CVEs published in September 2018
1,223 vulnerabilities, 177 critical, 3 exploited.
- damicmsadmin.php?s=/Admin/doedit in DamiCMS v6.0.0 allows CSRF to change the administrator account's...8.8 High
- ipandao editor.mdPandao editor.md vulnerable to XSS in IMG attributes6.1 Medium
- imagemagickIn ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the GetMagickProperty...9.8 Critical
- imagemagickIn ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the CheckEventLogging...9.8 Critical
- intelliants subrionSubrion Cross-site Scripting (XSS)4.8 Medium
- get-simple getsimple cmsThere is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field.6.1 Medium
- icewarp mail serverIn IceWarp Server 12.0.3.1 and before, there is XSS in the /webmail/ username field.6.1 Medium
- idreamsoft icmsidreamsoft iCMS 7.0.11 allows admincp.php?app=config Directory Traversal, resulting in execution...7.2 High
- portainerA stored Cross-site scripting (XSS) vulnerability in Portainer through 1.19.1 allows remote...5.4 Medium
- bijiadao waimai super cmsIn waimai Super Cms 20150505, there is a CSRF vulnerability that can change the configuration via...6.5 Medium
- icmsdev icmsAn issue was discovered in admincp.php in idreamsoft iCMS 7.0.11. When verifying CSRF_TOKEN, if...8.8 High
- bluditBludit 2.3.4 allows XSS via a user name.6.1 Medium
- ninjaforms ninja formsThe Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection.8.6 High
- pdf-xchange editorPDF-XChange Editor through 7.0.326.1 allows remote attackers to cause a denial of service ...7.5 High
- mc1soft zip-n-goMediaComm Zip-n-Go before 4.95 has a Buffer Overflow via a crafted file.7.8 High
- libesedb project libesedb** DISPUTED ** The libesedb_key_append_data function in libesedb_key.c in libesedb through 2018...6.5 Medium
- libesedb project libesedb** DISPUTED ** The libesedb_catalog_definition_read function in libesedb_catalog_definition.c in...6.5 Medium
- libesedb project libesedb** DISPUTED ** The libesedb_page_read_tags function in libesedb_page.c in libesedb through 2018...6.5 Medium
- libesedb project libesedb** DISPUTED ** The libesedb_page_read_values function in libesedb_page.c in libesedb through 2018...6.5 Medium
- libfsclfs project libfsclfs** DISPUTED ** The libfsclfs_block_read function in libfsclfs_block.c in libfsclfs before 2018-07...6.5 Medium
- dockerHandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 (edge) and before 18.06.0-ce...8.8 High
- exiv2, canonical ubuntu linux, debian linux +2 moreExiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when...6.5 Medium