CVEs published in September 2018
1,223 vulnerabilities, 177 critical, 3 exploited.
- microsoft office, word +1 moreA remote code execution vulnerability exists in Microsoft Word if a user opens a specially...7.8 High
- microsoft excel, excel viewer, office +2 more +4 moreAn information disclosure vulnerability exists when Microsoft Excel improperly discloses the...5.5 Medium
- microsoft sharepoint, sharepoint enterprise server +1 moreAn elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly...5.4 Medium
- microsoft sharepoint, sharepoint server, sharepoint enterprise server 2013 +2 more +4 moreA cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not...5.4 Medium
- microsoft edgeA spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka...4.3 Medium
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreAn information disclosure vulnerability exists when the Windows GDI component improperly...6.5 Medium
- microsoft windows 7, windows server 2008 r2, windows server +2 moreAn information disclosure vulnerability exists when the Windows GDI component improperly...6.5 Medium
- microsoft .net frameworkA remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted...9.8 Critical
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreA remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser...8.8 High
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreAn information disclosure vulnerability exists when the Windows kernel fails to properly...5.5 Medium
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreAn elevation of privilege vulnerability exists when the Windows Kernel API improperly handles...7.8 High
- microsoft .net core, asp.net core, system.io.pipelines +2 moreDenial of service vulnerability exists when System.IO.Pipelines improperly handles requests7.5 High
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreA buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow...7.8 High
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreA buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow...7.8 High
- microsoft chakracoreChakraCore RCE Vulnerability7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft edgeAn information disclosure vulnerability exists when the Microsoft Edge Fetch API incorrectly...3.1 Low
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA security feature bypass vulnerability exists when Windows Subsystem for Linux improperly...5.3 Medium
- microsoft windows 7, windows server 2008, windows server 2008 r2 +2 moreAn information disclosure vulnerability exists when the Windows kernel improperly handles objects...5.5 Medium
- microsoft windows 10, windows 10 servers, windows 8.1 +5 more +7 moreA denial of service vulnerability exists in the Microsoft Server Block Message (SMB) when an...7.5 High
- microsoft office, windows 10, windows 10 servers +10 more +12 moreA remote code execution vulnerability exists when the Windows font library improperly handles...8.8 High
- microsoft excel, office +1 moreA remote code execution vulnerability exists in Microsoft Excel software when the software fails...7.8 High
- microsoft chakracore, edge, internet explorer 10 +2 more +4 moreChakraCore information disclosure vulnerability4.2 Medium
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreAn information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode...5.5 Medium
- microsoft microsoft.data.odataDenial of service in ASP.NET Core7.5 High
- libtiff, canonical ubuntu linux, debian linux +2 moreA NULL pointer dereference in the function _TIFFmemcmp at tif_unix.c (called from...6.5 Medium
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA remote code execution vulnerability exists when Windows Hyper-V on a host server fails to...8.4 High
- debian linux, nothings stb image.h +1 morestb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer...8.8 High
- dotcmsdotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image_tools/index.jsp fieldName and...6.1 Medium
- monstraMonstra CMS V3.0.4 allows HTTP header injection in the plugins/captcha/crypt/cryptographp.php cfg...6.1 Medium
- monstraMonstra CMS V3.0.4 has XSS when ones tries to register an account with a crafted password...6.1 Medium
- monstraMonstra CMS V3.0.4 has an information leakage risk (e.g., PATH, DOCUMENT_ROOT, and SERVER_ADMIN)...5.3 Medium
openjdk-ltsUbuntuopenjdk-lts regressionNo score- gitoliteGitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly...8.1 High
- elefantcms elefantElefant CMS PHP Code Execution Vulnerability9.8 Critical
- elefantcms elefantElefant CMS Code Execution Vulnerability9.8 Critical
- avaya ip officeImproper access controls in IP Office one-X Portal7.3 High
- wisetail learning management systemWisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR)...4.3 Medium
- wisetail learning management systemWisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR)...4.3 Medium
- webroot secureanywhereWebroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that...7.8 High
- intel sa-00086 detection tool, intel corporation intel-sa-00086 detection tool +1 moreCode injection vulnerability in INTEL-SA-00086 Detection Tool before version 1.2.7.0 may allow a...6.7 Medium
- intel data center manager, intel corporation intel(r) data center manager sdk +1 moreEscalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow...9.6 Critical
- intel centrino firmware, intel corporation intel(r) centrino(r) wireless-n and intel(r) centrino(r) advanced-n products bluetooth +1 moreA STOP error (BSoD) in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino...7.5 High
- intel converged security management engine firmware, trusted execution engine firmware, intel corporation intel(r) platform trust technology (ptt) +2 moreA vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE...6.8 Medium
- intel active management technology firmware, converged security management engine firmware, manageability engine firmware +12 more +14 moreMultiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an...5.3 Medium
- intel active management technology firmware, converged security management engine firmware, manageability engine firmware +12 more +14 moreMultiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may...6.7 Medium
- intel trusted execution engine firmware, converged security management engine firmware, server platform services firmware +1 more +3 moreA vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform...7.3 High
- intel server platform services firmware, converged security management engine firmware, intel corporation intel(r) converged security and management engine (csme) and intel(r) server platform services firmware +2 moreA vulnerability in Power Management Controller firmware in systems using specific Intel(R)...8.2 High
- intel active management technology firmware, converged security management engine firmware, manageability engine firmware +12 more +14 moreBleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management...5.9 Medium
- Show moreLoading…