Advisories · Technology

NUUO CMS.

Every CVE that names NUUO CMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2018-18982 CVE record

SQL injection in NUUO CMS
- NUUO CMS
- SQL injection
Not analysed yet 27 Nov 2018
CVE-2018-17936 CVE record

Unrestricted file upload in NUUO CMS
- NUUO CMS
- Unrestricted file upload
Not analysed yet 27 Nov 2018
CVE-2018-17934 CVE record

Path traversal in NUUO CMS
- NUUO CMS
- Path traversal
Not analysed yet 27 Nov 2018
CVE-2018-17894 CVE record

Hard-coded credentials in NUUO CMS
- NUUO CMS
- Hard-coded credentials
Not analysed yet 12 Oct 2018
CVE-2018-17892 CVE record

Incorrect permission assignment in NUUO CMS
- NUUO CMS
- Broken access control
Not analysed yet 12 Oct 2018
CVE-2018-17890 CVE record

NUUO CMS: NUUO CMS all versions 3.1 and prior, The application uses insecure and outdated software…
- NUUO CMS
- CWE-477
Not analysed yet 12 Oct 2018
CVE-2018-17888 CVE record

Insufficiently random values in NUUO CMS
- NUUO CMS
- Weak cryptography or TLS
Not analysed yet 12 Oct 2018