CVE-2018-17410

Horus CMS allows SQL Injection, as demonstrated by a request to the /busca or /home URI.

Source: CVE-2018-17410

CVE-2018-17365

SeaCMS 6.64 allows remote attackers to delete arbitrary files via the filedir parameter.

Source: CVE-2018-17365

CVE-2018-16152

In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data in the digestAlgorithm.parameters field during PKCS#1 v1.5 signature verification. Consequently, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation when only an RSA signature is used for IKEv2 authentication. This is a variant of CVE-2006-4790 and CVE-2014-1568.

Source: CVE-2018-16152

CVE-2018-17081

e107 2.1.9 allows CSRF via e107_admin/wmessage.php?mode=&action=inline&ajax_used=1&id= for changing the title of an arbitrary page.

Source: CVE-2018-17081

CVE-2018-16151

In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data after the encoded algorithm OID during PKCS#1 v1.5 signature verification. Similar to the flaw in the same version of strongSwan regarding digestAlgorithm.parameters, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation when only an RSA signature is used for IKEv2 authentication.

Source: CVE-2018-16151

CVE-2018-17215

An information-disclosure issue was discovered in Postman through 6.3.0. It validates a server’s X.509 certificate and presents an error if the certificate is not valid. Unfortunately, the associated HTTPS request data is sent anyway. Only the response is not displayed. Thus, all contained information of the HTTPS request is disclosed to a man-in-the-middle attacker (for example, user credentials).

Source: CVE-2018-17215

CVE-2018-16968

Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal.

Source: CVE-2018-16968

CVE-2018-16969

Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message.

Source: CVE-2018-16969

CVE-2018-16364

A serialization vulnerability in Zoho ManageEngine Applications Manager before build 13740 allows for remote code execution on Windows via a payload on an SMB share.

Source: CVE-2018-16364

CVE-2018-15836

In Openswan before 2.6.50.1, IKEv2 signature verification is vulnerable to "Variants of Bleichenbacher’s Low-Exponent Attack on PKCS#1 RSA Signatures" attacks when RAW RSA keys are used.

Source: CVE-2018-15836