CVE-2018-17934

NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname that is able to be resolved outside the intended directory. This could allow an attacker to impersonate a legitimate user, obtain restricted information, or execute arbitrary code.

• CWE-22
• CWE-22

• https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02Third Party Advisory, US Government Resource

Published

Nov 27, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17929In Delta Industrial Automation TPEditor, TPEditor Versions 1…7.8
• CVE-2018-1793IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 usin…6.1
• CVE-2018-17930A stack-based buffer overflow vulnerability has been identif…9.8
• CVE-2018-17931If an attacker has physical access to the VGo Robot (Version…
• CVE-2018-17932JUUKO K-800 (Firmware versions prior to numbers ending ...9A…9.8
• CVE-2018-17933VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versi…
• CVE-2018-17935All versions of Telecrane F25 Series Radio Controls before 0…8.1
• CVE-2018-17936NUUO CMS All versions 3.3 and prior the application allows t…
• CVE-2018-17937gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3…8.8
• CVE-2018-17938Zimbra Collaboration before 8.8.10 GA allows text content sp…
• CVE-2018-17939An issue was discovered in GitLab Community and Enterprise E…
• CVE-2018-1794IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 usin…6.1