Export limit exceeded: 350669 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 350669 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (350669 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2018-6209 | 1 Maxpcsecure | 1 Anti Virus | 2024-11-21 | N/A |
| In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxCryptMon.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220019. | ||||
| CVE-2018-6208 | 1 Maxpcsecure | 1 Anti Virus | 2024-11-21 | N/A |
| In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x22000d. | ||||
| CVE-2018-6207 | 1 Maxpcsecure | 1 Anti Virus | 2024-11-21 | N/A |
| In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220019. | ||||
| CVE-2018-6206 | 1 Maxpcsecure | 1 Anti Virus | 2024-11-21 | N/A |
| In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220011. | ||||
| CVE-2018-6205 | 1 Maxpcsecure | 1 Anti Virus | 2024-11-21 | N/A |
| In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220009. | ||||
| CVE-2018-6204 | 1 Maxpcsecure | 1 Anti Virus | 2024-11-21 | N/A |
| In Max Secure Anti Virus 19.0.3.019,, the driver file (SDActMon.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220019. | ||||
| CVE-2018-6203 | 1 Escanav | 1 Anti-virus | 2024-11-21 | N/A |
| In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8300210C. | ||||
| CVE-2018-6202 | 1 Escanav | 1 Anti-virus | 2024-11-21 | N/A |
| In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x830020F8. | ||||
| CVE-2018-6201 | 1 Escanav | 1 Anti-virus | 2024-11-21 | N/A |
| In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x830020E0 or 0x830020E4. | ||||
| CVE-2018-6200 | 1 Vbulletin | 1 Vbulletin | 2024-11-21 | N/A |
| vBulletin 3.x.x and 4.2.x through 4.2.5 has an open redirect via the redirector.php url parameter. | ||||
| CVE-2018-6198 | 2 Canonical, Tats | 2 Ubuntu Linux, W3m | 2024-11-21 | N/A |
| w3m through 0.5.3 does not properly handle temporary files when the ~/.w3m directory is unwritable, which allows a local attacker to craft a symlink attack to overwrite arbitrary files. | ||||
| CVE-2018-6197 | 2 Canonical, Tats | 2 Ubuntu Linux, W3m | 2024-11-21 | N/A |
| w3m through 0.5.3 is prone to a NULL pointer dereference flaw in formUpdateBuffer in form.c. | ||||
| CVE-2018-6196 | 2 Canonical, Tats | 2 Ubuntu Linux, W3m | 2024-11-21 | N/A |
| w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feed_table_block_tag function in table.c does not prevent a negative indent value. | ||||
| CVE-2018-6195 | 1 Splashing Images Project | 1 Splashing Images | 2024-11-21 | 7.2 High |
| admin/partials/wp-splashing-admin-main.php in the Splashing Images plugin (wp-splashing-images) before 2.1.1 for WordPress allows authenticated (administrator, editor, or author) remote attackers to conduct PHP Object Injection attacks via crafted serialized data in the 'session' HTTP GET parameter to wp-admin/upload.php. | ||||
| CVE-2018-6194 | 1 Splashing Images Project | 1 Splashing Images | 2024-11-21 | N/A |
| A cross-site scripting (XSS) vulnerability in admin/partials/wp-splashing-admin-sidebar.php in the Splashing Images plugin (wp-splashing-images) before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the search parameter to wp-admin/upload.php. | ||||
| CVE-2018-6193 | 1 Routers2 Project | 1 Routers2 | 2024-11-21 | N/A |
| A Cross-Site Scripting (XSS) vulnerability was found in Routers2 2.24, affecting the 'rtr' GET parameter in a page=graph action to cgi-bin/routers2.pl. | ||||
| CVE-2018-6192 | 2 Artifex, Debian | 2 Mupdf, Debian Linux | 2024-11-21 | N/A |
| In Artifex MuPDF 1.12.0, the pdf_read_new_xref function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentation violation and application crash) via a crafted pdf file. | ||||
| CVE-2018-6191 | 1 Artifex | 1 Mujs | 2024-11-21 | N/A |
| The js_strtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation. | ||||
| CVE-2018-6190 | 1 Netis-systems | 2 Wf2419, Wf2419 Firmware | 2024-11-21 | N/A |
| Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page. | ||||
| CVE-2018-6189 | 1 F-secure | 1 Radar | 2024-11-21 | N/A |
| F-Secure Radar (on-premises) before 2018-02-15 has XSS via vectors involving the Tags parameter in the JSON request body in an outbound request for the /api/latest/vulnerabilityscans/tags/batch resource, aka a "suggested metadata tags for assets" issue. | ||||