CVEs published in October 2018
1,469 vulnerabilities, 177 critical, 2 exploited.
- d-link dir-823g firmwareOn D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 RunReboot commands...7.5 High
- multitech faxfinderMulti-Tech FaxFinder before 5.1.6 has SQL Injection via a status/call_details?oid= URI, allowing...7.5 High
- naviwebs navigate cmsAn "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in...8.8 High
- naviwebs navigate cmsSQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass...9.8 Critical
- nexusfi opac easyweb fiveAn issue was discovered in OPAC EasyWeb Five 5.7. There is SQL injection via the w2001/index.php...9.8 Critical
- zahiraccounting zahir enterprise plusStack-based buffer overflows in Zahir Accounting Enterprise Plus 6 through build 10b allow remote...7.8 High
- hp compaq 14-h000 firmware, compaq 14-s000 firmware, compaq cq45-900 firmware +32 more +34 moreA BIOS password extraction vulnerability has been reported on certain consumer notebooks with...4.6 Medium
- samsung scx-6545x firmwareSamsung SCX-6545X V2.00.03.01 03-23-2012 devices allows remote attackers to discover cleartext...9.8 Critical
- imagemagickImageMagick 7.0.7-28 has a memory leak vulnerability in ReadBGRImage in coders/bgr.c.6.5 Medium
- progress sitefinity cmsCross-site scripting (XSS) vulnerability in Identity Server in Progress Sitefinity CMS versions...6.1 Medium
- progress sitefinity cmsCross-site scripting (XSS) vulnerability in Identity Server in Progress Sitefinity CMS versions...6.1 Medium
- opcfoundation ua-.net-legacy, ua-.netstandard +1 moreModerate severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua5.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.0.6, 11.1.x before...6.5 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.5 and 11.2...6.1 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.0.6, 11.1.x before...9.8 Critical
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.0.6, 11.1.x before...6.5 Medium
- foxit software pdf reader, foxitsoftware reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's...8.0 High
- foxit software pdf reader, foxitsoftware reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's...8.0 High
- foxit software pdf reader, foxitsoftware reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's...8.0 High
- foxit software pdf reader, foxitsoftware reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's...8.0 High
- foxit software pdf reader, foxitsoftware reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's...8.0 High
- foxit software pdf reader, foxitsoftware reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's...8.0 High
- foxit software pdf reader, foxitsoftware reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's...8.0 High
- foxit software pdf reader, foxitsoftware reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's...8.0 High
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using OAuth ear is vulnerable to cross...6.1 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using SAML ear is vulnerable to cross...6.1 Medium
- delta electronics ispsoftDelta Electronics ISPSoft version 3.0.5 and prior allow an attacker, by opening a crafted file,...7.8 High
- mcafee data loss prevention endpoint (dlpe), data loss prevention endpoint +1 moreData Loss Prevention Endpoint (DLPe) - Authentication Bypass vulnerability7.0 High
- atmist snazzy mapsThe Snazzy Maps plugin before 1.1.5 for WordPress has XSS via the text or tab parameter.6.1 Medium
- tribulant slideshow galleryThe Tribulant Slideshow Gallery plugin before 1.6.6.1 for WordPress has XSS via the id, method,...6.1 Medium
- gnu gnulibThe convert_to_decimal function in vasnprintf.c in Gnulib before 2018-09-23 has a heap-based...8.8 High
- synacor zimbra collaboration suiteZimbra Collaboration before 8.8.10 GA allows text content spoofing via a loginErrorCode value.5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel...5.5 Medium
- imagemagickImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c.6.5 Medium
- imagemagickImageMagick 7.0.7-28 has a memory leak vulnerability in WriteSGIImage in coders/sgi.c.6.5 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreA vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple...9.1 Critical
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreA vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an...8.1 High
- foxit pdf reader, foxitsoftware reader, phantompdf +2 moreA use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF...8.0 High
- foxit pdf reader, foxitsoftware reader, phantompdf +2 moreA use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF...8.0 High
- foxit pdf reader, foxitsoftware reader, phantompdf +2 moreA use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF...8.0 High
- foxit pdf reader, foxitsoftware reader, phantompdf +2 moreA use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF...8.0 High
- foxit pdf reader, foxitsoftware reader, phantompdf +2 moreA use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF...8.0 High
- foxit pdf reader, foxitsoftware reader, phantompdf +2 moreA use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF...8.0 High
- foxit pdf reader, foxitsoftware reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's...8.0 High
- foxit pdf reader, foxitsoftware reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's...8.0 High
- entes emg12, emg-12 firmware +1 moreEntes EMG12 versions 2.57 and prior The application uses a web interface where it is possible for...9.8 Critical
- entes emg12, emg-12 firmware +1 moreEntes EMG12 versions 2.57 and prior an information exposure through query strings vulnerability...9.8 Critical
- ge communicator, gigasoft proessentials +1 moreA heap-based buffer overflow exists in the third-party product Gigasoft, v5 and prior, included...7.6 High
- google androidIn sdcardfs_create and sdcardfs_mkdir of inode.c, there is a possible memory corruption due to...7.8 High
- google androidIn sdcardfs_open of file.c, there is a possible Use After Free due to an unusual root cause. This...7.8 High
- Show moreLoading…