Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2018-05-22 CVE-2018-11378 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Radare Radare2 2.5.0
The wasm_dis() function in libr/asm/arch/wasm/wasm.c in or possibly have unspecified other impact via a crafted WASM file.
local
low complexity
radare CWE-119
7.8
2018-05-22 CVE-2017-2617 Unrestricted Upload of File with Dangerous Type vulnerability in Hawt.Io Hawtio
hawtio before version 1.5.5 is vulnerable to remote code execution via file upload.
local
low complexity
hawt-io CWE-434
7.8
2018-05-22 CVE-2016-8656 Permissions, Privileges, and Access Controls vulnerability in Redhat Jboss Enterprise Application Platform
Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in the jboss init script which could result in local privilege escalation.
local
low complexity
redhat CWE-264
7.8
2018-05-22 CVE-2018-11371 Cross-Site Request Forgery (CSRF) vulnerability in Skycaiji 1.2
SkyCaiji 1.2 allows CSRF to add an Administrator user.
network
low complexity
skycaiji CWE-352
8.8
2018-05-22 CVE-2018-11323 Improper Privilege Management vulnerability in Joomla Joomla!
An issue was discovered in Joomla! Core before 3.8.8.
network
low complexity
joomla CWE-269
8.8
2018-05-22 CVE-2018-11322 Unrestricted Upload of File with Dangerous Type vulnerability in Joomla Joomla!
An issue was discovered in Joomla! Core before 3.8.8.
network
high complexity
joomla CWE-434
7.5
2018-05-22 CVE-2018-6962 Unspecified vulnerability in VMWare Fusion
VMware Fusion (10.x before 10.1.2) contains a signature bypass vulnerability which may lead to a local privilege escalation.
local
low complexity
vmware
7.8
2018-05-22 CVE-2018-11367 Improper Input Validation vulnerability in Cppcms
An issue was discovered in CppCMS before 1.2.1.
network
low complexity
cppcms CWE-20
7.5
2018-05-22 CVE-2018-11329 Unspecified vulnerability in Ethercartel Ether Cartel 20180518
The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take over the contract's ownership, aka ceoAnyone.
network
low complexity
ethercartel
7.5
2018-05-22 CVE-2018-11365 Infinite Loop vulnerability in Wizardmac Readstat 0.1.1
sas/readstat_sas7bcat_read.c in libreadstat.a in ReadStat 0.1.1 has an infinite loop.
network
low complexity
wizardmac CWE-835
7.5