CVE-2018-17936

NUUO CMS All versions 3.3 and prior the application allows the upload of arbitrary files that can modify or overwrite configuration files to the server, which could allow remote code execution.

• CWE-434
• CWE-434

• https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02Mitigation, Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02Mitigation, Third Party Advisory, US Government Resource

Published

Nov 27, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17930A stack-based buffer overflow vulnerability has been identif…9.8
• CVE-2018-17931If an attacker has physical access to the VGo Robot (Version…
• CVE-2018-17932JUUKO K-800 (Firmware versions prior to numbers ending ...9A…9.8
• CVE-2018-17933VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versi…
• CVE-2018-17934NUUO CMS All versions 3.3 and prior the application allows e…
• CVE-2018-17935All versions of Telecrane F25 Series Radio Controls before 0…8.1
• CVE-2018-17937gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3…8.8
• CVE-2018-17938Zimbra Collaboration before 8.8.10 GA allows text content sp…
• CVE-2018-17939An issue was discovered in GitLab Community and Enterprise E…
• CVE-2018-1794IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 usin…6.1
• CVE-2018-17942The convert_to_decimal function in vasnprintf.c in Gnulib be…
• CVE-2018-17944On certain Lexmark devices that communicate with an LDAP or …