CVEs published in October 2018
1,469 vulnerabilities, 177 critical, 2 exploited.
- xpdfreader xpdfThe function Object::isName() in Object.h (called from Gfx::opSetFillColorN) in Xpdf 4.00 allows...5.5 Medium
- xpdfreader xpdfThe GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote attackers to cause a denial...5.5 Medium
- xpdfreader xpdfCCITTFaxStream::readRow() in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of...5.5 Medium
drupal7Debiandrupal7 - security updateNo score- canonical ltd. linux kernel, as used in ubuntu 18.04 lts and ubuntu 18.10, linux kernel, canonical ubuntu linux +2 moreThe Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain...3.3 Low
- pbootcmsapps\admin\controller\content\SingleController.php in PbootCMS before V1.3.0 build 2018-11-12 has...9.8 Critical
- cisco prime collaboration assuranceCisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability6.5 Medium
- cisco wireless lan controller (wlc), wireless lan controller software +1 moreCisco Wireless LAN Controller Software Control and Provisioning of Wireless Access Points Protocol Denial of Service Vulnerability8.6 High
- cisco wireless lan controller (wlc), wireless lan controller software +1 moreCisco Wireless LAN Controller Software Control and Provisioning of Wireless Access Points Protocol Information Disclosure Vulnerability7.5 High
- cisco access points, aironet access point software +1 moreCisco IOS Access Points Software 802.11r Fast Transition Denial of Service Vulnerability7.4 High
- cisco wireless lan controller software, wireless lan controller (wlc) +1 moreCisco Wireless LAN Controller Software Directory Traversal Vulnerability6.5 Medium
- cisco wireless lan controller (wlc), wireless lan controller, wireless lan controller software +2 moreCisco Wireless LAN Controller Software GUI Privilege Escalation Vulnerability7.5 High
- cisco aironet access pointsCisco Aironet 1560, 1800, 2800, and 3800 Series Access Points Denial of Service Vulnerability5.8 Medium
- cisco socialminerCisco SocialMiner Cross-Site Scripting Vulnerability6.1 Medium
- broadcom ca identity suite virtual appliance, ca technologies identity governance, broadcom ca identity governance +2 moreCA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual...5.3 Medium
- cisco nx-os, nx-os software for nexus 6000 series +1 moreCisco NX-OS Software for Nexus 5500, 5600, and 6000 Series Switches Precision Time Protocol Denial of Service Vulnerability8.6 High
- cisco enterprise nfv infrastructure software, enterprise network virtualization software +1 moreCisco Enterprise NFV Infrastructure Software Cross-Site Request Forgery Vulnerability5.4 Medium
- cisco wireless lan controller (wlc), wireless lan controller software +1 moreCisco Wireless LAN Controller Software Privilege Escalation Vulnerability5.4 Medium
- cisco nx-os, nx-os software for nexus 3000 series 7.0(3)i7(3) +1 moreCisco NX-OS Software Authenticated Simple Network Management Protocol Denial of Service Vulnerability7.7 High
- cisco nx-os software, nx-os, firepower 4100 series next-generation firewalls +1 more +3 moreCisco FXOS and NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerability8.8 High
- ilm openexrmakeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of-bounds write, leading to an...8.8 High
- ilm openexrOpenEXR 2.3.0 has a memory leak in ThreadPool in IlmBase/IlmThread/IlmThreadPool.cpp, as...4.3 Medium
- cisco wireless lan controller (wlc), wireless lan controller software +1 moreCisco Wireless LAN Controller Software Information Disclosure Vulnerability5.3 Medium
- cisco wireless lan controller (wlc), wireless lan controller software +1 moreCisco Wireless LAN Controller Software Cross-Site Scripting Vulnerability4.8 Medium
- avaya aura system platform, aura® system platform +1 moreSystem Platform Web UI Deserialization9.0 Critical
- adobe technical communications suiteAdobe Technical Communications Suite versions 1.0.5.1 and below have an insecure library loading ...7.8 High
- adobe framemakerAdobe Framemaker versions 1.0.5.1 and below have an insecure library loading (dll hijacking)...7.8 High
- adobe experience managerAdobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting...6.1 Medium
- adobe experience managerAdobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting...6.1 Medium
- adobe experience managerAdobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site...6.1 Medium
- adobe experience managerAdobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site...6.1 Medium
- adobe experience managerAdobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting...6.1 Medium
- adobe digital editionsAdobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. Successful...9.8 Critical
- adobe digital editionsAdobe Digital Editions versions 4.5.8 and below have an use after free vulnerability. Successful...9.8 Critical
- adobe digital editionsAdobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability....7.5 High
- adobe digital editionsAdobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability....7.5 High
- adobe digital editionsAdobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability....7.5 High
- adobe digital editionsAdobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability....7.5 High
- adobe digital editionsAdobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability....7.5 High
- adobe digital editionsAdobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. Successful...9.8 Critical
- adobe digital editionsAdobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. Successful...9.8 Critical
drupal/workbench_moderationPackagistThe Workbench Moderation module adds arbitrary moderation states to Drupal core's "unpublished" and "published" node states, and affects the behavior of node revisions when nodes are published. In som…No score- huawei technologies co., ltd. mate 10 pro, huawei mate 10 pro firmware +1 moreHuawei Mate 10 pro smartphones with the versions before BLA-AL00B 8.1.0.326(C00) have an improper...4.6 Medium
- huawei anne-al00, anne-al00 firmware +1 moreAnne-AL00 Huawei phones with versions earlier than 8.0.0.151(C00) have an information leak...2.4 Low
- huawei mate 9 firmware, mate 9 pro firmware, huawei technologies co., ltd. mate 9, mate 9 pro +2 moreThe hardware security module of Mate 9 and Mate 9 Pro Huawei smart phones with the versions...6.7 Medium
- schiocco support board - chat and help deskIn the Schiocco "Support Board - Chat And Help Desk" plugin 1.2.3 for WordPress, a Stored XSS...5.4 Medium
- kaasoft library cmsA Stored XSS vulnerability has been discovered in KAASoft Library CMS - Powerful Book Management...6.1 Medium
- zohocorp manageengine opmanagerZoho ManageEngine OpManager 12.3 before build 123214 has XSS.6.1 Medium
- aryanic highportalAryanic HighPortal 12.5 has XSS via an Add Tags action.6.1 Medium
- ipfireAn authenticated command injection vulnerability exists in IPFire Firewall before 2.21 Core...8.8 High
- Show moreLoading…