CVEs published in September 2018
1,223 vulnerabilities, 177 critical, 3 exploited.
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and...7.5 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and...7.5 High
- servo smallvecUse of Uninitialized Resource in smallvec7.5 High
- apache http server, canonical ubuntu linux, netapp storage automation store +6 more +8 moreIn Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can...5.9 Medium
- samsung galaxy s8, galaxy s8 firmware +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- samsung membersThis vulnerability allows remote attackers to escalate privileges on vulnerable installations of...8.8 High
- samsung galaxy appsThis vulnerability allows local attackers to escalate privileges on vulnerable installations of...7.8 High
- samsung notesThis vulnerability allows local attackers to escalate privileges on vulnerable installations of...7.0 High
- samsung galaxy appsThis vulnerability allows local attackers to escalate privileges on vulnerable installations of...7.0 High
- samsung galaxy appsThis vulnerability allows local attackers to execute arbitrary code on vulnerable installations...7.0 High
- samsung emailThis vulnerability allows local attackers to disclose sensitive information on vulnerable...5.5 Medium
- samsung emailThis vulnerability allows local attackers to escalate privileges on vulnerable installations of...7.8 High
- samsung internet browserThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- digium asterisk, certified asterisk, debian linux +2 moreThere is a stack consumption vulnerability in the res_http_websocket.so module of Asterisk...7.5 High
- tgstation13 tgstation-servertgstation-server cached user logins in legacy server9.8 Critical
- localize my post project my postThe Localize My Post plugin 1.0 for WordPress allows Directory Traversal via the ajax/include.php...7.5 High
- wechat brodcast project brodcastThe Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the...9.8 Critical
- druide antidote 9Druide Antidote through 9.5.1 on Windows and Linux allows remote code execution through the...8.1 High
- cryptosagaThe random() function of the smart contract implementation for CryptoSaga, an Ethereum game,...7.5 High
- honeywell ck75, cn51, cn75 +12 more +14 moreOn Honeywell Mobile Computers (CT60 running Android OS 7.1, CN80 running Android OS 7.1, CT40...5.8 Medium
- rxtec rxadminMultiple SQL injection vulnerabilities in the login page in RXTEC RXAdmin UPDATE 06 / 2012 allow...9.8 Critical
pam_pkcs11SUSESecurity update for pam_pkcs11No score- hdfgroup hdf5An issue was discovered in the HDF HDF5 1.10.3 library. There is a stack-based buffer overflow in...6.5 Medium
- hdfgroup hdf5A SIGFPE signal is raised in the function H5D__select_io() of H5Dselect.c in the HDF HDF5 through...6.5 Medium
- hdfgroup hdf5ReadCode() in decompress.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a...6.5 Medium
- hdfgroup hdf5A heap-based buffer over-read in H5O_attr_decode() in H5Oattr.c in the HDF HDF5 through 1.10.3...6.5 Medium
- hdfgroup hdf5A heap-based buffer overflow in ReadGifImageDesc() in gifread.c in the HDF HDF5 through 1.10.3...6.5 Medium
- hdfgroup hdf5A NULL pointer dereference in H5O_sdspace_encode() in H5Osdspace.c in the HDF HDF5 through 1.10.3...6.5 Medium
- mcafee true key (tk), true key +1 moreTrue Key (TK) - DLL Search Order Hijacking vulnerability7.5 High
- avaya call management system supervisorCMS Supervisor Information Disclosure7.2 High
- mcafee true key (tk), true key +1 moreTrue Key (TK) - Cross Site Scripting Exposure5.9 Medium
shadowSUSESecurity update for shadowNo scoreshadowSUSESecurity update for shadowNo score- No product listedxml package does not obey ignore_environmentNo score
- hdfgroup hdf5Memory leak in the H5O_dtype_decode_helper() function in H5Odtype.c in the HDF HDF5 through 1.10...6.5 Medium
- hdfgroup hdf5A SIGFPE signal is raised in the function apply_filters() of h5repack_filters.c in the HDF HDF5...6.5 Medium
- strongswan, canonical ubuntu linux, debian linux +2 moreIn verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and...7.5 High
- strongswan, canonical ubuntu linux, debian linux +2 moreIn verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and...7.5 High
- python, canonical ubuntu linux, debian linux +5 more +7 morePython's elementtree C accelerator failed to initialise Expat's hash salt during initialization....5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moreA security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in...7.0 High
- sbi buddyThe SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow an attacker...5.3 Medium
- phonepe** DISPUTED ** The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for...8.8 High
- phonepe** DISPUTED ** The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for...5.3 Medium
- phonepe** DISPUTED ** The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for...8.8 High
- phonepe** DISPUTED ** The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for...7.0 High
- springboot authority project authorityAn issue was discovered in springboot_authority through 2017-03-06. There is stored XSS via the...4.8 Medium
- publiccmsAn issue was discovered in PublicCMS V4.0.180825. For an invalid login attempt, the response...5.3 Medium
- mingsoft mcmsMingsoft MCMS CSRF vulnerability8.8 High
- otcmsOTCMS 3.61 allows remote attackers to execute arbitrary PHP code via the accBackupDir parameter.8.1 High
- weaselcms project weaselcmsMultiple XSS vulnerabilities in WeaselCMS v0.3.6 allow remote attackers to inject arbitrary web...6.1 Medium
- Show moreLoading…