|
4931
|
7.1 |
HIGH
Network
|
-
|
-
|
Joomla Component eXtroForms 2.1.5 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL commands through the filter_type_id, filter_pid_id, and filter_s…
|
CWE-89
SQL Injection
|
CVE-2018-25380
|
2026-05-27 04:47 |
2026-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4932
|
7.1 |
HIGH
Network
|
-
|
-
|
Joomla Responsive Portfolio 1.6.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL commands through multiple filter parameters. Attackers can injec…
|
CWE-89
SQL Injection
|
CVE-2018-25381
|
2026-05-27 04:47 |
2026-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4933
|
8.6 |
HIGH
Network
|
powerdns
|
authoritative
|
Insufficient Validation of Names During AXFR
|
CWE-77
Command Injection
|
CVE-2026-42000
|
2026-05-27 04:38 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4934
|
4.3 |
MEDIUM
Network
|
-
|
-
|
Smartshop 1 contains a cross-site request forgery vulnerability that allows attackers to modify user profiles by tricking authenticated users into submitting malicious requests. Attackers can craft H…
|
CWE-352
Origin Validation Error
|
CVE-2018-25343
|
2026-05-27 04:37 |
2026-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4935
|
8.4 |
HIGH
Local
|
-
|
-
|
10-Strike Network Inventory Explorer 8.54 contains a stack-based buffer overflow vulnerability in the registration key input field that allows local attackers to execute arbitrary code by triggering …
|
CWE-121
Stack-based Buffer Overflow
|
CVE-2018-25344
|
2026-05-27 04:37 |
2026-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4936
|
8.4 |
HIGH
Local
|
-
|
-
|
10-Strike Network Scanner 3.0 contains a local buffer overflow vulnerability in the host name field that allows attackers to bypass SafeSEH protections and execute arbitrary code. Attackers can craft…
|
CWE-120
Classic Buffer Overflow
|
CVE-2018-25345
|
2026-05-27 04:37 |
2026-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4937
|
7.1 |
HIGH
Network
|
-
|
-
|
WordPress Form Maker Plugin 1.12.24 and below contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries by injecting SQL code through the FormMakerSQLMa…
|
CWE-89
SQL Injection
|
CVE-2018-25346
|
2026-05-27 04:37 |
2026-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4938
|
7.1 |
HIGH
Network
|
-
|
-
|
WordPress Contact Form Maker Plugin 1.12.20 contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries through the FormMakerSQLMapping and generete_csv_f…
|
CWE-89
SQL Injection
|
CVE-2018-25347
|
2026-05-27 04:37 |
2026-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4939
|
8.2 |
HIGH
Network
|
-
|
-
|
Joomla! Component Ek Rishta 2.10 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid parameter. Attacker…
|
CWE-89
SQL Injection
|
CVE-2018-25348
|
2026-05-27 04:37 |
2026-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4940
|
6.1 |
MEDIUM
Network
|
-
|
-
|
userSpice 4.3.24 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the X-Forwarded-For HTTP header. Attackers can send crafted requests to the ba…
|
CWE-79
Cross-site Scripting
|
CVE-2018-25349
|
2026-05-27 04:37 |
2026-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|