CVEs published in September 2018
1,223 vulnerabilities, 177 critical, 3 exploited.
- hiscout grc suiteHiScout GRC Suite before 3.1.5 allows Unrestricted Upload of Files with Dangerous Types.8.8 High
- mgetty project mgettyAn issue was discovered in mgetty before 1.2.1. In fax_notify_mail() in faxrec.c, the mail_to...7.8 High
- mgetty project mgettyAn issue was discovered in mgetty before 1.2.1. In fax_notify_mail() in faxrec.c, the mail_to...7.8 High
- mgetty project mgettyAn issue was discovered in mgetty before 1.2.1. In contrib/next-login/login.c, the command-line...7.8 High
- mgetty project mgettyAn issue was discovered in mgetty before 1.2.1. In contrib/scrts.c, a stack-based buffer overflow...7.8 High
- squashtest squash tmSquash TM through 1.18.0 presents the cleartext passwords of external services in the...7.2 High
- ibm maximo asset managementIBM Maximo Asset Management 7.6 through 7.6.3 could allow an unauthenticated attacker to obtain...5.3 Medium
firefoxUbuntufirefox regressionsNo score- f5 big-ip apm, big-ip access policy manager +1 moreOn BIG-IP APM 11.6.0-11.6.3.1, 12.1.0-12.1.3.3, 13.0.0, and 13.1.0-13.1.0.3, APMD may core when...7.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreOn BIG-IP APM 11.6.0-11.6.3, an insecure AES ECB mode is used for orig_uri parameter in an...6.1 Medium
- f5 websafe alert serverOn F5 WebSafe Alert Server 1.0.0-4.2.6, a malicious, authenticated user can execute code on the...8.8 High
- lizard project lizardIn Lizard (formerly LZ5) 2.0, use of an invalid memory address was discovered in...7.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreA vulnerability in BIG-IP APM portal access 11.5.1-11.5.7, 11.6.0-11.6.3, and 12.1.0-12.1.3...4.3 Medium
- noscript, torproject tor browser +1 moreNoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers...9.8 Critical
- byvoid open chinese convertOpen Chinese Convert subject to Denial of Service via Out-of-bounds Read5.5 Medium
- microsoft c sdk, c software development kit, java software development kit +2 moreA spoofing vulnerability exists for the Azure IoT Device Provisioning for the C SDK library using...5.6 Medium
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreA remote code execution vulnerability exists when Windows does not properly handle specially...8.8 High
- microsoft lync for mac, lync +1 moreA security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize...7.5 High
- microsoft internet explorer 11, internet explorer +1 moreA security feature bypass vulnerability exists in Internet Explorer due to how scripts are...6.1 Medium
- microsoft edgeAn elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to...7.4 High
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreAn elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka ...4.7 Medium
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft edgeAn remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles...7.5 High
- microsoft edgeAn elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to...7.4 High
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreAn elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver...7.8 High
- microsoft internet explorer 11, internet explorer +1 moreA remote code execution vulnerability exists when Internet Explorer improperly accesses objects...7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft edge, internet explorer 10, internet explorer 11 +1 more +3 moreA remote code execution vulnerability exists in the way the scripting engine handles objects in...7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft windows 10, windows 10 servers, windows 8.1 +4 more +6 moreAn elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects...7.8 High
- microsoft chakracore, edge, internet explorer 11 +1 more +3 moreChakraCore information disclosure vulnerability4.3 Medium
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka ...3.3 Low
- microsoft internet explorer 10, internet explorer 11, internet explorer 9 +1 more +3 moreA remote code execution vulnerability exists when Internet Explorer improperly accesses objects...7.5 High
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreAn information disclosure vulnerability exists when the Windows kernel improperly handles objects...5.5 Medium
- microsoft windows 10, windows 10 servers, windows server +2 moreAn information disclosure vulnerability exists when the Windows kernel improperly handles objects...5.5 Medium
- microsoft windows 10, windows 8.1, windows rt 8.1 +2 more +4 moreAn information disclosure vulnerability exists in the way that the Microsoft Server Message Block...5.9 Medium
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreAn information disclosure vulnerability exists when the Windows kernel improperly handles objects...5.5 Medium
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreAn information disclosure vulnerability exists when the Windows kernel improperly handles objects...5.5 Medium
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreAn elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem...7.8 High
- microsoft windows, windows 10, windows 10 servers +12 more +14 moreAn elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced...7.8 High
- microsoft windows 10, windows 10 servers, windows 8.1 +4 more +6 moreA remote code execution vulnerability exists when Windows Hyper-V on a host server fails to...8.4 High
- microsoft windows 10, windows 10 servers, windows 8.1 +4 more +6 moreA denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server...6.8 Medium
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server...6.2 Medium
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server...6.2 Medium
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide...4.2 Medium
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreAn information disclosure vulnerability exists when Windows Hyper-V on a host operating system...5.4 Medium
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreAn information disclosure vulnerability exists when the Windows Graphics component improperly...4.7 Medium
- microsoft sharepoint, sharepoint server, sharepoint enterprise server +2 moreAn elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly...5.4 Medium
- Show moreLoading…