Search vulnerabilities

Results 3

Export CSV
CVE-2018-7633

Code injection in the /ui/login form Language parameter in Epicentro E_7.3.2+ allows attackers to execute JavaScript code by making a user issue a manipulated POST request.

CVSS 3.0 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2018-7632

Buffer Overflow in httpd in EpiCentro E_7.3.2+ allows attackers to cause a denial of service attack remotely via a specially crafted GET request with a leading "/" in the URL.

CVSS 3.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2018-7631

Buffer Overflow in httpd in EpiCentro E_7.3.2+ allows attackers to execute code remotely via a specially crafted GET request without a leading "/" and without authentication.

CVSS 3.0 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
Products