| Max CVSS | 10.0 | Min CVSS | 4.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-16720 | 10.0 |
A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within the directory structure of the target device.
|
09-10-2019 - 23:25 | 05-01-2018 - 08:29 | |
| CVE-2018-7582 | 5.0 |
WebLog Expert Web Server Enterprise 9.4 allows Remote Denial Of Service (daemon crash) via a long HTTP Accept Header to TCP port 9991.
|
03-10-2019 - 00:03 | 09-03-2018 - 20:29 | |
| CVE-2018-7581 | 4.6 |
\ProgramData\WebLog Expert\WebServer\WebServer.cfg in WebLog Expert Web Server Enterprise 9.4 has weak permissions (BUILTIN\Users:(ID)C), which allows local users to set a cleartext password and login as admin.
|
03-10-2019 - 00:03 | 09-03-2018 - 20:29 | |
| CVE-2018-7890 | 10.0 |
A remote code execution issue was discovered in Zoho ManageEngine Applications Manager before 13.6 (build 13640). The publicly accessible testCredential.do endpoint takes multiple user inputs and validates supplied credentials by accessing a specifie
|
03-10-2019 - 00:03 | 08-03-2018 - 22:29 | |
| CVE-2018-4121 | 6.8 |
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is
|
08-03-2019 - 16:06 | 03-04-2018 - 06:29 | |
| CVE-2017-15367 | 7.5 |
Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server.
|
09-10-2018 - 15:07 | 07-03-2018 - 20:29 | |
| CVE-2018-9161 | 7.5 |
Prisma Industriale Checkweigher PrismaWEB 1.21 allows remote attackers to discover the hardcoded prisma password for the prismaweb account by reading user/scripts/login_par.js.
|
11-05-2018 - 17:04 | 31-03-2018 - 22:29 | |
| CVE-2018-7756 | 10.0 |
RunExeFile.exe in the installer for DEWESoft X3 SP1 (64-bit) devices does not require authentication for sessions on TCP port 1999, which allows remote attackers to execute arbitrary code or access internal commands, as demonstrated by a RUN command
|
12-04-2018 - 13:17 | 15-03-2018 - 01:29 | |
| CVE-2018-7474 | 7.5 |
An issue was discovered in Textpattern CMS 4.6.2 and earlier. It is possible to inject SQL code in the variable "qty" on the page index.php.
|
11-04-2018 - 17:37 | 14-03-2018 - 14:29 | |
| CVE-2007-4983 | 10.0 |
Directory traversal vulnerability in the JetAudio.Interface.1 ActiveX control in JetFlExt.dll in jetAudio 7.0.3 Basic and 7.0.3.3016 allows remote attackers to create or overwrite arbitrary local files via a ..\ (dot dot backslash) in the second argu
|
29-09-2017 - 01:29 | 19-09-2007 - 19:17 |