Results
16,509· Page 322/331The WPGlobus plugin 1.9.6 for WordPress has CSRF via wp-admin/options.php.
ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImageAttributes function in coders/json.c, as demonstrated by the
ImageMagick 7.0.7-22 Q16 has memory leaks in the ReadDCMImage function in coders/dcm.c.
In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization, which allows attackers to
Cheetah Mobile Armorfly Browser & Downloader 1.1.05.0010, when installed on unspecified "older" Android platforms, allow
Cheetah Mobile CM Browser 5.22.06.0012, when installed on unspecified "older" Android platforms, allows Same Origin Poli
An Unrestricted Upload Of File With Dangerous Type issue was discovered in Advantech WebAccess versions prior to 8.3. We
A use-after-free issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows an unauthenticated
Seagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the uploadTelemetry and getLogs
A stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious attackers to cause a crash o
In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the JSON, XML, NTP, XMPP, and GDB dissectors could crash. This was addr
In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the WCP dissector could crash. This was addressed in epan/dissectors/pa
In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the IxVeriWave file parser could crash. This was addressed in wiretap/v
Cross-site scripting (XSS) vulnerability in downloads/actions/editdownload.php in the DragonByte Technologies vBDownload
Multiple cross-site scripting (XSS) vulnerabilities in actions/main.php in the DragonByte Technologies Forumon RPG modul
Multiple cross-site scripting (XSS) vulnerabilities in the DragonByte Technologies vbActivity module before 3.0.1 for vB
Multiple cross-site scripting (XSS) vulnerabilities in the Shout Reports in the DragonByte Technologies vBShout module b
Multiple cross-site request forgery (CSRF) vulnerabilities in Family Connections CMS (aka FCMS) 2.9 and earlier allow re
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vu
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 is vulnerable to cross-site scripting. This vulnerabi
IBM WebSphere Application Server (IBM Liberty for Java for Bluemix 3.15) could allow a local attacker to obtain sensitiv
IBM Security Access Manager Appliance 9.0.0 allows web pages to be stored locally which can be read by another user on t
Race condition in Jungo Windriver 12.5.1 allows local users to cause a denial of service (buffer overflow) or gain syste
Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitive informat
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inje
Test your stack for 2018issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.