CVEs published in October 2018
1,469 vulnerabilities, 177 critical, 2 exploited.
- vbulletinvBulletin 5.4.3 has an Open Redirect.6.1 Medium
- dlink dir-140l firmware, dir-640l firmware, dwr-111 firmware +5 more +7 moreAn issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1...9.8 Critical
- dlink dwr-111 firmware, dwr-116 firmware, dwr-512 firmware +1 more +3 moreAn issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2...8.8 High
- dlink dir-140l firmware, dir-640l firmware, dwr-111 firmware +5 more +7 moreDirectory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L...7.5 High
- hewlett packard enterprise hpe uiot, hp universal internet of things +1 moreA remote unauthorized access vulnerability was identified in HPE UIoT versions 1.5, 1.4.0, 1.4.1,...5.3 Medium
- hewlett packard enterprise hpe service governance framework (sgf), hpe service governance framework +1 moreA remote unauthorized disclosure of information vulnerability was identified in HPE Service...5.9 Medium
- hp intelligent management center, hewlett packard enterprise hpe intelligence management center (imc) plat +1 moreA remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC)...9.8 Critical
- jtbc phpJTBC(PHP) 3.0 allows CSRF for creating an account via the console/account/manage.php?type=action...8.8 High
- linlinjava litemallAn issue was discovered in litemall 0.9.0. Arbitrary file download is possible via ../ directory...7.5 High
- destoon b2bAn issue was discovered in DESTOON B2B 7.0. admin/category.inc.php has XSS via the category...4.8 Medium
- destoon b2bAn issue was discovered in DESTOON B2B 7.0. CSRF exists via the admin.php URI in an action=add...8.8 High
- destoon b2bAn issue was discovered in DESTOON B2B 7.0. XSS exists via certain text boxes to the admin.php...4.8 Medium
- destoon b2bAn issue was discovered in DESTOON B2B 7.0. admin\setting.inc.php has XSS via the first text box...4.8 Medium
- s-cmss-cms 3.0 allows SQL Injection via the member/post.php 0_id parameter or the POST data to member...9.8 Critical
- s-cmss-cms 3.0 allows remote attackers to execute arbitrary PHP code by placing this code in a crafted...8.8 High
- usualtool usualtoolcmsUsualToolCMS 8.0 allows CSRF for adding a user account via the cmsadmin/a_adminx.php?x=a URI.8.8 High
- broadcom tcpreplay, fedoraproject fedora +1 moreA use-after-free was discovered in the tcpbridge binary of Tcpreplay 4.3.0 beta1. The issue gets...9.8 Critical
- broadcom tcpreplay, fedoraproject fedora +1 moreA heap-based buffer over-read was discovered in the tcpreplay-edit binary of Tcpreplay 4.3.0...5.5 Medium
- linksys e1200 firmware, e2500 firmware, eseries e1200 +1 more +3 moreAn exploitable operating system command injection exists in the Linksys ESeries line of routers ...7.2 High
- linksys e1200 firmware, e2500 firmware, eseries e1200 +1 more +3 moreDevices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys...7.2 High
- linksys e1200 firmware, e2500 firmware, eseries e1200 +1 more +3 moreDevices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys...7.2 High
- lcds laquis scadaLAquis SCADA Versions 4.1.0.3870 and prior has several stack-based buffer overflow...7.8 High
- lcds laquis scadaLAquis SCADA Versions 4.1.0.3870 and prior, when processing project files the application fails...7.8 High
- lcds laquis scadaLAquis SCADA Versions 4.1.0.3870 and prior has a path traversal vulnerability, which may allow...8.8 High
- lcds laquis scadaLAquis SCADA Versions 4.1.0.3870 and prior has several integer overflow to buffer overflow...9.8 Critical
- lcds laquis scadaLAquis SCADA Versions 4.1.0.3870 and prior has several out-of-bounds read vulnerabilities, which...9.8 Critical
- lcds laquis scadaLAquis SCADA Versions 4.1.0.3870 and prior has an untrusted pointer dereference vulnerability,...9.8 Critical
- oracle outside in technologyVulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware ...7.1 High
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products ...6.1 Medium
- oracle textVulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are...8.2 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...8.6 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...8.6 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...8.6 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...8.6 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...9.0 Critical
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...8.6 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...8.6 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...8.6 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...8.6 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...8.6 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...8.6 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...8.6 High
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +4 more +6 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...4.3 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +4 more +6 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Windows)....4.9 Medium
- oracle primavera p6 enterprise project portfolio managementVulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle...6.1 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +4 more +6 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: JSON)....4.9 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +4 more +6 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...4.9 Medium
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent:...7.4 High
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel...5.7 Medium
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Remote...8.1 High
- Show moreLoading…