CVEs published in October 2018
1,469 vulnerabilities, 177 critical, 2 exploited.
- cisco rv130w wireless-n multifunction vpn router firmware, rv110w firmware, rv130w firmware +1 more +3 moreCisco RV110W, RV130W, and RV215W Routers Management Interface Command Injection Vulnerability8.8 High
- cisco rv130w wireless-n multifunction vpn router firmware, rv110w firmware, rv130w firmware +1 more +3 moreCisco RV110W, RV130W, and RV215W Routers Management Interface Buffer Overflow Vulnerability8.1 High
- cisco webex business suite 31, webex business suite 32, webex business suite 33 +2 more +4 moreA vulnerability in the folder permissions of Cisco Webex Meetings client for Windows could allow...7.3 High
- cisco prime access registrar, prime access registrar jumpstart +1 moreCisco Prime Access Registrar Denial of Service Vulnerability8.6 High
- cisco secure access control server solution engine (acse), secure access control server solution engine +1 moreCisco Secure Access Control Server XML External Entity Injection Vulnerability5.7 Medium
- cisco ios and ios xe software, ios, ios xe +2 moreCisco IOS and IOS XE Software VLAN Trunking Protocol Denial of Service Vulnerability6.5 Medium
- ibm robotic process automation with automation anywhereIBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to persistent...5.4 Medium
- ibm robotic process automation with automation anywhereIBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to cross-site...6.1 Medium
- ibm spectrum scaleIBM GPFS (IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2) command...5.5 Medium
- ibm spectrum scaleIBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2 could allow an...6.2 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm qradar incident forensicsIBM QRadar Incident Forensics 7.2 and 7.3 could allow a remote attacker to traverse directories...7.7 High
- ibm qradar incident forensicsIBM QRadar Incident Forensics 7.2 and 7.3 does not properly restrict the size or amount of...7.5 High
- vmware airwatch console, workspace one unified endpoint management console (airwatch console) +1 moreThe VMware Workspace ONE Unified Endpoint Management Console (A/W Console) 9.7.x prior to 9.7.0.3...7.4 High
- videowhisper video presentationThe videowhisper-video-presentation plugin 3.31.17 for WordPress allows remote attackers to...9.8 Critical
- wp-db-backup project wp-db-backupThe wp-db-backup plugin 2.2.4 for WordPress relies on a five-character string for access control,...7.5 High
- karo project karokaro Metacharacter Handling Remote Command Execution9.8 Critical
- icecoldapps servers ultimateIce Cold Apps Servers Ultimate 6.0.2(12) does not require authentication for TELNET, SSH, or FTP,...9.8 Critical
- imagemagickImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c.6.5 Medium
- razorcmsrars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user.8.8 High
- git-scm git, canonical ubuntu linux, debian linux +8 more +10 moreGit before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x...9.8 Critical
- gnu binutilsAn issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31....5.5 Medium
- ispconfigAn unanchored /[a-z]{2}/ regular expression in ISPConfig before 3.1.13 makes it possible to...7.8 High
- mercurialMercurial Out-of-bounds Read vulnerability9.1 Critical
- videowhisper video conferenceThe VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows...9.8 Critical
apparmorUbuntuAppArmor updateNo score- carestream vue risCarestream Vue RIS, RIS Client Builds: Version 11.2 and prior running on a Windows 8.1 machine...3.7 Low
- open source real-estate script project source real-estate scriptPHP Scripts Mall Open Source Real-estate Script 3.6.2 allows remote attackers to list the wp...5.3 Medium
- phpscriptsmall website seller scriptPHP Scripts Mall Website Seller Script 2.0.5 has XSS via a keyword. NOTE: This may overlap with...6.1 Medium
- marketplace script project scriptPHP Scripts Mall Market Place Script 1.0.1 allows XSS via a keyword.6.1 Medium
- domain lookup script project lookup scriptPHP Scripts Mall Domain Lookup Script 3.0.5 allows XSS in the search bar.6.1 Medium
- phpscriptsmall olx clonePHP Scripts Mall Olx Clone 3.4.2 has XSS.6.1 Medium
- naviwebs navigate cmsNavigate CMS 2.8 has Stored XSS via a navigate_upload.php (aka File Upload) request with a...5.4 Medium
- mediawikiTarball was missing .htaccess files5.3 Medium
- web-feet coaster cmsCoaster CMS Stored Cross-site Scripting vulnerability6.1 Medium
- verint collaboration compliance, quality management platform +1 moreVerba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Insecure...8.8 High
- verint verba collaboration compliance and quality management platformVerba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Incorrect...6.5 Medium
- ibm financial transaction managerIBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.2, 3.0.4, 3.0.6,...6.3 Medium
- ibm financial transaction managerIBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an...3.1 Low
- ibm rational quality managerIBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross...5.4 Medium
- ibm rational quality managerIBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross...5.4 Medium
- ibm rational quality managerIBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross...5.4 Medium
- apache pony mailThe statistics generator in Apache Pony Mail 0.7 to 0.9 was found to be returning timestamp data...5.3 Medium
- netapp e-series santricity os controller software, e-series santricity os controller +1 moreNetApp E-Series SANtricity OS Controller Software 11.30 and later version 11.30.5 is susceptible...9.8 Critical
dnsmasqDebiandnsmasq - updateNo score- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreApache Tomcat Open Redirect vulnerability4.3 Medium
- broadcom tcpreplayAn issue was discovered in Tcpreplay 4.3.0 beta1. A heap-based buffer over-read was triggered in...5.5 Medium
- mcafee threat intelligence exchange server (tie server), threat intelligence exchange server +1 moreThreat Intelligence Exchange Server (TIE Server) SSH host keys generation vulnerability6.1 Medium
- hp a2w75a firmware, a2w76a firmware, a2w77a firmware +192 more +194 moreA potential security vulnerability has been identified with certain HP printers and MFPs in...8.8 High
- d-link dir-823g firmwareOn D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 SetPasswdSettings...9.8 Critical
- Show moreLoading…