Search vulnerabilities

Results 425,826

CVE-2018-0524

Jubatus 1.0.2 and earlier allows remote code execution via unspecified vectors.

CVSS 3.0 · 7.3 High EPSS 2.4% KEV · Not listed
Vendors
Products
CVE-2018-0521

Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vectors.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
CVE-2018-0520

Cross-site request forgery (CSRF) vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Fsi
CVE-2018-0519

Cross-site scripting vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Fsi
CVE-2018-0518

LINE for iOS version 7.1.3 to 7.1.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVSS 3.0 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2018-0517

Untrusted search path vulnerability in Anshin net security for Windows Version 16.0.1.44 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
CVE-2018-0516

Untrusted search path vulnerability in FLET'S v4 / v6 address selection tool allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
CVE-2018-0515

Untrusted search path vulnerability in "FLET'S Azukeru Backup Tool" version 1.5.2.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
CVE-2018-0514

MP Form Mail CGI eCommerce Edition Ver 2.0.13 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.

CVSS 3.0 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Products
CVE-2018-0513

Cross-site scripting vulnerability in MTS Simple Booking C, MTS Simple Booking Business version 1.28.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Products
CVE-2018-0512

Devices with IP address setting tool "MagicalFinder" provided by I-O DATA DEVICE, INC. allow authenticated attackers to execute arbitrary OS commands via unspecified vectors.

CVSS 3.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2018-0511

Cross-site scripting vulnerability in WP Retina 2x prior to version 5.2.2 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2018-0510

Buffer overflow in epg search result viewer (kkcald) 0.7.19 and earlier allows remote attackers to perform unintended operations or execute DoS (denial of service) attacks via unspecified vectors.

CVSS 3.0 · 9.8 Critical EPSS 2.0% KEV · Not listed
Vendors
Products
CVE-2018-0509

Cross-site request forgery (CSRF) vulnerability in epg search result viewer (kkcald) 0.7.21 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2018-0508

Cross-site scripting vulnerability in epg search result viewer (kkcald) 0.7.21 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2018-0507

Untrusted search path vulnerability in FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.11 and earlier versions, FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.11 and earlier versions allow an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVE-2018-0506

Nootka 1.4.4 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.

CVSS 3.0 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Products