CVEs published in September 2018
1,223 vulnerabilities, 177 critical, 3 exploited.
- gnu binutilsAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...5.5 Medium
- gnu binutilsAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...5.5 Medium
- gnu binutilsAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...5.5 Medium
- bigtreecms bigtree cmsBigTree 4.2.23 on Windows, when Advanced or Simple Rewrite routing is enabled, allows remote...8.1 High
- pdfalto project pdfaltoAn issue has been found in pdfalto through 0.2. It is a heap-based buffer overflow in the...7.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data...7.0 High
- libsvg2 project libsvg2An issue was discovered in libsvg2 through 2012-10-19. A stack-based buffer overflow in the...9.8 Critical
- libsvg2 project libsvg2An issue was discovered in libsvg2 through 2012-10-19. A stack-based buffer overflow in...9.8 Critical
- libsvg2 project libsvg2An issue was discovered in libsvg2 through 2012-10-19. The svgGetNextPathField function in...7.5 High
- yunucmsCross-site scripting (XSS) vulnerability in index.php/index/category/index in YUNUCMS 1.1.4...6.1 Medium
- seacmsAn issue was discovered in SeaCMS 6.64. XSS exists in admin_datarelate.php via the time or maxHit...6.1 Medium
- freedesktop udisks, canonical ubuntu linux +1 moreUDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c, allowing...7.8 High
- mediawiki, debian linux +1 moreBotPasswords can bypass CentralAuth's account lock6.5 Medium
- mediawiki, debian linux +1 moreInformation disclosure in Special:Redirect/logid6.5 Medium
- mediawiki, debian linux +1 more$wgRateLimits entry for 'user' overrides 'newbie'4.3 Medium
- vectra cognitoManagement Console in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local...7.8 High
- vectra cognitoVectra Networks Cognito Brain and Sensor before 4.2 contains a cross-site scripting (XSS)...5.4 Medium
- apache couchdbCouchDB in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local code execution...7.8 High
- intel core i3, core i5, core i7 +29 more +31 morePlatform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core...7.6 High
- ucms project ucmsAn issue was discovered in UCMS 1.4.6. aaddpost.php has stored XSS via the sadmin/aindex.php...6.1 Medium
- fruitywifi project fruitywifiFruityWifi (aka PatatasFritas/PatataWifi) 2.1 allows remote attackers to execute arbitrary...9.8 Critical
- avaya aura orchestration designer, orchestration designer +1 moreOrchestration Designer Runtime Config XSS8.3 High
- avaya orchestration designerOrchestration Designer Runtime Config CSRF8.3 High
- nmealib project nmealibA stack-based buffer overflow was discovered in the xtimor NMEA library (aka nmealib) 0.5.3....9.8 Critical
- lg supersign cmsLG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to...9.8 Critical
- polyai project polyaiThe mintToken function of a smart contract implementation for PolyAi (AI), an Ethereum token, has...7.5 High
- limesurveyIn LimeSurvey 3.14.7, HTML Injection and Stored XSS have been discovered in the appendix via the...6.1 Medium
- ricoh mp 2001sp firmwareOn the RICOH MP 2001 printer, HTML Injection and Stored XSS vulnerabilities have been discovered...6.1 Medium
- ricoh sp 4510sf firmwareOn the RICOH SP 4510SF printer, HTML Injection and Stored XSS vulnerabilities have been...6.1 Medium
- zohocorp manageengine supportcenter plusIn Zoho ManageEngine SupportCenter Plus before 8.1 Build 8109, there is HTML Injection and Stored...6.1 Medium
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to...6.1 Medium
- seacmsSeaCMS 6.64 allows SQL Injection via the upload/admin/admin_video.php order parameter.9.8 Critical
- seacmsSeaCMS 6.64 allows arbitrary directory listing via upload/admin/admin_template.php?path=.....5.3 Medium
- webpack.js webpack-dev-serverMissing Origin Validation in webpack-dev-server7.5 High
- parceljs parcelMissing Origin Validation in parcel-bundler7.5 High
- browserify-hot module replacement project module replacementMissing Origin Validation in browserify-hmr7.5 High
- wanscam hw0021 firmwareThere exists a partial Denial of Service vulnerability in Wanscam HW0021 IP Cameras. An attacker...5.9 Medium
- substratumIn the mintToken function of a smart contract implementation for Substratum (SUB), an Ethereum...7.5 High
- gitolitegitolite before commit fa06a34 might allow local users to read arbitrary files in repositories...5.5 Medium
- gitolitegitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via...9.8 Critical
mpg123MageiaUpdated mpg123 packages fix security vulnerabilityNo scorexml-security-cMageiaUpdated xml-security-c packages fix security vulnerabilityNo score- subsonicAn XSS issue was discovered in Subsonic Media Server 6.1.1. The podcast subscription form is...6.1 Medium
- microsoft exchange serverRollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability...8.6 High
- linux kernel, netapp active iq performance analytics services, element software +1 more +3 moreAn issue was discovered in the Linux kernel before 4.8. Incorrect access checking in overlayfs...5.5 Medium
- deiser profields-project custom fieldsThe DEISER "Profields - Project Custom Fields" app before 6.0.2 for Jira has Incorrect Access...9.8 Critical
- subsonicAn issue was discovered in Subsonic 6.1.1. The music tags feature is affected by three stored...6.1 Medium
- subsonicAn issue was discovered in Subsonic 6.1.1. The general settings are affected by two stored cross...6.1 Medium
- subsonicAn issue was discovered in Subsonic 6.1.1. The transcoding settings are affected by five stored...6.1 Medium
- subsonicAn issue was discovered in Subsonic 6.1.1. The radio settings are affected by three stored cross...6.1 Medium
- Show moreLoading…