Skip to main content
CVE-2018-19222 Nov 12, 20:29 CRITICAL POC Act Now

An issue was discovered in LAOBANCMS 2.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Laobancms
NVD GitHub
CVSS 3.0
9.8
EPSS
1.4%
CVE-2018-19221 Nov 12, 20:29 CRITICAL POC Act Now

An issue was discovered in LAOBANCMS 2.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Laobancms
NVD GitHub
CVSS 3.0
9.8
EPSS
1.2%
CVE-2018-19220 Nov 12, 20:29 CRITICAL POC Act Now

An issue was discovered in LAOBANCMS 2.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE Code Injection Laobancms
NVD GitHub
CVSS 3.0
9.8
EPSS
1.7%
CVE-2018-19207 Nov 12, 17:29 CRITICAL POC THREAT Act Now

The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb->prepare() input is mishandled, as exploited. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress RCE Wp Gdpr Compliance Wordpress Plugin
NVD
CVSS 3.0
9.8
EPSS
87.3%
CVE-2018-19196 Nov 12, 05:29 CRITICAL POC Act Now

An issue was discovered in XiaoCms 20141229. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE Code Injection Xiaocms
NVD GitHub
CVSS 3.0
9.8
EPSS
3.3%
CVE-2018-19185 Nov 12, 05:29 CRITICAL POC Act Now

An issue has been found in libIEC61850 v1.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Libiec61850 Mz Automation
NVD GitHub
CVSS 3.0
9.8
EPSS
2.1%
CVE-2018-19199 Nov 12, 15:29 CRITICAL PATCH Act Now

An issue was discovered in uriparser before 0.9.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Integer Overflow vulnerability could allow attackers to cause unexpected behavior through arithmetic overflow.

Buffer Overflow Integer Overflow Debian Debian Linux Uriparser +1
NVD GitHub
CVSS 3.0
9.8
EPSS
2.3%
CVE-2018-19198 Nov 12, 15:29 CRITICAL PATCH Act Now

An issue was discovered in uriparser before 0.9.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Debian Debian Linux Uriparser +1
NVD GitHub
CVSS 3.0
9.8
EPSS
2.4%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy