CVEs published in September 2018
1,223 vulnerabilities, 177 critical, 3 exploited.
- intel compute card firmware, compute stick firmware, nuc kit firmware +1 more +3 moreImproper input validation in firmware for Intel NUC Kits may allow a privileged user to...8.2 High
- intel distribution for python, intel corporation intel(r) distribution for python 2018 +1 moreDefault install directory permissions in Intel Distribution for Python (IDP) version 2018 may...7.8 High
- intel bmc firmware, intel corporation intel(r) baseboard management controller (bmc) firmware +1 morePrivilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43...9.8 Critical
- intel computing improvement program, intel corporation intel(r) computing improvement program +1 morePrivilege escalation in file permissions in Intel Computing Improvement Program before version 2...7.8 High
- intel iot developers kitA DLL injection vulnerability in the Intel IoT Developers Kit 4.0 installer may allow an...4.8 Medium
- intel openvino toolkit, intel corporation intel(r) openvino(tm) toolkit for windows +1 moreDirectory permissions in the Intel OpenVINO Toolkit for Windows before version 2018.1.265 may...7.8 High
- intel data migration software, intel corporation intel(r) data migration software +1 moreDLL injection vulnerability in software installer for Intel Data Center Migration Center Software...5.3 Medium
- intel extreme tuning utility, intel corporation intel(r) extreme tuning utility +1 moreBuffer overflow in installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an...5.5 Medium
- intel extreme tuning utility, intel corporation intel(r) extreme tuning utility +1 moreEscalation of privilege in Installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow...6.7 Medium
- intel extreme tuning utility, intel corporation intel(r) extreme tuning utility +1 moreBuffer overflow in input handling in Intel Extreme Tuning Utility before 6.4.1.21 may allow an...5.5 Medium
- intel driver \& support assistant, intel corporation intel(r) driver & support assistant +1 morePrivilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may...7.8 High
- pulsesecure pulse secure desktopPulse Secure Client 9.0R1 and 5.3RX before 5.3R5, when configured to authenticate VPN users...6.8 Medium
- pluck-cms pluckPluck 4.7.7 allows XSS via an SVG file that contains Javascript in a SCRIPT element, and is...5.4 Medium
- feindurafeindura 2.0.7 allows XSS via the tags field of a new page created at index.php?category=0&page=new.5.4 Medium
- razorcmsrazorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component.5.4 Medium
- razorcmsrazorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings...5.4 Medium
- dlink dir-600m firmwareD-Link DIR-600M devices allow XSS via the Hostname and Username fields in the Dynamic DNS...5.4 Medium
- e107e107_admin/banlist.php in e107 2.1.8 allows SQL injection via the old_ip parameter.6.5 Medium
- e107e107_web/js/plupload/upload.php in e107 2.1.8 allows remote attackers to execute arbitrary PHP...7.2 High
- radare radare2In radare2 before 2.9.0, a heap overflow vulnerability exists in the...5.5 Medium
- lwolf loading docsInsecure permissions in Lone Wolf Technologies loadingDOCS 2018-08-13 allow remote attackers to...7.5 High
- zohocorp manageengine desktop centralAn issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10...7.8 High
- zohocorp manageengine desktop centralAn issue was discovered in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company...8.8 High
- huawei honor 5a, huawei technologies co., ltd. g9 lite, honor 5a, honor 6x, honor 8, huawei g9 lite firmware +3 more +5 moreHuawei smart phones G9 Lite, Honor 5A, Honor 6X, Honor 8 with the versions before VNS...4.6 Medium
- huawei alp-l09, alp-l09 firmware +1 moreHuawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an...7.8 High
- huawei alp-l09, alp-l09 firmware +1 moreHuawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an...7.8 High
- huawei technologies co., ltd. b315s-22, huawei b315s-22 firmware +1 moreHuawei B315s-22 products with software of 21.318.01.00.26 have an information leak vulnerability....6.5 Medium
- huawei leland-al00 firmware, lleland-al00a firmware, huawei technologies co., ltd. leland-al00, leland-al00a +2 moreSome Huawei smart phones with software of Leland-AL00 8.0.0.114(C636), Leland-AL00A 8.0.0.171(C00...5.5 Medium
- st stm32f030c6 firmware, stm32f030c8 firmware, stm32f030cc firmware +69 more +71 moreIncorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows...4.6 Medium
- freebsdIn FreeBSD before 11.1-STABLE, 11.2-RELEASE-p3, 11.1-RELEASE-p14, 10.4-STABLE, and 10.4-RELEASE...7.1 High
- frappe erpnextAn exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6....5.4 Medium
- frappe erpnextAn exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6....5.4 Medium
- frappe erpnextAn exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6....5.4 Medium
- frappe erpnextAn exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6....5.4 Medium
- ibm datacapIBM Datacap Fastdoc Capture 9.1.1, 9.1.3, and 9.1.4 could allow an authenticated user to bypass...4.3 Medium
- freebsdIn FreeBSD before 11.2-RELEASE, an application which calls setrlimit() to increase RLIMIT_STACK...7.8 High
- freebsdIn FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page...7.5 High
- freebsdIn FreeBSD before 11.2-RELEASE, a stack guard-page is available but is disabled by default. This...7.5 High
- freebsdIn FreeBSD 11.x before 11.1-RELEASE and 10.x before 10.4-RELEASE, the qsort algorithm has a...7.5 High
- siemens scalance x300 firmware, scalance x408 firmware, scalance x414 firmware +1 more +3 moreA vulnerability has been identified in SCALANCE X300 (All versions < V4.0.0), SCALANCE X408 (All...8.6 High
- siemens td keypad designerA vulnerability has been identified in SIEMENS TD Keypad Designer (All versions). A DLL hijacking...7.8 High
- siemens simatic wincc oa v3.14 and prior, simatic wincc open architecture +1 moreA vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior (All versions < V3.14...9.1 Critical
- inteno dg400 firmwareInteno DG400 WU7U_ELION3.11.6-170614_1328 devices allow remote attackers to cause a denial of...6.5 Medium
- xunfeng project xunfengxunfeng 0.2.0 allows command execution via CSRF because masscan.py mishandles backquote...8.0 High
- openafs, debian linux +1 moreAn issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several data types used...7.5 High
- openafs, debian linux +1 moreAn issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several RPC server...7.5 High
- openafs, debian linux +1 moreAn issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape...9.8 Critical
- lg lnb5110 firmware, lnb5320 firmware, lnb5320r firmware +15 more +17 moreLG LNB*, LND*, LNU*, and LNV* smart network camera devices have broken access control. Attackers...7.5 High
opensshDebianopenssh - regression updateNo score- subsonic music streamerThe Subsonic Music Streamer application 4.4 for Android has Improper Certificate Validation of...5.9 Medium
- Show moreLoading…