Skip to main content
CVE-2018-13862 Jul 17, 14:29 CRITICAL POC THREAT Act Now

Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allow unauthorized remote attackers to reset the authentication via the "/xml/system/setAttribute.xml" URL, using. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Webtouch Setup V9 Firmware Trivum
NVD Exploit-DB
CVSS 3.0
9.8
EPSS
50.6%
CVE-2018-13859 Jul 17, 14:29 CRITICAL POC THREAT Act Now

MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34 build 13381 - 12.07.18, allow unauthorized remote attackers to reset the authentication via the. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass C4 Professional Firmware Trivum
NVD Exploit-DB
CVSS 3.0
9.8
EPSS
17.9%
CVE-2018-14334 Jul 17, 02:29 CRITICAL POC Act Now

manager/editor/upload.php in joyplus-cms 1.6.0 allows arbitrary file upload because detection of a prohibited file extension simply sets the $errm value, and does not otherwise alter the flow of. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP File Upload Joyplus Cms Joyplus Cms Project
NVD GitHub
CVSS 3.0
9.8
EPSS
1.7%
CVE-2018-14362 Jul 17, 17:29 CRITICAL PATCH Act Now

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

Buffer Overflow Debian Red Hat Canonical Debian Linux +9
NVD GitHub
CVSS 3.1
9.8
EPSS
3.7%
CVE-2018-14361 Jul 17, 17:29 CRITICAL PATCH Act Now

An issue was discovered in NeoMutt before 2018-07-16. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Debian Debian Linux Neomutt
NVD GitHub
CVSS 3.1
9.8
EPSS
2.5%
CVE-2018-14360 Jul 17, 17:29 CRITICAL PATCH Act Now

An issue was discovered in NeoMutt before 2018-07-16. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Debian Debian Linux Neomutt
NVD GitHub
CVSS 3.1
9.8
EPSS
2.7%
CVE-2018-14359 Jul 17, 17:29 CRITICAL PATCH Act Now

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Buffer Overflow Debian Canonical Debian Linux Ubuntu Linux +2
NVD GitHub
CVSS 3.1
9.8
EPSS
4.1%
CVE-2018-14358 Jul 17, 17:29 CRITICAL PATCH Act Now

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Debian Canonical Debian Linux +3
NVD GitHub
CVSS 3.1
9.8
EPSS
3.9%
CVE-2018-14357 Jul 17, 17:29 CRITICAL PATCH Act Now

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This OS Command Injection vulnerability could allow attackers to execute arbitrary operating system commands on the host.

Command Injection Debian Red Hat Canonical Debian Linux +9
NVD GitHub
CVSS 3.1
9.8
EPSS
5.0%
CVE-2018-14356 Jul 17, 17:29 CRITICAL PATCH Act Now

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Memory Corruption Debian Canonical Debian Linux +3
NVD GitHub
CVSS 3.1
9.8
EPSS
3.2%
CVE-2018-14354 Jul 17, 17:29 CRITICAL PATCH Act Now

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This OS Command Injection vulnerability could allow attackers to execute arbitrary operating system commands on the host.

Command Injection Debian Red Hat Canonical Debian Linux +9
NVD GitHub
CVSS 3.1
9.8
EPSS
6.2%
CVE-2018-14353 Jul 17, 17:29 CRITICAL PATCH Act Now

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Integer Overflow Debian Canonical Debian Linux +3
NVD GitHub
CVSS 3.1
9.8
EPSS
3.7%
CVE-2018-14352 Jul 17, 17:29 CRITICAL PATCH Act Now

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Debian Canonical Debian Linux +3
NVD GitHub
CVSS 3.1
9.8
EPSS
4.0%
CVE-2018-14351 Jul 17, 17:29 CRITICAL PATCH Act Now

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Debian Canonical Debian Linux Ubuntu Linux +2
NVD GitHub
CVSS 3.1
9.8
EPSS
3.2%
CVE-2018-14350 Jul 17, 17:29 CRITICAL PATCH Act Now

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Debian Canonical Debian Linux +3
NVD GitHub
CVSS 3.1
9.8
EPSS
5.0%
CVE-2018-14349 Jul 17, 17:29 CRITICAL PATCH Act Now

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Debian Canonical Debian Linux Ubuntu Linux +2
NVD GitHub
CVSS 3.1
9.8
EPSS
3.2%
CVE-2018-13861 Jul 17, 14:29 CRITICAL Act Now

Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allows unauthorized remote attackers to reboot or execute other functions via the "/xml/system/control.xml" URL,. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Webtouch Setup V9 Firmware Trivum
NVD
CVSS 3.0
9.8
EPSS
2.3%
CVE-2018-13858 Jul 17, 14:29 CRITICAL Act Now

MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional allows unauthorized remote attackers to reboot or execute other functions via the "/xml/system/control.xml" URL, using. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass C4 Professional Firmware Trivum
NVD
CVSS 3.0
9.8
EPSS
2.3%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy