CVEs published in September 2018
1,223 vulnerabilities, 177 critical, 3 exploited.
- opensc project openscSeveral buffer overflows when handling responses from a Gemsafe V1 Smartcard in...6.8 Medium
- opensc project openscSeveral buffer overflows when handling responses from a TCOS Card in tcos_select_file in...6.8 Medium
- opensc project openscSeveral buffer overflows when handling responses from a Muscle Card in muscle_list_files in...6.8 Medium
- elefantcmsElefant CMS CSRF Vulnerability8.8 High
- thinkphpThinkPHP SQL Injection vulnerability9.8 Critical
- nasm netwide assemblerNetwide Assembler (NASM) 2.14rc15 has a buffer over-read in x86/regflags.c.5.5 Medium
- canonical ubuntu linux, debian linux, littlecms little cms color engine +3 more +5 moreLittle CMS (aka Little Color Management System) 2.9 has an integer overflow in the...5.5 Medium
- gnome glib, canonical ubuntu linux +1 moreGNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in...7.5 High
- gnome glib, canonical ubuntu linux +1 moreIn GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer...9.8 Critical
- imagemagickImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the MagickCore/quantum-private.h...8.8 High
- imagemagick, opensuse leap +1 moreImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the coders/psd.c...8.8 High
- elfutils project elfutilslibdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarf_getabbrev in...5.5 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 morelibelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double...9.8 Critical
- owasp modsecurity core rule setA SQL injection bypass (aka PL1 bypass) exists in OWASP ModSecurity Core Rule Set (owasp...7.5 High
- digimute ogma cmsAn issue was discovered in Ogma CMS 0.4 Beta. There is a CSRF vulnerability in users.php?action...8.8 High
- digimute ogma cmsOgma CMS 0.4 Beta has XSS via the "Footer Text footer" field on the "Theme/Theme Options" screen.4.8 Medium
- uclouvain openjpegAn issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflow was discovered in the...8.8 High
- uclouvain openjpegAn issue was discovered in OpenJPEG 2.3.0. Missing checks for header_info.height and header_info...8.8 High
- frog cms project cmsFrog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings.4.8 Medium
- frog cms project cmsFrog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/file_manager...4.9 Medium
- ideacmsThe issue was discovered in IdeaCMS through 2016-04-30. There is reflected XSS via the index.php...6.1 Medium
- pescms teamPESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index...6.1 Medium
- pescms teamIn PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team...9.8 Critical
- xpdfreader xpdfXRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (stack...5.5 Medium
- xpdfreader xpdfSplashXPath::strokeAdjust in splash/SplashXPath.cc in Xpdf 4.00 allows remote attackers to cause...5.5 Medium
- qduoj onlinejudgeIn OnlineJudge 2.0, the sandbox has an incorrect access control vulnerability that can write a...9.9 Critical
- idreamsoft icmsAn issue was discovered in idreamsoft iCMS V7.0.10. admincp.php?app=user&do=save allows CSRF.8.8 High
- idreamsoft icmsAn issue was discovered in idreamsoft iCMS V7.0.10. admincp.php?app=group&do=save allows CSRF.8.8 High
- mantisbt source integrationAn issue was discovered in the Source Integration plugin before 1.5.9 and 2.x before 2.1.5 for...6.1 Medium
- google gvisorGoogle gVisor before 2018-08-23, within the seccomp sandbox, permits access to the renameat system call, which allows attackers to rename files on the host OS.6.8 Medium
- dotclearA cross-site scripting (XSS) vulnerability in inc/core/class.dc.core.php in the media manager in...5.4 Medium
- fhcrm project fhcrmAn issue was discovered in FHCRM through 2018-02-11. There is a SQL injection via the index.php...9.8 Critical
- fhcrm project fhcrmAn issue was discovered in FHCRM through 2018-02-11. There is a SQL injection via the /index.php...9.8 Critical
- weaselcms project weaselcmsThere is a PHP code upload vulnerability in WeaselCMS 0.3.6 via index.php because code can be...9.8 Critical
- wuzhi cms project cmsWUZHI CMS 4.1.0 has XSS via the index.php?m=core&f=set&v=basic form[statcode] parameter.6.1 Medium
- wuzhi cms project cmsWUZHI CMS 4.1.0 has XSS via the index.php?m=link&f=index&v=add form[remark] parameter.6.1 Medium
- seacmsSeaCMS V6.61 has XSS via the admin_video.php v_content parameter, related to the site name.4.8 Medium
- gleezcms gleez cmsGleez CMS Vulnerable to Cross-site Scripting in media/imagecache/resize6.1 Medium
- chemcms project chemcmsChemCMS 1.0.6 has XSS via the "setting -> website information" field.4.8 Medium
- easycmsAn issue was discovered in EasyCMS 1.5. There is a CSRF vulnerability that can update the admin...8.8 High
- zzcmsAn issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via...7.5 High
- seacmsSeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf() in include/main...7.2 High
- showdocShowdoc XSS Vulnerability5.4 Medium
- phome empirecmsAn issue was discovered in EmpireCMS 7.0. There is a CSRF vulnerability that can add...8.8 High
- auracmsAn issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the...8.8 High
- chshcms cscmsAn issue was discovered in Cscms V4.1.8. There is a CSRF vulnerability that can modify a website...6.5 Medium
- libtiff, debian linux +1 morenewoffsets handling in ChopUpSingleUncompressedStrip in tif_dirread.c in LibTIFF 4.0.9 allows...8.8 High
- tendacn ac10 firmware, ac9 firmware +1 moreAn issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN and AC10 V15.03.06.23_CN devices. The...8.8 High
- tendacn ac10 firmware, ac15 firmware, ac18 firmware +2 more +4 moreAn issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06...7.5 High
- idreamsoft icmsAn issue was discovered in iCMS 7.0.9. There is an admincp.php?app=article&do=update CSRF...8.8 High
- Show moreLoading…