CVEs published in October 2018
1,469 vulnerabilities, 177 critical, 2 exploited.
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6 are...5.4 Medium
- ibm rational quality managerIBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross...5.4 Medium
- ibm rational quality managerIBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross...5.4 Medium
- ibm security guardiumIBM Security Guardium EcoSystem 10.5 does not validate, or incorrectly validates, a certificate...3.7 Low
- ibm security guardiumIBM Security Guardium EcoSystem 10.5 stores user credentials in plain in clear text which can be...6.2 Medium
- ibm rational quality managerIBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross...5.4 Medium
- ibm rational quality managerIBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross...5.4 Medium
- ibm rational quality managerIBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross...5.4 Medium
- ibm rational quality managerIBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross...5.4 Medium
- ibm rational quality managerIBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross...5.4 Medium
- ibm rational quality managerIBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross...5.4 Medium
- opensuse open build servicepath traversal in obs-service-tar_scm3.1 Low
- ibm rational quality managerIBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross...5.4 Medium
- lenovo group ltd ideapad, hp 310s-14isk firmware, 320-15ikbra firmware +66 more +68 moreBIOS Write Protection Race Condition5.9 Medium
- dell digital deliveryDell Digital Delivery versions prior to 3.5.1 contain a DLL Injection Vulnerability. A local...7.8 High
- expressionengineExpressionEngine before 4.3.5 has reflected XSS.6.1 Medium
- btiteam xbtitAn issue was discovered in BTITeam XBTIT 2.5.4. The "returnto" parameter of account_change.php is...6.1 Medium
- dasan h660gw firmwareDASAN H660GW devices do not implement any CSRF protection mechanism.8.8 High
- dasan h660gw firmwareDASAN H660GW devices have Stored XSS in the Port Forwarding functionality.4.8 Medium
- dasannetworks h660gw firmwareThe Port Forwarding functionality on DASAN H660GW devices allows remote attackers to execute...7.2 High
- theholidaycalendar holiday calendarXSS exists in the the-holiday-calendar plugin before 1.11.3 for WordPress via the thc-month...6.1 Medium
- wpmobilepack wordpress mobile packThe export/content.php exportarticle feature in the wordpress-mobile-pack plugin before 2.1.3...7.5 High
- atlantiswordprocessor atlantis word processorAn exploitable uninitialized pointer vulnerability exists in the Office Open XML parser of...8.8 High
- atlantiswordprocessor atlantis word processorAn exploitable double-free vulnerability exists in the Office Open XML parser of Atlantis Word...8.8 High
- atlantiswordprocessor atlantis word processorAn exploitable stack-based buffer overflow vulnerability exists in the JPEG parser of Atlantis...8.8 High
- atlantiswordprocessor atlantis word processorAn exploitable heap-based buffer overflow vulnerability exists in the Windows enhanced metafile...8.8 High
- atlantiswordprocessor atlantis word processorAn exploitable uninitialized length vulnerability exists within the Word document-parser of the...8.8 High
- atlantiswordprocessor atlantis word processorAn exploitable arbitrary write vulnerability exists in the Word document parser of the Atlantis...8.8 High
- canvasgfx canvas draw, talos acd systems +1 moreAn exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw...8.8 High
- atlantiswordprocessor atlantis word processorAn exploitable out-of-bounds write vulnerability exists in the Word Document parser of the...8.8 High
- atlantiswordprocessor atlantis word processorAn exploitable uninitialized variable vulnerability exists in the RTF-parsing functionality of...7.5 High
- tp-link tl-wrn841n, tl-wrn841n firmware +1 moreThe web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to CSRF due to...8.8 High
- tp-link tl-wrn841n, tl-wrn841n firmware +1 moreThe web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service...6.5 Medium
- tp-link tl-wrn841n, tl-wrn841n firmware +1 moreThe web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to a denial of service...6.5 Medium
- martem telem-gw6/gwm, telem-gw6 firmware, telem-gwm firmware +2 moreMartem TELEM GW6/GWM versions prior to 2.0.87-4018403-k4 may allow unprivileged users to modify...8.8 High
- emerson ams device managerEmerson AMS Device Manager v12.0 to v13.5. Non-administrative users are able to change...6.5 Medium
- emerson ams device managerEmerson AMS Device Manager v12.0 to v13.5. A specially crafted script may be run that allows...9.8 Critical
- ibm websphere portalIBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 may fail to set the correct user context in certain...5.0 Medium
- ibm websphere portalIBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box...5.3 Medium
- fuji electric frenic loader of frenic-mini (c1), frenic-mini (c2), frenic-eco, frenic-multi, frenic-mega, frenic-ace, fujielectric frenic loader 3.3 firmware +1 moreFuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco,...9.8 Critical
- fuji electric frenic loader of frenic-mini (c1), frenic-mini (c2), frenic-eco, frenic-multi, frenic-mega, frenic-ace, fujielectric frenic loader 3.3 firmware +1 moreFuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco,...5.3 Medium
- fuji electric alpha5 smart loader, fujielectric alpha5 smart loader firmware +1 moreFuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on...9.8 Critical
- fuji electric frenic loader of frenic-mini (c1), frenic-mini (c2), frenic-eco, frenic-multi, frenic-mega, frenic-ace, fujielectric frenic loader 3.3 firmware +1 moreFuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco,...9.8 Critical
- fuji electric alpha5 smart loader, fujielectric alpha5 smart loader firmware +1 moreFuji Electric Alpha5 Smart Loader Versions 3.7 and prior. A buffer overflow information...5.3 Medium
- simdcomp project simdcompSIMDComp before 0.1.1 allows remote attackers to cause a denial of service (heap-based buffer...6.5 Medium
- wuzhi cms project cmsA SQL injection was discovered in WUZHI CMS 4.1.0 in coreframe/app/coupon/admin/card.php via the...9.8 Critical
- golang net, fedoraproject fedora +1 moregolang.org/x/net/html Improper Validation of Array Index vulnerability7.5 High
- golang net, fedoraproject fedora +1 moregolang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer7.5 High
- golang net, fedoraproject fedora +1 morex/net/html Vulnerable to DoS During HTML Parsing7.5 High
- jtbc phpAn issue was discovered in JTBC(PHP) 3.0.1.6. Arbitrary file read operations are possible via a ...7.5 High
- Show moreLoading…