CVEs published in October 2018
1,469 vulnerabilities, 177 critical, 2 exploited.
- intel graphics driverDenial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka...5.5 Medium
- ivanti workspace controlAn issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A...7.8 High
- ivanti workspace controlAn issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A...7.8 High
- ivanti workspace controlAn issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A...7.8 High
- ivanti workspace controlAn issue was discovered in Ivanti Workspace Control before 10.3.0.0 and RES One Workspace, when...5.5 Medium
- nconsulting nc-cmsAn issue was discovered in nc-cms through 2017-03-10. index.php?action=edit_html allows XSS via...6.1 Medium
- ibm security key lifecycle managerIBM Security Key Lifecycle Manager 2.5, 2.6, 2.7, and 3.0 is vulnerable to a XML External Entity...7.1 High
- ibm security key lifecycle managerIBM Security Key Lifecycle Manager 2.5, 2.6, 2.7, and 3.0 could allow a remote attacker to...7.7 High
- control-webpanel webpanelCentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has XSS via the admin/fileManager2.php...6.1 Medium
- control-webpanel webpanelCentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory...7.5 High
- control-webpanel webpanelCentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell...9.8 Critical
- asuswrt-merlin project rt-ac1900 firmware, rt-ac2900 firmware, rt-ac3100 firmware +11 more +13 more** DISPUTED ** An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin...9.8 Critical
- asuswrt-merlin project rt-ac1900 firmware, rt-ac2900 firmware, rt-ac3100 firmware +11 more +13 more** DISPUTED ** An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin...9.8 Critical
- qiku 360 mobile phone n6 pro firmwareThe /dev/block/mmcblk0rpmb driver kernel module on Qiku 360 Phone N6 Pro 1801-A01 devices allows...7.5 High
- dscms project dscmsDESHANG DSCMS 1.1 has CSRF via the public/index.php/admin/admin/add.html URI.8.8 High
- emlogemlog v6.0.0 has CSRF via the admin/user.php?action=new URI.8.8 High
- mossle lemoncom/mossle/cdn/CdnController.java in lemon 1.9.0 allows attackers to upload arbitrary files...7.5 High
- gnu binutilsAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...5.5 Medium
- metinfoMetInfo 6.1.2 has XSS via the /admin/index.php bigclass parameter in an n=column&a=doadd action.6.1 Medium
- tuzitio camaleon cmsCamaleon CMS vulnerable to Stored Cross-site Scripting6.1 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreArtifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging...6.3 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreArtifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism...8.6 High
- asus rt-ac58u firmwareA cross site scripting (XSS) vulnerability on ASUS RT-AC58U 3.0.0.4.380_6516 devices allows...6.1 Medium
- nconsulting nc-cms** DISPUTED ** An issue was discovered in nc-cms through 2017-03-10. index.php?action=edit_html...4.8 Medium
- mesilat zabbixThe MESILAT Zabbix plugin before 1.1.15 for Atlassian Confluence allows attackers to read...7.5 High
- asus rt-ac58u firmwareOn ASUS RT-AC58U 3.0.0.4.380_6516 devices, remote attackers can discover hostnames and IP...5.3 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 moreAn invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl...5.5 Medium
- zeit next.jsNext.js has cross site scripting (XSS) vulnerability via the 404 or 500 /_error page6.1 Medium
- palo alto networks alto networks, paloaltonetworks pan-os +1 moreGlobalProtect Portal Login page in Palo Alto Networks PAN-OS before 8.1.4 allows an...6.1 Medium
- pdfalto project pdfaltoA issue was found in pdfalto 0.2. There is a heap-based buffer overflow in the TextPage:...7.8 High
- cloud foundry cf networking release, cf-networking +1 moreCF networking internal policy server SQL injection6.6 Medium
- wago 750-352 firmware, 750-362 firmware, 750-363 firmware +11 more +13 moreWAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.18(13) and before, have...6.1 Medium
- [unknown] foremanA flaw was found in foreman from versions 1.18. A stored cross-site scripting vulnerability...5.4 Medium
- cmsmadesimple cms made simpleXSS exists in CMS Made Simple version 2.2.7 via the m1_extra parameter in an admin...6.1 Medium
- cmsmadesimple cms made simpleXSS exists in CMS Made Simple version 2.2.7 via the m1_news_url parameter in an admin...6.1 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and...5.5 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and...7.8 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and...5.5 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and...7.8 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and...7.8 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and...5.5 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and...7.8 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and...7.8 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and...5.5 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and...5.5 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and...5.5 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and...5.5 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and...5.5 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and...7.8 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and...7.8 High
- Show moreLoading…