CVEs published in September 2018
1,223 vulnerabilities, 177 critical, 3 exploited.
- ice qube thermal management center, iceqube thermal management center firmware +1 moreIn Ice Qube Thermal Management Center versions prior to version 4.13, passwords are stored in...9.8 Critical
- ice qube thermal management center, iceqube thermal management center firmware +1 moreIn Ice Qube Thermal Management Center versions prior to version 4.13, the web application does...7.5 High
- kde okular, debian linux +1 moreokular version 18.08 and earlier contains a Directory Traversal vulnerability in function ...5.5 Medium
- sympa, debian linux +1 moresympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open...6.1 Medium
enigmailSUSESecurity update for enigmailNo score- zephyrproject zephyrzephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in...9.8 Critical
- jsishjsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function...6.5 Medium
- nasm netwide assemblerNASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption ...5.5 Medium
- gig jumpscale, openvcloud project openvcloud +1 moreGIG Technology NV JumpScale Portal 7 version before commit...9.8 Critical
- dojotoolkit dojoImproper Neutralization of Input During Web Page Generation in Dojo Dojo Objective Harness6.1 Medium
- dsub for subsonic project for subsonicdaneren2005 DSub for Subsonic (Android client) version 5.4.1 contains a CWE-295: Improper...5.9 Medium
- jsishjsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function _jsi_evalcode...6.5 Medium
- jsishjsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in Jsi_LogMsg ...6.5 Medium
- tockos tockTOCK version prior to commit 42f7f36e74088036068d62253e1d8fb26605feed. For example...7.5 High
- limesurveyLimeSurvey version 3.14.4 and earlier contains a directory traversal in file upload that allows...8.8 High
- limesurveyLimeSurvey version prior to 3.14.4 contains a file upload vulnerability in upload functionality...8.8 High
- proconfIn ProConf before 6.1, an Insecure Direct Object Reference (IDOR) allows any author to view and...6.5 Medium
- nibbleblogAn issue was discovered in Nibbleblog v4.0.5. With an admin's username and password, an attacker...7.2 High
- wordpressWordPress version 4.9.8 and earlier contains a CWE-20 Input Validation vulnerability in thumbnail...8.8 High
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, and 8.5.5 installations using Form Login could allow a...7.3 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all Android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...8.8 High
- exceljs project exceljsCross-Site Scripting in exceljs6.1 Medium
- redhat openshift container platform, starcounter-jack json-patch, red hat atomic-openshift +2 moreJSON-Patch Out-of-bounds Write vulnerability7.7 High
- [unknown] 389-ds-base, debian linux, fedoraproject 389 directory server +6 more +8 moreA vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16....7.5 High
- wordpressWordPress version <4.9 contains a CWE-20 Input Validation vulnerability in thumbnail processing...8.8 High
- freedesktop poppler, canonical ubuntu linux, debian linux +2 moreIn Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a...6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreThere is an excessive memory allocation issue in the functions ReadBMPImage of coders/bmp.c and...6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreThere is a missing check for length in the functions ReadDCMImage of coders/dcm.c and...6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreThe functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders...6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreThe function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c.6.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +2 more** DISPUTED ** An issue was discovered in Artifex Ghostscript before 9.24. The .setdistillerkeys...7.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreIf a user saved passwords before Firefox 58 and then later set a master password, an unencrypted...5.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when refresh driver timers are refreshed in some...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence...9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreMemory safety bugs present in Firefox 61. Some of these bugs showed evidence of memory corruption...8.8 High
- micropyramid django crmMicroPyramid Django-CRM CSRF8.8 High
- lavaliteStored XSS in LavaLite 5.55.4 Medium
- teamviewerTeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication...9.8 Critical
- php file browser script project file browser scriptHScripts PHP File Browser Script v1.0 allows Directory Traversal via the index.php path parameter.5.3 Medium
- gdraheim zziplibAn issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the...6.5 Medium
- e107e107 2.1.8 has XSS via the e107_admin/users.php?mode=main&action=list user_loginname parameter.6.1 Medium
- btiteam xbtitAn issue was discovered in BTITeam XBTIT 2.5.4. news.php allows XSS via the id parameter.6.1 Medium
- mi xiaomi miwifi xiaomi 55dd firmwareAn "Out-of-band resource load" issue was discovered on Xiaomi MIWiFi Xiaomi_55DD Version 2.8.50...7.5 High
- fspro event log explorerFsPro Labs Event Log Explorer 4.6.1.2115 has ".elx" FileType XML External Entity Injection.3.3 Low
- opsviewThe diagnosticsb2ksy parameter of the /rest endpoint in Opsview Monitor before 5.3.1 and 5.4.x...6.1 Medium
- opsviewThe data parameter of the /settings/api/router endpoint in Opsview Monitor before 5.3.1 and 5.4.x...6.1 Medium
- opsviewThe web management console of Opsview Monitor 5.4.x before 5.4.2 provides functionality...7.2 High
- opsviewThe /etc/init.d/opsview-reporting-module script that runs at boot time in Opsview Monitor before...8.1 High
- Show moreLoading…