| Max CVSS | 7.6 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-10255 | 6.5 |
A CSV Injection vulnerability was discovered in clustercoding Blog Master Pro v1.0 that allows a user with low level privileges to inject a command that will be included in the exported CSV file, leading to possible code execution.
|
24-08-2020 - 17:37 | 01-05-2018 - 19:29 | |
| CVE-2018-10257 | 6.5 |
A CSV Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to inject a command that will be included in the exported CSV file, leading to possible code execution.
|
24-08-2020 - 17:37 | 01-05-2018 - 19:29 | |
| CVE-2018-10258 | 6.5 |
A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with low level privileges to inject a command that will be included in the exported CSV file, leading to possible code execution.
|
24-08-2020 - 17:37 | 01-05-2018 - 19:29 | |
| CVE-2018-0886 | 7.6 |
The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Window
|
13-03-2019 - 13:45 | 14-03-2018 - 17:29 | |
| CVE-2018-8716 | 3.5 |
WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers.
|
28-02-2019 - 13:20 | 25-04-2018 - 20:29 | |
| CVE-2018-10260 | 6.5 |
A Local File Inclusion vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged user.
|
13-06-2018 - 17:28 | 01-05-2018 - 19:29 | |
| CVE-2018-10256 | 6.5 |
A SQL Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to directly modify the SQL query.
|
13-06-2018 - 17:24 | 01-05-2018 - 19:29 | |
| CVE-2018-10259 | 3.5 |
An Authenticated Stored XSS vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged user.
|
05-06-2018 - 18:39 | 01-05-2018 - 19:29 | |
| CVE-2007-5111 | 4.3 |
A certain ActiveX control in EBCRYPT.DLL 2.0 in EB Design ebCrypt allows remote attackers to cause a denial of service (crash) via a string argument to the AddString method.
|
29-09-2017 - 01:29 | 26-09-2007 - 23:17 | |
| CVE-2007-5110 | 7.5 |
Absolute path traversal vulnerability in the EbCrypt.eb_c_PRNGenerator.1 ActiveX control in EBCRYPT.DLL 2.0.0.2087 and earlier in EB Design ebCrypt allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to
|
29-09-2017 - 01:29 | 26-09-2007 - 23:17 |