CVEs published in October 2018
1,469 vulnerabilities, 177 critical, 2 exploited.
- naver corporation whale browser installer, navercorp whale +1 moreThe Whale browser installer 0.4.3.0 and earlier versions allows DLL hijacking.7.8 High
- ibm security key lifecycle managerIBM Security Key Lifecycle Manager 2.7 and 3.0 could allow an unauthenticated user to restart the...7.5 High
- ibm security key lifecycle managerIBM Security Key Lifecycle Manager 2.6, 2.7, 3.0 could allow an authenticated user to obtain...7.1 High
- ibm spectrum lsfIBM Spectrum LSF 9.1.1 9.1.2, 9.1.3, and 10.1 could allow a local user to change their job user...5.9 Medium
- ibm spectrum symphony, platform symphony, specturm symphony +2 moreIBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive...6.5 Medium
- ibm spectrum symphonyIBM Spectrum Symphony 7.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- pippoPippo RCE Vulnerability9.8 Critical
- tecrail responsive filemanagerAn issue was discovered in dialog.php in tecrail Responsive FileManager 9.8.1. A reflected XSS...6.1 Medium
- tecrail responsive filemanagerAn issue was discovered in dialog.php in tecrail Responsive FileManager 9.8.1. Attackers can...7.5 High
- sugarcrmMultiple vulnerabilities in YUI and FlashCanvas embedded in SugarCRM Community Edition 6.5.26...6.1 Medium
- intelbras nplug firmwareIntelbras NPLUG 1.0.0.14 devices have XSS via a crafted SSID that is received via a network...6.1 Medium
- descor infocad fmAn issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service...7.5 High
- episerver ektron cmsEpiserver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site...9.8 Critical
- intelbras nplug firmwareIntelbras NPLUG 1.0.0.14 wireless repeater devices have no CSRF token protection in the web...8.8 High
- intelbras nplug firmwareIntelbras NPLUG 1.0.0.14 wireless repeater devices have a critical vulnerability that allows an...8.1 High
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 moreModerate severity vulnerability that affects io.vertx:vertx-core9.8 Critical
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 moreEclipse Vert.x does not properly neutralize '' (forward slashes) sequences that can resolve to an external location9.8 Critical
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 moreExcessive memory allocation6.5 Medium
- tibco spotfire statistics servicesTIBCO Spotfire Statistics Services remote execution vulnerabilities9.8 Critical
- intel quickassist technology, intel corporation quickassit technology for linux +1 moreInsufficient access control in driver stack for Intel QuickAssist Technology for Linux before...5.5 Medium
- intel compute module hns2600bp firmware, compute module hns2600bpr firmware, server board s2600bp firmware +12 more +14 moreInsufficient access protection in firmware in Intel Server Board, Intel Server System and Intel...7.6 High
- intel corporation server board, intel hns7200ap firmware, hns7200apr firmware +2 more +4 moreImproper password hashing in firmware in Intel Server Board (S7200AP,S7200APR) and Intel Compute...5.5 Medium
- intel raid web console, intel corporation raid web server 3 +1 moreInsufficient session validation in the webserver component of the Intel Rapid Web Server 3 may...6.5 Medium
- intel next unit of computing firmware, intel corporation nuc firmware kits +1 moreInsufficient input validation in BIOS update utility in Intel NUC FW kits downloaded before May...6.0 Medium
- intel graphics driverDenial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka...6.5 Medium
- intel graphics driverPointer corruption in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka...7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Nexthop index allocation failed: private index space exhausted after incoming ARP requests to management interface6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Denial of Service in J-Web5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Denial of service in telnetd5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Invalid IP/mask learned from DHCP server might cause device control daemon (dcd) process crash5.3 Medium
- juniper networks screenos, juniper netscreen screenos +1 moreScreenOS: Stored Cross-Site Scripting (XSS) vulnerability5.4 Medium
- juniper junos, juniper networks junos os +1 moreMX Series: In BBE configurations, receipt of a crafted IPv6 exception packet causes a Denial of Service5.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: authd allows assignment of IP address requested by DHCP subscriber logging in with Option 50 (Requested IP Address)6.1 Medium
- juniper junos, juniper networks junos os +1 moreMX Series: L2ALD daemon may crash if a duplicate MAC is learned by two different interfaces6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: jdhcpd process crash during processing of specially crafted DHCPv6 message6.5 Medium
- juniper junos, juniper networks junos os +1 moreQFX5000/EX4600 Series: Routing protocol flap upon receipt of high rate of Ethernet frames6.5 Medium
- juniper junos, juniper networks junos os +1 morevSRX Series: A local authentication vulnerability may lead to full control of a vSRX instance while the system is booting.6.8 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Unauthenticated remote root access possible when RSH service is enabled7.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Denial of Service vulnerability in MS-PIC, MS-MIC, MS-MPC, MS-DPC and SRX flow daemon (flowd) related to SIP ALG7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of a malformed MPLS RSVP packet leads to a Routing Protocols Daemon (RPD) crash.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of a specifically crafted malicious MPLS packet leads to a Junos kernel crash.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Memory exhaustion denial of service vulnerability in Routing Protocols Daemon (RPD) with Juniper Extension Toolkit (JET) support.7.5 High
- juniper junos space, juniper networks junos space security director +1 moreJunos Space Security Director: XSS vulnerability in web administration8.0 High
- juniper junos spaceJunos Space: Reflected Cross-site Scripting vulnerability in OpenNMS8.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: RPD daemon crashes due to receipt of specific Draft-Rosen MVPN control packet in Draft-Rosen MVPN configuration8.8 High
- juniper junos, juniper networks junos os +1 moreNFX Series: Insecure sshd configuration in Juniper Device Manager (JDM) and host OS9.8 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: RPD daemon crashes upon receipt of specific MPLS packet8.8 High
- ge ifixMultiple instances of this vulnerability (Unsafe ActiveX Control Marked Safe For Scripting) have...4.8 Medium
- siemens simatic s7-1500 software controller, siemens ag simatic et 200sp open controller, simatic s7-1500 incl. f +3 more +5 moreA vulnerability has been identified in SIMATIC ET 200SP Open Controller (All versions >= V2.0 and...7.5 High
- siemens rox ii, rox ii firmware +1 moreA vulnerability has been identified in ROX II (All versions < V2.12.1). An authenticated attacker...7.2 High
- Show moreLoading…