CVEs published in September 2018
1,223 vulnerabilities, 177 critical, 3 exploited.
- red hat undertow, redhat jboss enterprise application platform +1 moreExposure of Sensitive Information to an Unauthorized Actor in Undertow5.3 Medium
- linux kernelA security flaw was found in the ip_frag_reasm() function in net/ipv4/ip_fragment.c in the Linux...6.5 Medium
clamavUbuntuclamav regressionNo score- oracle webcenter interactionAn issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The portal component is...5.3 Medium
- oracle webcenter interactionAn issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The ASP.NET_SessionID...5.4 Medium
- oracle webcenter interactionThe Oracle WebCenter Interaction 10.3.3 search service queryd.exe binary is compiled with the...9.8 Critical
- oracle webcenter interactionThe AjaxControl component of Oracle WebCenter Interaction Portal 10.3.3 does not validate the...6.5 Medium
- oracle webcenter interactionThe login function of Oracle WebCenter Interaction Portal 10.3.3 is vulnerable to reflected cross...6.1 Medium
- oracle webcenter interactionAn issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The login function of the...6.1 Medium
- oracle webcenter interactionThe AjaxView::DisplayResponse() function of the portalpages.dll assembly in Oracle WebCenter...6.1 Medium
- oracle webcenter interactionThe Oracle WebCenter Interaction Portal 10.3.3 does not implement protection against Cross-site...8.8 High
- western digital my cloud dl2100, my cloud dl4100 firmware, my cloud ex2100 firmware +9 more +11 moreIt was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an...9.8 Critical
- python, canonical ubuntu linux, debian linux +1 more +3 morePython Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper...9.8 Critical
- [unknown] moodleMoodle Cross-site Scripting8.8 High
- foscam c1 firmware, indoor ip camera c1 series +1 moreInsufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD...9.9 Critical
- foscam c1 firmware, indoor ip camera c1 series +1 moreAn exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1...8.1 High
- foscam c1 firmware, indoor ip camera c1 series +1 moreAn exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1...8.1 High
- foscam c1 firmware, indoor ip camera c1 series +1 moreAn exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1...8.1 High
- [unknown] moodleMoodle XML import of ddwtos could lead to intentional remote code execution8.8 High
- podofoThis vulnerability allows remote attackers to disclose sensitive information on vulnerable...6.5 Medium
- foscam c1 firmware, indoor ip camera c1 series +1 moreAn information disclosure vulnerability exists in the Multi-Camera interface used by the Foscam...7.5 High
- iceni argusAn exploitable heap overflow vulnerability exists in the ipStringCreate function of Iceni Argus...8.8 High
- insteon hub 2245-222 firmwareAn exploitable information leak vulnerability exists in Insteon Hub running firmware version 1012...9.6 Critical
- cloud foundry container runtime, pivotal cloud foundry container runtime +1 moreCloud Foundry Container Runtime (kubo-release), versions prior to 0.14.0, may leak UAA and...8.8 High
- pivotal cloud cachePivotal Cloud Cache, versions prior to 1.3.1, prints a superuser password in plain text during...8.8 High
- pivotal application servicePivotal Applications Manager in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1...8.8 High
- pivotal application servicePivotal Usage Service in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1 prior...8.8 High
- processmaker, processmaker enterprise +1 moreA code execution vulnerability exists in ProcessMaker Enterprise Core 3.0.1.7-community. A...8.8 High
- apache camelApache Camel's Mail is vulnerable to path traversal5.3 Medium
- golang net, fedoraproject fedora +1 moregolang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer7.5 High
- golang net, fedoraproject fedora +1 moregolang.org/x/net/html NULL Pointer Dereference vulnerability7.5 High
serde_yamlcrates.ioUncontrolled recursion leads to abort in deserializationNo score- yaml-rust project yaml-rustUncontrolled recursion in rust-yaml7.5 High
firefoxUbuntufirefox regressionsNo score- vms-studio quizlordThe Quizlord plugin through 2.0 for WordPress is prone to Stored XSS via the title parameter in a...5.4 Medium
- ultimatefosters ultimateposUltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution...8.8 High
- nickelpro jibu proThe Jibu Pro plugin through 1.7 for WordPress is prone to Stored XSS via the wp-content/plugins...5.4 Medium
- prezi nextPrezi Next 1.3.101.11 has a documented purpose of creating HTML5 presentations but has...9.8 Critical
- zzcmszzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header.9.8 Critical
- phpmywindadmin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the...7.2 High
- phpmywindadmin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the...7.2 High
- phpmywindadmin/goods_update.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the...7.2 High
- phpmywindadmin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the...7.2 High
- phpmywindPHPMyWind 5.5 has XSS in member.php via an HTTP Referer header,5.4 Medium
- metinfoMetInfo 6.1.0 has SQL injection in doexport() in app/system/feedback/admin/feedback_admin.class...4.9 Medium
- mybbA Persistent XSS issue was discovered in the Visual Editor in MyBB before 1.8.19 via a Video MyCode.5.4 Medium
- asus gt-ac5300 firmwareblocking_request.cgi on ASUS GT-AC5300 devices through 3.0.0.4.384_32738 allows remote attackers...7.5 High
- chshcms cscmsCScms 4.1 allows remote code execution, as demonstrated by 1');eval($_POST[cmd]);# in Web Name to...9.8 Critical
- chshcms cscmsCScms 4.1 allows arbitrary directory deletion via a dir=..\\ substring to plugins\sys\admin...7.5 High
- easycmsApp/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS...6.1 Medium
- Show moreLoading…