İçeriğe atla
Noroxi

Yayın tarihine göre

Kasım 2018: sömürülen ve yeni ciddi CVE kayıtları

87 kayıt · 6 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2018-18777
    24İzleyin

    Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" (in the parameter subpage) allows remote a

    OrtaCVSS 4,3Kavram kanıtıEPSS %22

    microstrategy · microstrategy web1 Kas 2018

  • CVE-2018-18925
    48Planlayın

    Gogs 0.11.66 allows remote code execution because it does not properly validate session IDs, as demonstrated by a ".." session-file forgery

    KritikCVSS 9,8Kavram kanıtıEPSS %31

    gogs · gogs4 Kas 2018

  • CVE-2018-18926
    40Planlayın

    Gitea before 1.5.4 allows remote code execution because it does not properly validate session IDs.

    KritikCVSS 9,8İstismar yokEPSS %3

    gitea · gitea4 Kas 2018

  • CVE-2018-18949
    46Planlayın

    Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings.

    KritikCVSS 9,8İstismar yokEPSS %24

    zohocorp · manageengine opmanager5 Kas 2018

  • CVE-2018-18820
    47Planlayın

    A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4.

    YüksekCVSS 8,1Kavram kanıtıEPSS %48

    xiph · icecast5 Kas 2018

  • CVE-2018-18957
    42Planlayın

    An issue has been found in libIEC61850 v1.3.

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    mz-automation · libiec618505 Kas 2018

  • CVE-2018-18980
    37İzleyin

    An XML External Entity injection (XXE) vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager before 12.3.214

    YüksekCVSS 7,5İstismar yokEPSS %24

    zohocorp · manageengine network configuration manager6 Kas 2018

  • CVE-2018-14667
    91Hemen

    The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %74

    redhat · richfaces6 Kas 2018

  • CVE-2018-19052
    34İzleyin

    An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50.

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    lighttpd · lighttpd7 Kas 2018

  • CVE-2018-16843
    44Planlayın

    nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption.

    YüksekCVSS 7,5Kavram kanıtıEPSS %47

    f5 · nginx7 Kas 2018

  • CVE-2018-16844
    34İzleyin

    nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage.

    YüksekCVSS 7,5İstismar yokEPSS %12

    f5 · nginx7 Kas 2018

  • CVE-2018-8021
    55Planlayın

    Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to possible remote code ex

    KritikCVSS 9,8Kavram kanıtıEPSS %53

    apache · superset7 Kas 2018

  • CVE-2018-15381
    65Bu hafta

    Cisco Unity Express Arbitrary Command Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %87

    cisco · unity express8 Kas 2018

  • CVE-2018-15439
    54Planlayın

    Cisco Small Business Switches Privileged Access Vulnerability

    KritikCVSS 9,8SilahlaştırılmışEPSS %49

    cisco · sg200-50 firmware8 Kas 2018

  • CVE-2018-19125
    33İzleyin

    PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to delete an image directory.

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    prestashop · prestashop9 Kas 2018

  • CVE-2018-19126
    46Planlayın

    PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute arbitrary code via a file upload.

    KritikCVSS 9,8Kavram kanıtıEPSS %22

    prestashop · prestashop9 Kas 2018

  • CVE-2018-19127
    45Planlayın

    A code injection vulnerability in /type.php in PHPCMS 2008 allows attackers to write arbitrary content to a website cache file with a contro

    KritikCVSS 9,8Kavram kanıtıEPSS %20

    phpcms · phpcms9 Kas 2018

  • CVE-2018-19206
    41Planlayın

    steps/mail/func.inc in Roundcube before 1.3.8 has XSS via crafted use of <svg><style>, as demonstrated by an onload attribute in a BODY elem

    OrtaCVSS 6,1İstismar yokEPSS %55

    roundcube · webmail12 Kas 2018

  • CVE-2018-19207
    65Bu hafta

    The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code

    KritikCVSS 9,8SilahlaştırılmışEPSS %88

    van-ons · wp-gdpr-compliance12 Kas 2018

  • CVE-2018-19246
    37İzleyin

    PHP-Proxy 5.1.0 allows remote attackers to read local files if the default "pre-installed version" (intended for users who lack shell access

    YüksekCVSS 7,5Kavram kanıtıEPSS %21

    php-proxy · php-proxy13 Kas 2018

  • CVE-2018-8256
    42Planlayın

    A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Co

    YüksekCVSS 8,8İstismar yokEPSS %22

    microsoft · microsoft.powershell.archive13 Kas 2018

  • CVE-2018-8450
    40Planlayın

    A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulner

    YüksekCVSS 8,8İstismar yokEPSS %16

    microsoft · windows 1013 Kas 2018

  • CVE-2018-8476
    58Planlayın

    A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "Windows

    KritikCVSS 9,8İstismar yokEPSS %64

    microsoft · windows server 200813 Kas 2018

  • CVE-2018-8522
    37İzleyin

    A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsof

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · office13 Kas 2018

  • CVE-2018-8524
    37İzleyin

    A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsof

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · office13 Kas 2018

  • CVE-2018-8539
    37İzleyin

    A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft W

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · office13 Kas 2018

  • CVE-2018-8541
    34İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · chakracore13 Kas 2018

  • CVE-2018-8542
    34İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · chakracore13 Kas 2018

  • CVE-2018-8543
    34İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · chakracore13 Kas 2018

  • CVE-2018-8544
    49Planlayın

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem

    YüksekCVSS 8,8Kavram kanıtıEPSS %47

    microsoft · windows 1013 Kas 2018

  • CVE-2018-8551
    34İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · chakracore13 Kas 2018

  • CVE-2018-8552
    45Planlayın

    An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which could provide an attacke

    YüksekCVSS 7,5Kavram kanıtıEPSS %50

    microsoft · internet explorer13 Kas 2018

  • CVE-2018-8553
    37İzleyin

    A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · windows 1013 Kas 2018

  • CVE-2018-8555
    34İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · chakracore13 Kas 2018

  • CVE-2018-8556
    34İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · chakracore13 Kas 2018

  • CVE-2018-8557
    34İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · chakracore13 Kas 2018

  • CVE-2018-8570
    34İzleyin

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · internet explorer13 Kas 2018

  • CVE-2018-8573
    37İzleyin

    A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft W

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · office13 Kas 2018

  • CVE-2018-8574
    37İzleyin

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · office13 Kas 2018

  • CVE-2018-8575
    37İzleyin

    A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka "Microsof

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · office 365 proplus13 Kas 2018

  • CVE-2018-8576
    37İzleyin

    A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsof

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · office13 Kas 2018

  • CVE-2018-8577
    37İzleyin

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · excel13 Kas 2018

  • CVE-2018-8581
    67Bu hafta

    An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerabi

    YüksekCVSS 7,4KEVSilahlaştırılmışEPSS %27

    microsoft · exchange server13 Kas 2018

  • CVE-2018-8582
    41Planlayın

    A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft O

    YüksekCVSS 8,8İstismar yokEPSS %18

    microsoft · office 365 proplus13 Kas 2018

  • CVE-2018-8588
    34İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · chakracore13 Kas 2018

  • CVE-2018-8589
    62Bu hafta

    An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privile

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %3

    microsoft · windows 713 Kas 2018

  • CVE-2018-17463
    90Hemen

    Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a s

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %84

    google · chrome14 Kas 2018

  • CVE-2018-6065
    83Hemen

    Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %60

    google · chrome14 Kas 2018

  • CVE-2018-7357
    61Bu hafta

    ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper access control vulnerab

    YüksekCVSS 8,8Kavram kanıtıEPSS %87

    zte · zxhn h168n firmware14 Kas 2018

  • CVE-2018-7358
    62Bu hafta

    ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper change control vulnerab

    YüksekCVSS 8,8Kavram kanıtıEPSS %89

    zte · zxhn h168n firmware14 Kas 2018

  • CVE-2018-15708
    66Bu hafta

    Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request.

    KritikCVSS 9,8SilahlaştırılmışEPSS %89

    nagios · nagios xi14 Kas 2018

  • CVE-2018-15709
    41Planlayın

    Nagios XI 5.5.6 allows remote authenticated attackers to execute arbitrary commands via a crafted HTTP request.

    YüksekCVSS 8,8İstismar yokEPSS %21

    nagios · nagios xi14 Kas 2018

  • CVE-2018-15710
    44Planlayın

    Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php.

    YüksekCVSS 7,8SilahlaştırılmışEPSS %44

    nagios · nagios xi14 Kas 2018

  • CVE-2018-15711
    46Planlayın

    Nagios XI 5.5.6 allows remote authenticated attackers to reset and regenerate the API key of more privileged users.

    YüksekCVSS 8,8İstismar yokEPSS %36

    nagios · nagios xi14 Kas 2018

  • CVE-2018-15712
    39İzleyin

    Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the host parameter in api_tool.php.

    OrtaCVSS 6,1İstismar yokEPSS %48

    nagios · nagios xi14 Kas 2018

  • CVE-2018-12543
    41Planlayın

    In Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is published to Mosquitto that has a topic starting with $, but that is n

    YüksekCVSS 7,5İstismar yokEPSS %36

    eclipse · mosquitto15 Kas 2018

  • CVE-2018-8529
    43Planlayın

    A remote code execution vulnerability exists when Team Foundation Server (TFS) does not enable basic authorization on the communication betw

    KritikCVSS 9,8İstismar yokEPSS %13

    microsoft · team foundation server15 Kas 2018

  • CVE-2018-16395
    42Planlayın

    An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3

    KritikCVSS 9,8İstismar yokEPSS %10

    ruby-lang · openssl16 Kas 2018

  • CVE-2018-18761
    44Planlayın

    SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection.

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    saltos · saltos16 Kas 2018

  • CVE-2018-18955
    30İzleyin

    In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalation because it misha

    YüksekCVSS 7,0SilahlaştırılmışEPSS %7

    linux · linux kernel16 Kas 2018

  • CVE-2018-19410
    98Hemen

    PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including admin

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    paessler · prtg network monitor21 Kas 2018

  • CVE-2018-19422
    47Planlayın

    /panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess fi

    YüksekCVSS 7,2SilahlaştırılmışEPSS %64

    intelliants · subrion cms21 Kas 2018

  • CVE-2018-19423
    33İzleyin

    Codiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an executable file.

    YüksekCVSS 7,2Kavram kanıtıEPSS %18

    codiad · codiad21 Kas 2018

  • CVE-2018-19458
    40Planlayın

    In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI URI, a different vulne

    YüksekCVSS 7,5Kavram kanıtıEPSS %32

    php-proxy · php-proxy22 Kas 2018

  • CVE-2018-19518
    59Planlayın

    University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of

    YüksekCVSS 7,5SilahlaştırılmışEPSS %96

    php · php25 Kas 2018

  • CVE-2018-13324
    46Planlayın

    Incorrect access control in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to bypass authentication by sending a modified

    KritikCVSS 9,8İstismar yokEPSS %23

    buffalo · ts5600d1206 firmware26 Kas 2018

  • CVE-2018-13022
    24İzleyin

    Cross-site scripting vulnerability in the API 404 page on Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary JavaScrip

    OrtaCVSS 6,1İstismar yokEPSS %0

    mi · miwifi os27 Kas 2018

  • CVE-2018-13023
    42Planlayın

    System command injection vulnerability in wifi_access in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute system commands via

    YüksekCVSS 8,8İstismar yokEPSS %23

    mi · miwifi os27 Kas 2018

  • CVE-2018-16130
    42Planlayın

    System command injection in request_mitv in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary system commands via the

    YüksekCVSS 8,8İstismar yokEPSS %23

    mi · miwifi os27 Kas 2018

  • CVE-2018-17934
    45Planlayın

    NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname that is able to be resolved outside the in

    KritikCVSS 9,8SilahlaştırılmışEPSS %19

    nuuo · nuuo cms27 Kas 2018

  • CVE-2018-17936
    44Planlayın

    NUUO CMS All versions 3.3 and prior the application allows the upload of arbitrary files that can modify or overwrite configuration files to

    KritikCVSS 9,8SilahlaştırılmışEPSS %15

    nuuo · nuuo cms27 Kas 2018

  • CVE-2018-18982
    53Planlayın

    NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can be used to inject SQL

    YüksekCVSS 8,8SilahlaştırılmışEPSS %60

    nuuo · nuuo cms27 Kas 2018

  • CVE-2018-13338
    42Planlayın

    System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "username" pa

    KritikCVSS 9,8İstismar yokEPSS %10

    terra-master · terramaster operating system27 Kas 2018

  • CVE-2018-13350
    44Planlayın

    SQL injection in logtable.php in TerraMaster TOS version 3.1.03 allows attackers to execute SQL queries via the "Event" parameter.

    KritikCVSS 9,8İstismar yokEPSS %16

    terra-master · terramaster operating system27 Kas 2018

  • CVE-2018-13354
    46Planlayın

    System command injection in logtable.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "Event" param

    KritikCVSS 9,8İstismar yokEPSS %22

    terra-master · terramaster operating system27 Kas 2018

  • CVE-2018-13358
    42Planlayın

    System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "checkName" p

    YüksekCVSS 8,8İstismar yokEPSS %24

    terra-master · terramaster operating system27 Kas 2018

  • CVE-2018-13359
    41Planlayın

    Cross-site scripting in usertable.php in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "modgroup" parameter.

    YüksekCVSS 8,8İstismar yokEPSS %19

    terra-master · terramaster operating system27 Kas 2018

  • CVE-2018-13361
    26İzleyin

    User enumeration in usertable.php in TerraMaster TOS version 3.1.03 allows attackers to list all system users via the "modgroup" parameter.

    OrtaCVSS 5,3İstismar yokEPSS %16

    terra-master · terramaster operating system27 Kas 2018

  • CVE-2018-12121
    33İzleyin

    Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination

    YüksekCVSS 7,5İstismar yokEPSS %10

    nodejs · node.js28 Kas 2018

  • CVE-2018-12122
    42Planlayın

    Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial

    YüksekCVSS 7,5İstismar yokEPSS %41

    nodejs · node.js28 Kas 2018

  • CVE-2018-19627
    35İzleyin

    In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash.

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    wireshark · wireshark29 Kas 2018

  • CVE-2018-15979
    33İzleyin

    Adobe Acrobat and Reader versions 2019.008.20080 and earlier, 2017.011.30105 and earlier, and 2015.006.30456 and earlier have a ntlm sso has

    YüksekCVSS 7,5İstismar yokEPSS %10

    adobe · acrobat dc29 Kas 2018

  • CVE-2018-15981
    43Planlayın

    Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %11

    adobe · flash player desktop runtime29 Kas 2018

  • CVE-2018-15767
    39İzleyin

    Improper Authorization Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %12

    dell · openmanage network manager30 Kas 2018

  • CVE-2018-3948
    37İzleyin

    An exploitable denial-of-service vulnerability exists in the URI-parsing functionality of the TP-Link TL-R600VPN HTTP server.

    YüksekCVSS 7,5İstismar yokEPSS %23

    tp-link · tl-r600vpn firmware30 Kas 2018

  • CVE-2018-15716
    41Planlayın

    NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection.

    YüksekCVSS 8,8Kavram kanıtıEPSS %18

    nuuo · nvrmini2 firmware30 Kas 2018

  • CVE-2018-3949
    46Planlayın

    An exploitable information disclosure vulnerability exists in the HTTP server functionality of the TP-Link TL-R600VPN.

    YüksekCVSS 7,5İstismar yokEPSS %53

    tp-link · tl-r600vpn firmware30 Kas 2018