» 2018 » 11월

The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to disclosure of the source IP address.

Source: CVE-2018-19120

CVE-2018-19748

Posted on 2018년 11월 30일2018년 11월 30일 by admin

CVE-2018-19748

app/plug/attachment/controller/admincontroller.php in SDCMS 1.6 allows reading arbitrary files via a /?m=plug&c=admin&a=index&p=attachment&root= directory traversal. The value of the root parameter must be base64 encoded (note that base64 encoding, instead of URL encoding, is very rare in a directory traversal attack vector).

Source: CVE-2018-19748

CVE-2018-15537

Posted on 2018년 11월 30일2018년 11월 30일 by admin

CVE-2018-15537

Unrestricted file upload (with remote code execution) in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP requests.

Source: CVE-2018-15537

CVE-2018-15978

Posted on 2018년 11월 30일2018년 11월 30일 by admin

CVE-2018-15978

Flash Player versions 31.0.0.122 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Source: CVE-2018-15978

CVE-2018-15979

Posted on 2018년 11월 30일2018년 11월 30일 by admin

CVE-2018-15979

Adobe Acrobat and Reader versions 2019.008.20080 and earlier, 2017.011.30105 and earlier, and 2015.006.30456 and earlier have a ntlm sso hash theft vulnerability. Successful exploitation could lead to information disclosure.

Source: CVE-2018-15979

CVE-2018-15981

Posted on 2018년 11월 30일2018년 11월 30일 by admin

CVE-2018-15981

Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

Source: CVE-2018-15981

CVE-2018-15980

Posted on 2018년 11월 30일2018년 11월 30일 by admin

CVE-2018-15980

Adobe Photoshop CC versions 19.1.6 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Source: CVE-2018-15980