CVEs published in September 2018
1,223 vulnerabilities, 177 critical, 3 exploited.
- zzcms An issue was discovered in zzcms 8.3. user/ztconfig.php allows remote attackers to delete... 6.5 Medium
- zzcms An issue was discovered in zzcms 8.3. user/zssave.php allows remote attackers to delete arbitrary... 6.5 Medium
- mushroom content management system project content management system An issue was discovered in MRCMS (aka mushroom) through 3.1.2. The WebParam.java file directly... 9.8 Critical
- libtiff The function t2p_write_pdf in tiff2pdf.c in LibTIFF 4.0.9 and earlier allows remote attackers to... 8.8 High
- gnu binutils An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.... 6.5 Medium
- blynk blynk-server In blynk-server a Directory Traversal exists 7.5 High
- telegram desktop, messenger +1 more Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user... 6.5 Medium
- foxitsoftware phantompdf, reader +1 more Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object... 7.5 High
- pcprotect antivirus PCProtect Anti-Virus v4.8.35 has "Everyone: (F)" permission for %PROGRAMFILES(X86)%\PCProtect,... 7.8 High
- lenovo group ltd lenovoemc, lenovo ez media \& backup center firmware, ix2 firmware +20 more +22 more Iomega and LenovoEMC NAS Web UI Vulnerabilities 8.8 High
- lenovo group ltd lenovoemc, lenovo ez media \& backup center firmware, ix2 firmware +20 more +22 more Iomega and LenovoEMC NAS Web UI Vulnerabilities 4.7 Medium
- lenovo group ltd lenovoemc, lenovo ez media \& backup center firmware, ix2 firmware +20 more +22 more Iomega and LenovoEMC NAS Web UI Vulnerabilities 5.9 Medium
- lenovo group ltd lenovoemc, lenovo ez media \& backup center firmware, ix2 firmware +20 more +22 more Iomega and LenovoEMC NAS Web UI Vulnerabilities 9.8 Critical
- lenovo group ltd lenovoemc, lenovo ez media \& backup center firmware, ix2 firmware +20 more +22 more Iomega and LenovoEMC NAS Web UI Vulnerabilities 8.8 High
- lenovo group ltd lenovoemc, lenovo lenovoemc firmware, lenovo group ltd ez media and backup center +1 more +3 more Iomega and LenovoEMC NAS Web UI Vulnerabilities 8.1 High
- lenovo group ltd lenovoemc, lenovo lenovoemc firmware, lenovo group ltd ez media and backup center +1 more +3 more Iomega and LenovoEMC NAS Web UI Vulnerabilities 8.1 High
- lenovo group ltd lenovoemc, lenovo lenovoemc firmware, lenovo group ltd ez media and backup center +1 more +3 more Iomega and LenovoEMC NAS Web UI Vulnerabilities 8.1 High
- lenovo group ltd lenovoemc, lenovo lenovoemc firmware, lenovo group ltd ez media and backup center +1 more +3 more Iomega and LenovoEMC NAS Web UI Vulnerabilities 6.5 Medium
- dell emc esrs policy manager Dell EMC ESRS Policy Manager versions 6.8 and prior contain a remote code execution vulnerability... 9.8 Critical
- dell emc unity, unityvsa, dell emc unity firmware +1 more +3 more Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 contains a URL Redirection... 8.3 High
- dell emc unity, unityvsa, dell emc unity firmware +1 more +3 more Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 contains an Authorization Bypass... 6.5 Medium
- dell emc unity, unityvsa, dell emc unity operating environment +1 more +3 more Dell EMC Unity and UnityVSA contains reflected cross-site scripting vulnerability. A remote... 4.7 Medium
- emc rsa authentication manager, rsa authentication manager +1 more DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities 5.8 Medium
- emc rsa authentication manager, rsa authentication manager +1 more DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities 6.1 Medium
- emc rsa authentication manager, rsa authentication manager +1 more DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities 6.5 Medium
- tp-link eap controller TP-Link EAP Controller versions 2.5.3 and earlier lack RMI authentication 9.8 Critical
- trend micro deep discovery inspector, trend micro, inc. micro deep discovery inspector +1 more A Reflected Cross-Site Scripting (XSS) vulnerability in Trend Micro Deep Discovery Inspector 3.85... 5.4 Medium
- freebsd In FreeBSD before 11.2-STABLE(r338986), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338985),... 5.5 Medium
- freebsd In FreeBSD before 11.2-STABLE(r338983), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338984),... 5.5 Medium
- freebsd In FreeBSD before 11.2-STABLE(r338987), 11.2-RELEASE-p4, and 11.1-RELEASE-p15, due to... 5.5 Medium
- ibm platform symphony, spectrum symphony +1 more IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could... 6.8 Medium
- ibm platform symphony, spectrum symphony +1 more IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 are... 7.1 High
- fedoraproject 389 directory server, [unknown] 389-ds-base:, debian linux +1 more +3 more A flaw was found in 389 Directory Server. A specially crafted search query could lead to... 7.5 High
- telegram desktop Telegram Desktop (aka tdesktop) 1.3.16 alpha, when "Use proxy" is enabled, sends credentials and... 9.8 Critical
- foxitsoftware phantompdf, reader +1 more Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause... 9.8 Critical
- foxitsoftware phantompdf, reader +1 more Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause... 9.8 Critical
- foxitsoftware phantompdf, reader +1 more Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause... 9.8 Critical
- foxitsoftware phantompdf, reader +1 more Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause... 9.8 Critical
- foxitsoftware phantompdf, reader +1 more Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause... 9.8 Critical
- asset pipeline project asset-pipeline Asset Pipeline plugin for Grails vulnerable to Path Traversal 7.5 High
- broadcom tcpreplay Tcpreplay v4.3.0 beta1 contains a heap-based buffer over-read. The get_next_packet() function in... 7.1 High
- broadcom tcpreplay A heap-based buffer over-read exists in the function fast_edit_packet() in the file send_packets... 7.1 High
- swa swa.jacad SWA SWA.JACAD 3.1.37 Build 024 has SQL Injection via the /academico/aluno/esqueci-minha-senha/... 9.8 Critical
- ymfe yapi Cross-site Scripting in yapi-vendor 5.4 Medium
- smartlogix wp-insert The Wp-Insert plugin through 2.4.2 for WordPress allows upload of arbitrary PHP code because of... 9.8 Critical
- vanillaforums vanilla Vanilla before 2.6.1 allows XSS via the email field of a profile. 6.1 Medium
- apple icloud, itunes, safari +3 more +5 more A memory consumption issue was addressed with improved memory handling. This issue affected... 8.8 High
- apple icloud, itunes, safari +3 more +5 more Multiple memory corruption issues were addressed with improved memory handling. This issue... 8.8 High
- apple icloud, itunes, safari +3 more +5 more Multiple memory corruption issues were addressed with improved memory handling. This issue... 8.8 High
- apple icloud, itunes, safari +2 more +4 more Multiple memory corruption issues were addressed with improved memory handling. This issue... 8.8 High
- Show olderLoading…