CVEs published in September 2018
1,223 vulnerabilities, 177 critical, 3 exploited.
- tecdiary simple posSimple POS 4.0.24 allows SQL Injection via a products/get_products/ columns[0][search][value]...9.8 Critical
- apache spamassassin, canonical ubuntu linux, debian linux +4 more +6 moreApache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.7.8 High
- apache spamassassin, pdfinfo project pdfinfo, canonical ubuntu linux +1 more +3 moreA potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin...9.8 Critical
- apache spamassassin, canonical ubuntu linux, debian linux +4 more +6 moreA denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2....5.3 Medium
- sbi buddyThe SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow attackers to...8.8 High
- tinyftp project tinyftpIn Tinyftp Tinyftpd 1.1, a buffer overflow exists in the text variable of the do_mkd function in...7.5 High
- microweberAn issue was discovered in Microweber 1.0.7. There is a CSRF attack (against the admin user) that...8.8 High
- get-simple getsimple cms** DISPUTED ** An issue was discovered in GetSimple CMS v3.3.13. There is a CSRF vulnerability...8.8 High
- quickappscms quickapps cmsQuickAppsCMS Cross-Site Request Forgery (CSRF)8.8 High
- surina soundtouchThe WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to...8.8 High
- surina soundtouchThe WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to...8.8 High
- surina soundtouchThe BPMDetect class in BPMDetect.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows...6.5 Medium
- i4a donlinkageAn issue was discovered in DonLinkage 6.6.8. SQL injection in /pages/proxy/php.php and /pages...5.4 Medium
- i4a donlinkageAn issue was discovered in DonLinkage 6.6.8. It allows remote attackers to obtain potentially...5.4 Medium
- i4a donlinkageAn issue was discovered in DonLinkage 6.6.8. The modules /pages/bazy/bazy_adresow.php and /pages...5.4 Medium
- jhead project jheadThe ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to...7.8 High
- otcmsAn issue was discovered in OTCMS 3.61. XSS exists in admin/share_switch.php via these parameters:...6.1 Medium
- otcmsAn issue was discovered in OTCMS 3.61. XSS exists in admin/users.php via these parameters:...6.1 Medium
- seacmsAn issue was discovered in SeaCMS 6.64. XSS exists in admin_video.php via the action, area, type,...6.1 Medium
- php, debian linux, netapp storage automation store +2 moreThe Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x...6.1 Medium
- yiqicms project yiqicmsAn issue was discovered in yiqicms through 2016-11-20. There is stored XSS in comment.php because...6.1 Medium
- logological general-purpose preprocessorGPP through 2.25 will try to use more memory space than is available on the stack, leading to a...8.8 High
- golang net, fedoraproject fedora +1 moregolang.org/x/net/html NULL Pointer Dereference vulnerability7.5 High
- feed statistics project statisticsThe Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url...6.1 Medium
- bitmap project bitmapwernsey/bitmap before 2018-08-18 allows a NULL pointer dereference via a 4-bit image.7.5 High
- json\+\+ project json\+\+JSON++ through 2016-06-15 has a buffer over-read in yyparse() in json.y.9.8 Critical
- jhead project jheadThe ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to...7.8 High
intel-microcodeDebianintel-microcode - security updateNo score- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreArtifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be...7.8 High
- libtiff, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in LibTIFF 4.0.9. There are two out-of-bounds writes in cpTags in tools...8.8 High
- libtiff, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiply_ms in tools...8.8 High
- audiofile, canonical ubuntu linux +1 moreAn issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0...8.8 High
- unlcmsAn issue was discovered in UNL-CMS 7.59. A CSRF attack can update the website settings via ?q...6.5 Medium
- unlcmsAn issue was discovered in UNL-CMS 7.59. A CSRF attack can create new content via ?q=node%2Fadd...6.5 Medium
- dlink dir-816 a2 firmwareAn issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used...9.8 Critical
- dlink dir-816 a2 firmwareAn issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. A very long password to /goform...9.8 Critical
- dlink dir-816 a2 firmwareAn issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used...9.8 Critical
- dlink dir-816 a2 firmwareAn issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the...9.8 Critical
- dlink dir-816 a2 firmwareAn issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used...9.8 Critical
- dlink dir-816 a2 firmwareAn issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used...9.8 Critical
- bullguard safe browsingBullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via...6.1 Medium
- lg supersign cmsLG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP...7.5 High
- lg supersign cmsLG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.8.6 High
- lg supersign cmsLG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs.9.8 Critical
- lg supersign cmsLG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a...9.8 Critical
- o.bike obike-stationless bike sharing, smart locker firmware +1 moreoBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass...5.3 Medium
- opcfoundation ua-.net-legacy, ua-java +1 moreAn XXE vulnerability in the OPC UA Java and .NET Legacy Stack can allow remote attackers to...8.2 High
- debian linux, opcfoundation unified architecture-.net-legacy, unified architecture-java +2 more +4 moreHigh severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua7.5 High
- synametrics synamanSynametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials.7.8 High
- synametrics synamanMultiple cross-site scripting (XSS) vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the...4.8 Medium
- Show moreLoading…