CVEs published in October 2018
1,469 vulnerabilities, 177 critical, 2 exploited.
- siemens rox ii, rox ii firmware +1 moreA vulnerability has been identified in ROX II (All versions < V2.12.1). An attacker with network...8.8 High
- siemens ag simatic s7-1200 cpu family version 4, siemens simatic s7-1200 v4 firmware +1 moreA vulnerability has been identified in SIMATIC S7-1200 CPU family version 4 (All versions < V4.2...7.3 High
- pbootcmsPbootCMS 1.2.1 has SQL injection via the HTTP POST data to the api.php/cms/addform?fcode=1 URI.8.1 High
- dilicmsXSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment...6.1 Medium
- dilicmsXSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment...6.1 Medium
- virtualminVirtualmin 6.03 allows XSS via the query string, as demonstrated by the webmin_search.cgi URI.6.1 Medium
- virtualminVirtualmin 6.03 allows Frame Injection via the settings-editor_read.cgi file parameter.6.1 Medium
- hangzhou xiongmai technology co., ltd xmeye p2p cloud serverAll versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an...6.5 Medium
- hangzhou xiongmai technology co., ltd xmeye p2p cloud serverAll versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an...5.3 Medium
- hangzhou xiongmai technology co., ltd xmeye p2p cloud serverAll versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all...9.8 Critical
- apache activemqApache ActiveMQ web console vulnerable to Cross-site Scripting6.1 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreWhen F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.5.1-11.5.6 is processing...5.9 Medium
- intel client nvme, datacenter nvme, rapid storage technology +1 more +3 morePermissions in the driver pack installers for Intel NVMe before version 4.0.0.1007 and Intel RSTe...7.8 High
- microsoft sql server management studio 17.9, sql server management studio 18.0, sql server management studio +2 moreAn information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS)...5.5 Medium
- microsoft sql server management studio 17.9, sql server management studio 18.0, sql server management studio +2 moreAn information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS)...5.5 Medium
- microsoft azure iot edge, hub device client sdk, azure internet of things edge +1 more +3 moreA remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK...8.8 High
- microsoft edgeA security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of...4.3 Medium
- microsoft sql server management studio 17.9, sql server management studio 18.0, sql server management studio +2 moreAn information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS)...5.5 Medium
- microsoft sharepoint, sharepoint enterprise server +1 moreAn elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly...5.4 Medium
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft edgeA security feature bypass vulnerability exists in Microsoft Edge when the Edge Content Security...5.4 Medium
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft edgeA remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in...7.5 High
- microsoft windows 10, windows 10 servers, windows server 2019 +1 more +3 moreAn Information Disclosure vulnerability exists in the way that Microsoft Windows Codecs Library...5.5 Medium
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft office, sharepoint server, word +2 more +4 moreA remote code execution vulnerability exists in Microsoft Word software when the software fails...8.8 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft excel, office, office 365 proplus +2 moreA remote code execution vulnerability exists in Microsoft Excel software when the software fails...8.8 High
- microsoft office, powerpoint, office 365 proplus +1 more +3 moreA remote code execution vulnerability exists in Microsoft PowerPoint software when the software...8.8 High
- microsoft chakracoreChakraCore RCE Vulnerability9.8 Critical
- microsoft sharepoint, sharepoint enterprise server +1 moreAn elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly...5.4 Medium
- microsoft windows 10, windows 10 servers, windows server 2016 +1 more +3 moreAn elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects...7.8 High
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka ...7.5 High
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreA remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser...8.8 High
- microsoft windows 10, windows 10 servers, windows 8.1 +11 more +13 moreAn information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles...7.5 High
- microsoft windows 10, windows 10 servers, windows server 2016 +1 more +3 moreA security feature bypass vulnerability exists in Device Guard that could allow an attacker to...5.3 Medium
- microsoft internet explorer 11, internet explorer +1 moreA remote code execution vulnerability exists when Internet Explorer improperly accesses objects...7.5 High
- microsoft windows 10, windows 10 servers, windows server 2016 +1 more +3 moreA remote code execution vulnerability exists when Windows Hyper-V on a host server fails to...8.4 High
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreA remote code execution vulnerability exists when Windows Hyper-V on a host server fails to...8.4 High
- microsoft sharepoint, sharepoint enterprise server +1 moreAn elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly...5.4 Medium
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreAn information disclosure vulnerability exists when DirectX improperly handles objects in memory,...5.5 Medium
- microsoft windows 10, windows 10 servers, windows 8.1 +6 more +8 moreAn elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver...7.8 High
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreAn information disclosure vulnerability exists when Windows Media Player improperly discloses...3.1 Low
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreAn information disclosure vulnerability exists when Windows Media Player improperly discloses...3.1 Low
- microsoft sharepoint, sharepoint enterprise server 2016 +1 moreAn elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly...5.4 Medium
- microsoft chakracore, edge +1 moreA remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in...7.5 High
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreAn information disclosure vulnerability exists in the way that the Windows Graphics Device...5.5 Medium
- microsoft internet explorer 11, internet explorer +1 moreA remote code execution vulnerability exists when Internet Explorer improperly accesses objects...7.5 High
- microsoft win32k, windows 10, windows 10 servers +17 more +19 moreAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to...7.8 High
- Show moreLoading…