Skip to main content
CVE-2018-11742 Dec 26, 21:29 CRITICAL POC THREAT Act Now

NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Univerge Sv9100 Webpro Firmware Nec
NVD Exploit-DB
CVSS 3.1
9.8
EPSS
14.3%
CVE-2018-11741 Dec 26, 21:29 CRITICAL POC THREAT Act Now

NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable Session IDs that result in Account Information Disclosure via Home.htm?sessionId=#####&GOTO(8) URIs. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Univerge Sv9100 Webpro Firmware Nec
NVD Exploit-DB
CVSS 3.1
9.8
EPSS
17.9%
CVE-2018-20480 Dec 26, 03:29 CRITICAL POC Act Now

An issue was discovered in S-CMS 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi S Cms
NVD
CVSS 3.0
9.8
EPSS
1.1%
CVE-2018-20479 Dec 26, 03:29 CRITICAL POC Act Now

An issue was discovered in S-CMS 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi S Cms
NVD
CVSS 3.0
9.8
EPSS
1.1%
CVE-2018-20477 Dec 26, 03:29 CRITICAL POC Act Now

An issue was discovered in S-CMS 3.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi S Cms
NVD
CVSS 3.0
9.8
EPSS
1.1%
CVE-2018-19873 Dec 26, 21:29 CRITICAL PATCH Act Now

An issue was discovered in Qt before 5.11.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

Buffer Overflow Debian Canonical Debian Linux Leap +4
NVD
CVSS 3.1
9.8
EPSS
3.4%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy