CVE Vulnerability

Home » CVE’s

CVE’s

CVE
Vendors
Products
Updated
CVSS v2
CVSS v3
CVE-2018-20571
2019-01-11
N/A
7.5 HIGH
DamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted admin.php?s=Tpl/Add/id request, as demonstrated by admin.php?s=Tpl/Add/id/.PublicConfigconfig.ini.php to read the global configuration file.
CVE-2018-20570
2020-09-25
N/A
6.5 MEDIUM
jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read.
CVE-2018-2057
2019-01-22
N/A
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none.
CVE-2018-20569
2019-01-10
N/A
9.8 CRITICAL
user/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.
CVE-2018-20568
2019-01-28
N/A
9.8 CRITICAL
Administrator/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.
CVE-2018-20567
2019-10-03
N/A
5.3 MEDIUM
An issue was discovered in DouCo DouPHP 1.5 20181221. installindex.php allows a reload of the product in opportunistic circumstances in which install.lock cannot be read.
CVE-2018-20566
2019-01-04
N/A
5.3 MEDIUM
An issue was discovered in DouCo DouPHP 1.5 20181221. It allows full path disclosure in "Smarty error: unable to read resource" error messages for a crafted installation page.
CVE-2018-20565
2019-01-04
N/A
4.8 MEDIUM
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/nav.php?rec=update has XSS via the nav_name parameter.
CVE-2018-20564
2019-01-04
N/A
4.8 MEDIUM
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/product_category.php?rec=update has XSS via the cat_name parameter.
CVE-2018-20563
2019-01-04
N/A
4.8 MEDIUM
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/mobile.php?rec=system&act=update has XSS via the mobile_name parameter.
1 … 2,020 2,021 2,022 2,023 2,024 … 11,258