CVEs published in September 2018
1,223 vulnerabilities, 177 critical, 3 exploited.
- apple icloud, itunes, safari +2 more +4 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...8.8 High
- apple icloud, itunes, safari +1 more +3 moreA cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of...8.1 High
- apple icloud, itunes, safari +2 more +4 moreA use after free issue was addressed with improved memory management. This issue affected...8.8 High
- apple icloud, itunes, safari +2 more +4 moreA use after free issue was addressed with improved memory management. This issue affected...8.8 High
- apple icloud, itunes, safari +2 more +4 moreA memory corruption issue was addressed with improved state management. This issue affected...8.8 High
- apple icloud, itunes, safari +2 more +4 moreA use after free issue was addressed with improved memory management. This issue affected...8.8 High
- apple icloud, itunes, safari +2 more +4 moreA use after free issue was addressed with improved memory management. This issue affected...8.8 High
- apple icloud, itunes, safari +2 more +4 moreA use after free issue was addressed with improved memory management. This issue affected...8.8 High
- apple icloud, itunes, safari +2 more +4 moreThe issue was addressed by removing origin information. This issue affected versions prior to iOS...8.1 High
- apple icloud, itunes, safari +2 more +4 moreA cross-site scripting issue existed in Safari. This issue was addressed with improved URL...6.1 Medium
- apple icloud, itunes, safari +2 more +4 moreA use after free issue was addressed with improved memory management. This issue affected...8.8 High
- apple icloud, itunes, safari +3 more +5 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...8.8 High
- apple icloud, itunes, safari +5 more +7 moreIn iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS...8.8 High
- apple icloud, itunes, safari +5 more +7 moreIn iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS...8.8 High
- apple itunes, safari, tvos +4 more +6 moreIn iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7...8.8 High
- apple icloud, itunes, safari +5 more +7 moreIn iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS...8.8 High
- apple icloud, itunes, safari +5 more +7 moreIn iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS...8.8 High
- apple icloud, itunes, safari +5 more +7 moreIn iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS...8.8 High
- apple icloud, itunes, safari +2 more +4 moreA use after free issue was addressed with improved memory management. This issue affected...8.8 High
- apple icloud, itunes, safari +3 more +5 moreA memory corruption issue was addressed with improved validation. This issue affected versions...8.8 High
- exiv2, canonical ubuntu linux, debian linux +3 more +5 moreCiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption...6.5 Medium
- jekyllrb jekyllJekyll allows attackers to access arbitrary files by specifying a symlink7.5 High
- multiplanet alphaindex dictionariesSQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter...9.8 Critical
- osthemeclub timetable scheduleSQL Injection exists in the Timetable Schedule 3.6.8 component for Joomla! via the eid parameter.9.8 Critical
- super cms blog pro project cms blog proSQL Injection exists in authors_post.php in Super Cms Blog Pro 1.0 via the author parameter.9.8 Critical
- thephpfactory social factorySQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radius[lat],...9.8 Critical
- thephpfactory swap factorySQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filter_order_Dir or...9.8 Critical
- thephpfactory collection factorySQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filter_order...9.8 Critical
- thephpfactory jobs factorySQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filter_letter...9.8 Critical
- thephpfactory article factory managerSQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the...9.8 Critical
- thephpfactory raffle factorySQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filter_order_Dir...9.8 Critical
- thephpfactory penny auction factorySQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the...9.8 Critical
- extensiondeveloper questionsSQL Injection exists in the Questions 1.4.3 component for Joomla! via the term, userid, users, or...9.8 Critical
- thephpfactory reverse auction factorySQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the...9.8 Critical
- joomlathat music collectionSQL Injection exists in the Music Collection 3.0.3 component for Joomla! via the id parameter.9.8 Critical
- progress sitefinity cmsCross-site scripting (XSS) vulnerability in ServiceStack in Progress Sitefinity CMS versions 10.2...6.1 Medium
- progress sitefinityAn arbitrary file upload vulnerability in Progress Sitefinity CMS versions 4.0 through 11.0...7.5 High
- rausoft id.proveAn issue was discovered in Rausoft ID.prove 2.95. The login page allows SQL injection via...9.8 Critical
- xwikiXWiki XSS Vulnerability5.4 Medium
- iswebCMS ISWEB 3.5.3 is vulnerable to directory traversal and local file download, as demonstrated by...9.8 Critical
- iswebCMS ISWEB 3.5.3 is vulnerable to multiple SQL injection flaws. An attacker can inject malicious...9.8 Critical
- progress kendo uiCross-site scripting (XSS) vulnerability in Progress Kendo UI Editor v2018.1.221 allows remote...6.1 Medium
- avaya aura communication manager, communication manager +1 moreCommunication Manager Local Administrator PrivEsc6.3 Medium
- delta electronics industrial automation pmsoft, deltaww delta industrial automation pmsoft +1 moreDelta Electronics Delta Industrial Automation PMSoft v2.11 or prior has an out-of-bounds read...6.5 Medium
- [unknown] sos-collector, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreIt was discovered that sos-collector does not properly set the default permissions of newly...5.9 Medium
- ibm websphere portalIBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm websphere portalIBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to conduct phishing...7.4 High
- ibm websphere portalIBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This...6.1 Medium
- ibm websphere portalIBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This...5.4 Medium
- hewlett packard enterprise hpe enhanced internet usage manager (eium), hp enhanced internet usage manager, hpe enhanced internet usage manager (eium) +2 moreHPE has addressed a remote arbitrary file modification vulnerability in HPE enhanced Internet...6.5 Medium
- Show moreLoading…