CVEs published in October 2018
1,469 vulnerabilities, 177 critical, 2 exploited.
- microsoft exchange serverAn elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA)...5.4 Medium
- microsoft excel viewer, office, office word viewer +9 more +11 moreA remote code execution vulnerability exists in the way that Microsoft Graphics Components handle...7.8 High
- microsoft excel viewer, office, office word viewer +4 more +6 moreAn information disclosure vulnerability exists in the way that Microsoft Graphics Components...5.5 Medium
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreA remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft...7.8 High
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreA remote code execution vulnerability exists when "Windows Theme API" does not properly...7.8 High
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreAn elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS...7.8 High
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreAn Elevation of Privilege vulnerability exists in Filter Manager when it improperly handles...7.0 High
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreAn information disclosure vulnerability exists when the Windows kernel improperly handles objects...5.5 Medium
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreAn Elevation of Privilege vulnerability exists in Windows Subsystem for Linux when it fails to...7.8 High
- microsoft windows 10, windows 10 servers, windows server 2008 +5 more +7 moreA security feature bypass vulnerability exists in DNS Global Blocklist feature, aka "Windows DNS...4.3 Medium
- microsoft .net core, powershell core, asp.net core +2 more.NET Core Information Disclosure7.5 High
- microsoft exchange serverA remote code execution vulnerability exists in the way Microsoft Exchange software parses...7.8 High
webkit2gtkUbuntuwebkit2gtk regressionNo score- bytomDenial of Service in Bytom7.5 High
- ibm qlogic 20-port 4\/8 gb san switch module firmware, qlogic 4 gb fibre channel expansion card firmware +1 moreThe QLogic 4Gb Fibre Channel 5.5.2.6.0 and 4/8Gb SAN 7.10.1.20.0 modules for IBM BladeCenter have...9.8 Critical
dnsrubyDebiandnsruby - updateNo score- qibosoftqibosoft V7.0 allows CSRF via admin/index.php?lfj=member&action=addmember to add a user account.8.8 High
- adbglobal epicentroCode injection in the /ui/login form Language parameter in Epicentro E_7.3.2+ allows attackers to...9.8 Critical
- adbglobal epicentroBuffer Overflow in httpd in EpiCentro E_7.3.2+ allows attackers to cause a denial of service...7.5 High
- adbglobal epicentroBuffer Overflow in httpd in EpiCentro E_7.3.2+ allows attackers to execute code remotely via a...9.8 Critical
- redaxoThere is a SQL injection in Benutzerverwaltung in REDAXO before 5.6.4.9.8 Critical
- redaxoMediamanager in REDAXO before 5.6.4 has XSS.6.1 Medium
- redaxoThe $opener_input_field variable in addons/mediapool/pages/index.php in REDAXO 5.6.3 is not...6.1 Medium
- ultimatemember ultimate memberMultiple cross-site scripting (XSS) vulnerabilities in includes/core/um-actions-login.php in the ...6.1 Medium
- apache tikaApache Tika is vulnerable to entity expansions which can lead to a denial of service attack7.5 High
- joomla joomla\!An issue was discovered in Joomla! before 3.8.13. Inadequate checks in com_contact could allow...4.3 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.8.13. com_installer actions do not have sufficient...8.8 High
- joomla joomla\!An issue was discovered in Joomla! before 3.8.13. Inadequate checks on the tags search fields can...4.3 Medium
- joomla joomla\!Joomla RCE Vulnerability7.2 High
- joomla joomla\!An issue was discovered in Joomla! before 3.8.13. If an attacker gets access to the mail account...8.8 High
- we-con levistudiouAn XXE vulnerability in LeviStudioU, Versions 1.8.29 and 1.8.44 can be exploited when the...8.8 High
- we-con levistudiouAn out-of-bounds vulnerability in LeviStudioU, Versions 1.8.29 and 1.8.44 can be exploited when...8.8 High
- vmware esxi, fusion, workstation +2 moreVMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a...6.5 Medium
- linuxsampler libgigAn issue was discovered in libgig 4.1.0. There is an operator new[] failure (due to a big...9.8 Critical
- linuxsampler libgigAn issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in RIFF::List:...8.8 High
- linuxsampler libgigAn issue was discovered in libgig 4.1.0. There is an FPE (divide-by-zero error) in DLS::Sample:...6.5 Medium
- linuxsampler libgigAn issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in DLS::Region:...8.8 High
- linuxsampler libgigAn issue was discovered in libgig 4.1.0. There is operator new[] failure (due to a big...8.8 High
- linuxsampler libgigAn issue was discovered in libgig 4.1.0. There is a NULL pointer dereference in the function DLS:...6.5 Medium
- finecmsCross-site request forgery (CSRF) vulnerability in /admin.php?c=member&m=edit&uid=1 in dayrui...8.8 High
- gopro gpmf-parserAn issue was discovered in GoPro gpmf-parser before 1.2.1. There is a divide-by-zero error in...5.5 Medium
- bixie portfolioThe Bixie Portfolio plugin 1.2.0 for Pagekit has XSS: a logged-in user who has the "Manage...5.4 Medium
- phome empirecmsEmpireCMS v7.5 has an arbitrary file upload vulnerability in the LoadInMod function in e/class...8.8 High
- comsenz duomicmsAn issue was discovered in DuomiCMS 3.0. SQL injection exists in the ajax.php file, as...9.8 Critical
- comsenz duomicmsAn issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php...9.8 Critical
- bijiadao waimai super cmsXSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave...6.1 Medium
- redhat ceph storage, [unknown] ceph-iscsi-cli, redhat enterprise linux desktop +2 more +4 moreIt was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using...9.8 Critical
- wikidforum project wikidforumWikidForum 2.20 has SQL Injection via the rpc.php parent_post_id or num_records parameter, or the...9.8 Critical
- naviwebs navigate cmsNavigate CMS has Stored XSS via the navigate.php Title field in an edit action.5.4 Medium
- telegram** DISPUTED ** An issue was discovered in the org.telegram.messenger application 4.8.11 for...6.8 Medium
- Show moreLoading…