CVEs published in September 2018
1,223 vulnerabilities, 177 critical, 3 exploited.
- wallabagWallabag cross-site scripting (XSS) vulnerability4.0 Medium
- samsung smartthings hub sth-eth-250, sth-eth-250 firmware +1 moreAn exploitable stack-based buffer overflow vulnerability exists in the retrieval of database...7.5 High
- samsung smartthings hub sth-eth-250, sth-eth-250 firmware +1 moreAn exploitable stack-based buffer overflow vulnerability exists in the retrieval of database...7.5 High
- samsung sth-eth-250 firmwareAn exploitable stack-based buffer overflow vulnerability exists in the retrieval of database...7.5 High
- samsung smartthings hub sth-eth-250, sth-eth-250 firmware +1 moreAn exploitable stack-based buffer overflow vulnerability exists in the retrieval of a database...7.5 High
- samsung smartthings hub sth-eth-250, sth-eth-250 firmware +1 moreAn exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video...9.9 Critical
- dedecmsDedeCMS 5.7 SP2 allows XSS via an onhashchange attribute in the msg parameter to /plus...6.1 Medium
- dedecmsDedeCMS 5.7 SP2 allows XML injection, and resultant remote code execution, via a "<file type=...7.2 High
- softcase t-router firmwareAn issue was discovered on SoftCase T-Router build 20112017 devices. A remote attacker can read...9.8 Critical
- softcase t-router firmwareAn issue was discovered on SoftCase T-Router build 20112017 devices. There are no restrictions on...9.8 Critical
- samsung smartthings hub sth-eth-250, sth-eth-250 firmware +1 moreAn exploitable buffer overflow vulnerability exists in the credentials handler of video-core's...9.9 Critical
- samsung smartthings hub sth-eth-250, sth-eth-250 firmware +1 moreAn exploitable buffer overflow vulnerability exists in the credentials handler of video-core's...9.9 Critical
- samsung smartthings hub sth-eth-250, sth-eth-250 firmware +1 moreAn exploitable buffer overflow vulnerability exists in the credentials handler of video-core's...9.9 Critical
- samsung smartthings hub sth-eth-250, sth-eth-250 firmware +1 moreAn exploitable buffer overflow vulnerability exists in the credentials handler of video-core's...9.9 Critical
- apache mesosModerate severity vulnerability that affects org.apache.mesos:mesos5.9 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could...8.4 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 tool...8.4 High
- ibm db2IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1...5.5 Medium
- theforeman foreman, [unknown] smart proxy dynflow +1 moresmart_proxy_dynflow gem authentication bypass in Foreman remote execution feature9.8 Critical
- espocrmStored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /#Email/view saved draft...5.4 Medium
- espocrmReflected XSS exists in client/res/templates/global-search/name-field.tpl in EspoCRM 5.3.6 via /...5.4 Medium
- cuppacmsStored XSS exists in CuppaCMS through 2018-09-03 via an administrator/#/component/table_manager...4.8 Medium
- enalean tuleapAn issue was discovered in Enalean Tuleap before 10.5. Reset password links are not invalidated...9.8 Critical
- hutoolUnzip function in ZipUtil.java in Hutool allows remote attackers to overwrite arbitrary files via directory traversal7.5 High
- webassembly virtual machine project virtual machineAn issue was discovered in WAVM before 2018-09-16. The run function in Programs/wavm/wavm.cpp...8.8 High
- webassembly virtual machine project virtual machineAn issue was discovered in WAVM before 2018-09-16. The loadModule function in Include/Inline/CLI...6.5 Medium
- zohocorp manageengine opmanagerZoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for ...7.5 High
- tug tex live, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in t1_check_unusual_charstring functions in writet1.c files in TeX Live...7.8 High
- liblouis, canonical ubuntu linux, opensuse leap +2 moreThe matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not...6.5 Medium
- [unknown] haproxy, canonical ubuntu linux, redhat enterprise linux +2 more +4 moreA flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An...7.5 High
- exiv2An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a...6.5 Medium
- linknet-usa lw-n605r firmwareLINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell...8.8 High
- moxa edr-810 firmwareA command injection vulnerability in the web server functionality of Moxa EDR-810 V4.2 build...8.8 High
- ubisoft uplayupc.exe in Ubisoft Uplay Desktop Client versions 63.0.5699.0 allows remote attackers to execute...8.8 High
- cwjoomla cw article attachments free, cw article attachments pro +1 moreThe CWJoomla CW Article Attachments PRO extension before 2.0.7 and CW Article Attachments FREE...9.8 Critical
- rockwell automation rslinx classic, rockwellautomation rslinx +1 moreRockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a...9.8 Critical
- rockwell automation rslinx classic, rockwellautomation rslinx +1 moreRockwell Automation RSLinx Classic Versions 4.00.01 and prior. A remote, unauthenticated threat...7.5 High
- rockwell automation rslinx classic, rockwellautomation rslinx +1 moreRockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a...7.5 High
- hp arcsight management centerMFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Downl…7.5 High
- micro focus arcsight management centerMFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Downl…8.8 High
- hp arcsight management centerMFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Downl…6.5 Medium
- hp arcsight management centerMFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Downl…6.5 Medium
- tec4data smartcooler, smartcooler firmware +1 moreTec4Data SmartCooler, all versions prior to firmware 180806, the device responds to a remote...7.5 High
- hp arcsight management centerPotential security vulnerability of Insufficient Access Controls has been identified in ArcSight...6.5 Medium
- hp arcsight management centerMFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Downl…7.5 High
- samsung smartthings hub sth-eth-250, sth-eth-250 firmware +1 moreAn exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core...9.9 Critical
- samsung smartthings hub sth-eth-250, sth-eth-250 firmware +1 moreAn exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core...9.9 Critical
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.6.0 and 6.2.6.1 could allow a local user to...5.1 Medium
- ibm business process manager, business automation workflow +1 moreIBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 through 18.0.0.1 are vulnerable to SQL...6.3 Medium
- arkextensions jck editorThe JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links...9.8 Critical
- Show moreLoading…