CVEs published in September 2018
1,223 vulnerabilities, 177 critical, 3 exploited.
- torproject tor browserTor Browser on Windows before 8.0 allows remote attackers to bypass the intended anonymity...4.3 Medium
kernel-linusMageiaUpdated kernel-linus packages fix security vulnerabilitiesNo score- tecnick tcpdf, limesurvey +1 moreTCPDF vulnerable to attackers triggering deserialization of arbitrary data9.8 Critical
- pivotal spring amqp, spring amqp, pivotal software spring advanced message queuing protocol +1 more +3 moreTLS validation error5.9 Medium
- dell bsafe, bsafe micro edition suite, bsafe crypto-c +12 more +14 moreRSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x),...7.5 High
- fedora project 389-ds-base, fedoraproject 389 directory server, redhat enterprise linux aus +5 more +7 moreA flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in...7.5 High
- qnap music stationCommand injection vulnerability in Music Station 5.1.2 and earlier versions in QNAP QTS 4.3.3 and...9.8 Critical
- hclsoftware connectionsIBM Connections 5.0, 5.5, and 6.0 is vulnerable to an External Service Interaction attack, caused...4.9 Medium
- ibm websphere application serverIBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security under...5.9 Medium
- knet cisco configuration managerK-Net Cisco Configuration Manager through 2014-11-19 has XSS via devices.php.6.1 Medium
- cqu lankers project lankersCQU-LANKERS through 2017-11-02 has XSS via the public/api.php callback parameter in an uploadpic...6.1 Medium
- translate man project mantranslate man before 2018-08-21 has XSS via containers/outputBox/outputBox.vue and store/index.js.6.1 Medium
- cms maelostore project maelostoreAn issue was discovered in CMS MaeloStore V.1.5.0. There is a CSRF vulnerability that can change...8.8 High
- yzmcmsIn YzmCMS 5.1, stored XSS exists via the admin/system_manage/user_config_add.html title parameter.4.8 Medium
- doc2txt project doc2txtAn issue has been found in doc2txt through 2014-03-19. It is a heap-based buffer overflow in the...7.8 High
- scalabium dbf2txtAn issue has been found in dbf2txt through 2012-07-19. It is a infinite loop.5.5 Medium
- 1234n minicmsMiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $_SERVER[...6.1 Medium
- ucms project ucmsuser/editpost.php in UCMS 1.4.6 mishandles levels, which allows escalation from the normal user...8.8 High
- ucms project ucmsAn issue was discovered in UCMS 1.4.6 and 1.6. It allows PHP code injection during installation...9.8 Critical
- ucms project ucmsUCMS 1.4.6 has SQL injection during installation via the install/index.php mysql_dbname parameter.9.8 Critical
- ucms project ucmsUCMS 1.4.6 has XSS via the install/index.php mysql_dbname parameter.6.1 Medium
- gogsGogs XSS Vulnerability6.1 Medium
- bigtreecms bigtree cmsBigTree CMS 4.2.23 allows remote authenticated users, if possessing privileges to set hooks, to...7.5 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 30.0.0.154 and earlier have a privilege escalation vulnerability....7.5 High
- monstraadmin/index.php in Monstra CMS 3.0.4 allows XSS via the page_meta_title parameter in an edit_page...4.8 Medium
- monstraadmin/index.php in Monstra CMS 3.0.4 allows XSS via the page_meta_title parameter in an edit_page...6.1 Medium
- monstraadmin/index.php in Monstra CMS 3.0.4 allows XSS via the page_meta_title parameter in an add_page...4.8 Medium
- fuji electric v-server lite, fujielectric v-server +1 moreA maliciously crafted project file may cause a buffer overflow, which may allow the attacker to...7.8 High
- asus gt-ac5300 firmwareCross-site request forgery (CSRF) vulnerability on ASUS GT-AC5300 routers with firmware through 3...8.8 High
- asus gt-ac5300 firmwareStack-based buffer overflow on the ASUS GT-AC5300 router through 3.0.0.4.384_32738 allows remote...7.2 High
- asus gt-ac5300 firmwareCross-site scripting (XSS) vulnerability on ASUS GT-AC5300 devices with firmware through 3.0.0.4...6.1 Medium
- asus gt-ac5300 firmwareASUS GT-AC5300 devices with firmware through 3.0.0.4.384_32738 allow remote attackers to cause a...7.5 High
- broIn Bro through 2.5.5, there is a DoS in IRC protocol names command parsing in analyzer/protocol...7.5 High
- apache mesosCrash when decoding malformed HTTP requests or malformed JSON payload7.5 High
- tp-link tl-wr886n firmwareAn issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices....6.5 Medium
- tp-link tl-wr886n firmwareAn issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices....6.5 Medium
- tp-link tl-wr886n firmwareAn issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices....6.5 Medium
- tp-link tl-wr886n firmwareAn issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices....6.5 Medium
- tp-link tl-wr886n firmwareAn issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices....6.5 Medium
- tp-link tl-wr886n firmwareAn issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices....6.5 Medium
- tp-link tl-wr886n firmwareAn issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices....6.5 Medium
- tp-link tl-wr886n firmwareAn issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices....6.5 Medium
- tp-link tl-wr886n firmwareAn issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices....6.5 Medium
- tp-link tl-wr886n firmwareAn issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices....6.5 Medium
- tp-link tl-wr886n firmwareAn issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices....6.5 Medium
- tp-link tl-wr886n firmwareAn issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices....6.5 Medium
- tp-link tl-wr886n firmwareAn issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices....6.5 Medium
- tp-link tl-wr886n firmwareAn issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices....6.5 Medium
- tp-link tl-wr886n firmwareAn issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices....6.5 Medium
- nasm netwide assemblerNetwide Assembler (NASM) 2.14rc15 has an invalid memory write (segmentation fault) in...5.5 Medium
- Show moreLoading…