CVEs published in October 2018
1,469 vulnerabilities, 177 critical, 2 exploited.
- foxitsoftware phantompdf, reader +1 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader...7.8 High
- foxitsoftware phantompdf, reader +1 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader...7.8 High
postgresql10SUSE,postgresql10-libsSUSE,postgresql-initSUSE +2 moreSecurity update for postgresql10No score- auto-maskin dcu-210e, marine pro observer, rp-210e +2 more +4 moreThe Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App use an embedded webserver that uses unencrypted plaintext for the transmission of the administrator PIN9.1 Critical
- auto-maskin dcu-210e, marine pro observer android app, marine pro observer +3 more +5 moreThe Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App transmit sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors9.1 Critical
- auto-maskin dcu-210e, marine pro observer android app, rp-210e +2 more +4 moreThe Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App utilize an undocumented custom protocol to set up Modbus communications with other devices without validating those devices, resu…9.1 Critical
- auto-maskin dcu-210e, rp-210e, dcu-210e firmware +1 more +3 moreThe Auto-Maskin DCU 210E firmware contains an undocumented Dropbear SSH server, v2015.55, configured to listen on Port 22 while the DCU is running and is configured with a hard-coded credentials9.4 Critical
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 generates an error message that includes...4.3 Medium
- ibm security key lifecycle managerIBM Security Key Lifecycle Manager 3.0 specifies permissions for a security-critical resource in...4.2 Medium
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 uses incomplete blacklisting for input...4.3 Medium
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 discloses sensitive information to...5.3 Medium
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 contains hard-coded credentials, such as a...5.9 Medium
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 does not properly limit the number or...6.5 Medium
- rust-lang rustThe Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126...9.8 Critical
- privacyideaprivacyIDEA Improper Input Validation vulnerability7.5 High
- contiki-ngcontiki-ng version 4 contains a Buffer Overflow vulnerability in AQL (Antelope Query Language)...9.8 Critical
- giteaGitea Exposes Private Email Addresses5.3 Medium
- we-con pi studio, pi studio hmi +1 moreIn WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2...5.3 Medium
- we-con pi studio, pi studio hmi +1 moreWECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34...9.8 Critical
- we-con pi studio, pi studio hmi +1 moreWECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34...8.8 High
ImageMagickSUSESecurity update for ImageMagickNo score- net-snmp, canonical ubuntu linux, debian linux +7 more +9 more_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception...6.5 Medium
- tinc-vpn tinc, debian linux, starwindsoftware starwind virtual san +2 moreMissing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows...5.9 Medium
- tinc-vpn tinc, debian linux, starwindsoftware starwind virtual san +2 moretinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a partial...3.7 Low
- tinc-vpn tinc, starwindsoftware starwind virtual san +1 moretinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation.5.3 Medium
- cisco clamav, canonical ubuntu linux, debian linux +2 moreClam AntiVirus unmew11() Denial of Service Vulnerability5.5 Medium
- pyopenssl project pyopenssl, canonical ubuntu linux, redhat enterprise linux desktop +4 more +6 morePyopenssl Incorrect Memory Management5.9 Medium
- pyopenssl, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 morePyOpenSSL Use-After-Free vulnerability8.1 High
- paramiko, canonical ubuntu linux, debian linux +8 more +10 moreParamiko Authentication Bypass vulnerability8.8 High
- imagemagickIn ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the SVGStripString...6.5 Medium
- extplorerext_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a...9.8 Critical
- wp-slimstat slimstat analyticsThe wp-slimstat (aka Slimstat Analytics) plugin before 4.1.6.1 for WordPress has XSS via an HTTP...6.1 Medium
- imagemagick, debian linux +1 moreIn ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function...6.5 Medium
- imagemagickIn ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders...6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 morearch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles...7.1 High
- qpdf project qpdfIn QPDF 8.2.1, in libqpdf/QPDFWriter.cc, QPDFWriter::unparseObject and QPDFWriter::unparseChild...3.3 Low
- pivotal container servicePKS leaks IaaS Credentials to Application Logs9.0 Critical
- 1passwordThe 1Password application 6.8 for Android is affected by a Denial Of Service vulnerability. By...5.9 Medium
- pivotal software cloud foundry log cache, cloud foundry log-cache-release +1 moreLog Cache logs UAA client secret on startup9.1 Critical
- cloud foundry boshBosh accepts refresh tokens in place of an access token8.4 High
- cloud foundry uaa, uaa release, pivotal software cloudfoundry uaa +1 more +3 moreCloud Foundry UAA MFA does not prevent brute force of MFA code6.6 Medium
- pivotal software operations manager, pivotal pivotal-ops-manager +1 morePivotal Operations Manager UAA config - temp Ram Disk7.9 High
- dell emc unity, unityvsa, dell emc unity operating environment +1 more +3 moreDell EMC Unity OE versions 4.3.0.x and 4.3.1.x and UnityVSA OE versions 4.3.0.x and 4.3.1.x...7.8 High
- apache pdfbox, fedoraproject fedora, oracle retail xstore point of service +2 moreIn Apache PDFBox a carefully crafted PDF file can trigger an extremely long running computation5.5 Medium
- apache rangerUnixAuthenticationService in Apache Ranger was updated to correctly handle user input to avoid Stack-based buffer overflow8.8 High
- cisco rv180w wireless-n multifunction vpn router, rv180w firmware, rv220w firmware +2 moreCisco RV180W Wireless-N Multifunction VPN Router Directory Path Traversal Vulnerability7.5 High
- cisco data center network manager, prime data center network manager +1 moreCisco Data Center Network Manager Path Traversal Vulnerability8.1 High
- cisco rv180w wireless-n multifunction vpn router, rv220w wireless network security firewall +1 moreCisco RV180W Wireless-N Multifunction VPN Router SQL Injection Vulnerability7.5 High
- cisco webex event center, webex business suite 31, webex business suite 32 +2 more +4 moreCisco Webex Centers Cross-Site Scripting Vulnerability6.1 Medium
- cisco unified ip phone 7900 series, skinny client control protocol software +1 moreCisco Unified IP Phone 7900 Series Cross-Site Scripting Vulnerability6.1 Medium
- Show moreLoading…