
| OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "secret_key" URL parameter. | ||||
| CVE-2018-12311 | 1 Asustor | 2 As602t, Data Master | 2024-11-21 | N/A |
| Cross-site scripting vulnerability in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to execute arbitrary JavaScript when a file is moved via a malicious filename. | ||||
| CVE-2018-12310 | 1 Asustor | 2 As602t, Data Master | 2024-11-21 | N/A |
| Cross-site scripting in the Login page in ASUSTOR ADM version 3.1.1 allows attackers to execute JavaScript via the System Announcement feature. | ||||
| CVE-2018-12307 | 1 Asustor | 2 As602t, Data Master | 2024-11-21 | N/A |
| OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "name" POST parameter. | ||||
| CVE-2018-12305 | 1 Asustor | 1 Data Master | 2024-11-21 | N/A |
| Cross-site scripting in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to execute JavaScript by uploading SVG images with embedded JavaScript. | ||||
| CVE-2018-12304 | 1 Seagate | 1 Nas Os | 2024-11-21 | N/A |
| Cross-site scripting in Application Manager in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via multiple application metadata fields: Short Description, Publisher Name, Publisher Contact, or Website URL. | ||||
| CVE-2018-12303 | 1 Seagate | 1 Nas Os | 2024-11-21 | N/A |
| Cross-site scripting in filebrowser in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via directory names. | ||||
| CVE-2018-12302 | 1 Seagate | 1 Nas Os | 2024-11-21 | N/A |
| Missing HTTPOnly flag on session cookies in the Seagate NAS OS version 4.3.15.1 web application allows attackers to steal session tokens via cross-site scripting. | ||||