Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2018
October

CVEs published in October 2018

1,469 vulnerabilities, 177 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

neo4jIncorrect access control in Neo4j Enterprise Database Server via LDAP authenticationCVE-2018-18389Fix available9.8 CriticalOctober 16, 2018
asciidoctorAsciidoctor Infinite Loop vulnerabilityCVE-2018-18385Fix available7.5 HighOctober 16, 2018
unzip project unzipInfo-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship...CVE-2018-18384Fix available5.5 MediumOctober 16, 2018
atlassian crucible, fisheye, fisheye and crucible +2 moreThe Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows...CVE-2018-133997.8 HighOctober 16, 2018
coderpixel advanced hrmAdvanced HRM 1.6 allows Remote Code Execution via PHP code in a .php file to the user/update-user...CVE-2018-183828.8 HighOctober 16, 2018
zblogcn z-blogphpZ-BlogPHP 1.5.2.1935 (Zero) has a stored XSS Vulnerability in zb_system/function/c_system_admin...CVE-2018-183815.4 MediumOctober 16, 2018
orange airbox firmwaregoform/setReset on Orange AirBox Y858_FL_01.16_04 devices allows attackers to reset a router to...CVE-2018-183777.5 HighOctober 16, 2018
orange airbox firmwaregoform/getWlanClientInfo in Orange AirBox Y858_FL_01.16_04 allows remote attackers to discover...CVE-2018-183767.5 HighOctober 16, 2018
orange airbox firmwaregoform/getProfileList in Orange AirBox Y858_FL_01.16_04 allows attackers to extract APN data ...CVE-2018-183759.8 CriticalOctober 16, 2018
metinfoXSS exists in the MetInfo 6.1.2 admin/index.php page via the anyid parameter.CVE-2018-183745.4 MediumOctober 16, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-3284Fix available4.4 MediumOctober 16, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Logging)....CVE-2018-3283Fix available4.4 MediumOctober 16, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage...CVE-2018-3282Fix available4.9 MediumOctober 16, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: RBR)....CVE-2018-3278Fix available4.9 MediumOctober 16, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-3277Fix available4.9 MediumOctober 16, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached)....CVE-2018-3276Fix available4.9 MediumOctober 16, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-3251Fix available6.5 MediumOctober 16, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Merge)....CVE-2018-3247Fix available5.5 MediumOctober 16, 2018
oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-3214Fix available5.3 MediumOctober 16, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-3200Fix available4.9 MediumOctober 16, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2018-3187Fix available5.5 MediumOctober 16, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-3185Fix available5.5 MediumOctober 16, 2018
oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-3183Fix available9.0 CriticalOctober 16, 2018
oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-3180Fix available5.6 MediumOctober 16, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)....CVE-2018-3174Fix available5.3 MediumOctober 16, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-3173Fix available4.9 MediumOctober 16, 2018
oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Partition)....CVE-2018-3171Fix available5.0 MediumOctober 16, 2018
canonical ubuntu linux, debian linux, hp xp7 command view +10 more +12 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot...CVE-2018-3169Fix available8.3 HighOctober 16, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-3162Fix available4.9 MediumOctober 16, 2018
oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Partition)....CVE-2018-3161Fix available4.9 MediumOctober 16, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-3156Fix available6.5 MediumOctober 16, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....CVE-2018-3155Fix available7.7 HighOctober 16, 2018
oracle corporation java, oracle jdk, jre +2 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility). The supported...CVE-2018-3150Fix available3.7 LowOctober 16, 2018
oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-3149Fix available8.3 HighOctober 16, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2018-3144Fix available5.9 MediumOctober 16, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-3143Fix available6.5 MediumOctober 16, 2018
oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2018-3139Fix available3.1 LowOctober 16, 2018
oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2018-3136Fix available3.4 LowOctober 16, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....CVE-2018-3133Fix available6.5 MediumOctober 16, 2018
alchemy-cms alchemy cmsWithdrawn Advisory: AlchemyCMS is vulnerable to stored XSS via the /admin/pictures image fieldCVE-2018-18307Disputed6.1 MediumOctober 16, 2018
[unknown] libssh, canonical ubuntu linux, debian linux +6 more +8 moreA vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4....CVE-2018-10933Public exploitFix availableEPSS 91.8%9.1 CriticalOctober 16, 2018
qemu, canonical ubuntu linux, debian linux +1 more +3 moreQemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer...CVE-2018-10839Fix available6.5 MediumOctober 16, 2018
luya cmsStored XSS has been discovered in version 1.0.12 of the LUYA CMS software via /admin/api-cms-nav...CVE-2018-182596.1 MediumOctober 15, 2018
nomachineNoMachine before 5.3.27 and 6.x before 6.3.6 allows attackers to gain privileges via a Trojan...CVE-2018-17980Public exploit7.8 HighOctober 15, 2018
teltonika rut900 firmware, rut950 firmware, rut955 firmware +2 moreTeltonika RUT9XX routers with firmware before 00.04.233 provide a root terminal on a serial...CVE-2018-175346.8 MediumOctober 15, 2018
teltonika rut900 firmware, rut950 firmware, rut955 firmware +2 moreTeltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross-site scripting...CVE-2018-175336.1 MediumOctober 15, 2018
teltonika rut900 firmware, rut950 firmware, rut955 firmware +2 moreTeltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS...CVE-2018-17532EPSS 70.7%9.8 CriticalOctober 15, 2018
agentejo cockpitAgentejo Cockpit performs actions on files without appropriate validation and therefore allows an...CVE-2018-155409.8 CriticalOctober 15, 2018
agentejo cockpitAgentejo Cockpit lacks an anti-CSRF protection mechanism. Thus, an attacker is able to change API...CVE-2018-155398.8 HighOctober 15, 2018
agentejo cockpitAgentejo Cockpit has multiple Cross-Site Scripting vulnerabilities.CVE-2018-155386.1 MediumOctober 15, 2018
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open