CVEs published in October 2018
1,469 vulnerabilities, 177 critical, 2 exploited.
- jtbc phpAn issue was discovered in JTBC(PHP) 3.0.1.6. Arbitrary file deletion is possible via a /console...7.5 High
- jtbc phpAn issue was discovered in JTBC(PHP) 3.0.1.6. It allows remote attackers to execute arbitrary PHP...8.8 High
- get-simple getsimple cmsAn issue was discovered in GetSimple CMS 3.3.15. An administrator can insert stored XSS via the...4.8 Medium
- wuzhicms wuzhi cmsXSS exists in WUZHI CMS 2.0 via the index.php v or f parameter.6.1 Medium
- redaxoIn REDAXO before 5.6.3, a critical SQL injection vulnerability has been discovered in the...9.8 Critical
- redaxoThe $args variable in addons/mediapool/pages/index.php in REDAXO 5.6.2 is not effectively...5.4 Medium
- gdraheim zziplibDirectory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary...5.5 Medium
- hisiphpHisiPHP 1.0.8 allows remote attackers to execute arbitrary PHP code by editing a plugin's name to...7.2 High
- hisiphpHisiPHP 1.0.8 allows CSRF via admin.php/admin/user/adduser.html to add an administrator account....8.8 High
- adplug project adplug, fedoraproject fedora +1 moreAn issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the...9.8 Critical
- simdcomp project simdcompSIMDComp before 0.1.0 allows remote attackers to cause a denial of service (heap-based buffer...6.5 Medium
- nullsoft scriptable install system, debian linux +1 moreNullsoft Scriptable Install System (NSIS) before 2.49 has unsafe implicit linking against Version...7.8 High
- nullsoft scriptable install system, debian linux +1 moreNullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow...5.5 Medium
- ptc thingworx platformAn issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the...5.4 Medium
- ptc thingworx platformAn issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is a hardcoded...7.5 High
- ptc thingworx platformAn issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash...6.5 Medium
ghostscriptDebianghostscript - regression updateNo score- google android, canonical ubuntu linux, debian linux +2 moreIn hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due...7.8 High
- strongswan, canonical ubuntu linux, debian linux +2 moreThe gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate.7.5 High