CVEs published in October 2018
1,469 vulnerabilities, 177 critical, 2 exploited.
- telegram** DISPUTED ** An issue was discovered in the org.telegram.messenger application 4.8.11 for...6.4 Medium
- d-link dir-809 a1 firmware, dir-809 a2 firmware, dir-809 guestzone firmware +2 moreAn issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone...9.8 Critical
- d-link dir-809 a1 firmware, dir-809 a2 firmware, dir-809 guestzone firmware +2 moreAn issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone...7.5 High
- hcl software mycloud, westerndigital my cloud +1 moreThere is a security vulnerability which could lead to Factory Reset Protection (FRP) bypass in...4.6 Medium
- gardener, sap project “gardener” +1 moreFollowing the Gardener architecture, the Kubernetes apiserver of a Gardener managed shoot cluster...8.5 High
- sap fiori, fiori 1.0 for sap erp hcm (approve leave request, version 2) +1 moreSAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2) application allows an attacker...6.5 Medium
- sap businessobjects business intelligence platform, businessobjects bi platform +1 moreSAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 (Web Intelligence DHTML client)...6.1 Medium
- sap businessobjects business intelligence platformUnder certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows...7.5 High
- sap netweaver, netweaver application server for abap +1 moreIn SAP NetWeaver Application Server for ABAP, from 7.0 to 7.02, 7.30, 7.31, 7.40 and from 7.50 to...6.1 Medium
- sap adaptive server enterprise, adaptive server enterprise (ase) +1 moreUnder certain conditions SAP Adaptive Server Enterprise (ASE), versions 15.7 and 16.0, allows an...7.5 High
- sap adaptive server enterprise, adaptive server enterprise (ase) +1 moreUnder certain conditions the backup server in SAP Adaptive Server Enterprise (ASE), versions 15.7...7.5 High
- sap businessobjects bi platform, businessobjects bi platform servers (software development kit) +1 moreIn the Software Development Kit in SAP BusinessObjects BI Platform Servers, versions 4.1 and 4.2,...5.3 Medium
- sap data servicesIn Impact and Lineage Analysis in SAP Data Services, version 4.2, the management console does not...5.4 Medium
- opensuse open build serviceRequest controller allows to create requests with arbitrary request IDs6.5 Medium
- opensuse open build serviceobs-service-replace_using_package_version allows to specify arbitrary input files4.8 Medium
- opensuse open build service, leap +1 moreobs-service-refresh_patches can be tricked into deleting '..' or other unrelated directories3.5 Low
- opensuse open build service, tar scm +1 moreCrafted service parameters allows to induce unexpected behaviour in obs-service-tar_scm5.4 Medium
- trust-dns-proto project trust-dns-protoUncontrolled recursion in trust-dns-proto7.5 High
- mercedes-benz mercedes meAn issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS. The encrypted...7.5 High
- mercedes-benz comandAn issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class...5.9 Medium
- uclouvain openjpeg, debian linux +1 moreOpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c6.5 Medium
- python requests, canonical ubuntu linux, opensuse leap +3 more +5 moreInsufficiently Protected Credentials in Requests7.5 High
- qemu, canonical ubuntu linux, debian linux +3 more +5 moreqemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which...9.8 Critical
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreQemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data...7.5 High
- qemu, canonical ubuntu linux, debian linux +2 more +4 moreQemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer...7.5 High
- wpmlprocess_forms in the WPML (aka sitepress-multilingual-cms) plugin through 3.6.3 for WordPress has...6.1 Medium
- [unknown] kernelA missing address check in the callers of the show_opcodes() in the Linux kernel allows an...7.0 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +6 more +8 moreUnder some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the...7.5 High
- net-snmp, netapp cloud backup, data ontap +4 more +6 moresnmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug...7.5 High
- cairographics cairocairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted...6.5 Medium
- linux kernelThe Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH...4.4 Medium
- seqrite end point securitySeqrite End Point Security v7.4 has "Everyone: (F)" permission for %PROGRAMFILES%\Seqrite\Seqrite...7.8 High
- claromentisThe Discuss v1.2.1 module in Claromentis 8.2.2 is vulnerable to stored Cross Site Scripting (XSS)...5.4 Medium
- foxit software pdf reader, foxitsoftware reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's...8.0 High
- foxit software pdf reader, foxitsoftware reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's...8.0 High
- foxit software pdf reader, foxitsoftware reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's...8.0 High
- foxit software pdf reader, foxitsoftware reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's...8.0 High
- foxit software pdf reader, foxitsoftware reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's...8.0 High
- foxit software pdf reader, foxitsoftware reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's...8.0 High
- foxit software pdf reader, foxitsoftware reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's...8.0 High
- dlink central wifimanagerAn issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'sitename'...6.1 Medium
- dlink central wifimanagerAn issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. An unrestricted...8.8 High
- dlink central wifimanagerAn issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'username'...6.1 Medium
- dlink central wifimanagerAn issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. They expose an...9.8 Critical
- progress telerik extensions for asp.net mvcImproper Access Control in Telerik Extensions5.3 Medium
- foxitsoftware phantompdf, reader +1 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader...7.8 High
- foxitsoftware phantompdf, reader +1 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader...7.8 High
- foxitsoftware phantompdf, reader +1 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader...7.8 High
- foxitsoftware phantompdf, reader +1 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader...7.8 High
- foxitsoftware phantompdf, reader +1 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader...7.8 High
- Show moreLoading…