CVEs published in October 2018
1,469 vulnerabilities, 177 critical, 2 exploited.
pam_pkcs11SUSESecurity update for pam_pkcs11No score- kyzer libmspack** DISPUTED ** chmextract.c in the chmextract sample program, as distributed with libmspack...5.3 Medium
- [unknown] ansible, debian linux, redhat ansible engine +2 more +4 moreAnsible Leaks Data Passed to ssh-keygen7.8 High
- lupng project lupngAn issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in...8.8 High
- lupng project lupngAn issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in...8.8 High
- lupng project lupngAn issue has been found in LuPng through 2017-03-10. It is a heap-based buffer over-read in...8.8 High
- dedecmsReflected XSS exists in DedeCMS 5.7 SP2 via the /member/pm.php folder parameter.6.1 Medium
- dedecmsDedeCMS 5.7 SP2 allows XSS via the plus/qrcode.php type parameter.6.1 Medium
- keruigroup ypc99 firmwareLack of an authentication mechanism in KERUI Wifi Endoscope Camera (YPC99) allows an attacker to...6.5 Medium
- keruigroup ypc99 firmwareMissing authentication and improper input validation in KERUI Wifi Endoscope Camera (YPC99) allow...9.8 Critical
- advantech webaccessAdvantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability. A...8.8 High
- advantech webaccessAdvantech WebAccess 8.3.2 and below is vulnerable to multiple reflected cross site scripting...6.1 Medium
- symantec web isolationSymantec Web Isolation (WI) 1.11 prior to 1.11.21 is susceptible to a reflected cross-site...6.1 Medium
- linux kernel, redhat enterprise linux desktop, enterprise linux server +6 more +8 moreIn the Linux kernel through 4.19, a use-after-free can occur due to a race condition between...8.1 High
pam_pkcs11SUSESecurity update for pam_pkcs11No score- ibm security access manager appliance, security access manager +1 moreIBM Security Access Manager Appliance 9.0.3.1, 9.0.4.0 and 9.0.5.0 could allow unauthorized...8.8 High
- leanoteLeanote 2.6.1 has XSS via the Blog Basic Setting title field, which is mishandled during...6.1 Medium
- kyzer libmspack, canonical ubuntu linux, debian linux +5 more +7 morechmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0'...4.3 Medium
- cabextract project cabextract, libmspack project libmspack, canonical ubuntu linux +4 more +6 moreIn mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input...6.5 Medium
- libtiff, canonical ubuntu linux, debian linux +2 moreLibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0...8.8 High
- serverscheckServersCheck Monitoring Software before 14.3.4 allows SQL Injection by an authenticated user.8.8 High
- thinkphpThinkPHP SQLi Vulnerability9.8 Critical
- fiyo cmsFiyo CMS 2.0.7 has XSS via the dapur\apps\app_user\edit_user.php name parameter.6.1 Medium
- teeworlds, debian linux +1 moreIn Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response...7.5 High
- teakkiTeaKKi 2.7 allows XSS via a crafted onerror attribute for a picture's URL.6.1 Medium
- graphicsmagick, imagemagick, opensuse leap +2 moreThere is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16,...6.5 Medium
- qemu, redhat enterprise linux, openstack +2 moreQemu has integer overflows because IOReadHandler and its associated functions use a signed...5.5 Medium
- tp-link tl-sc3130 firmwareTP-Link TL-SC3130 1.6.18P12_121101 devices allow unauthenticated RTSP stream access, as...7.5 High
- tribalsystems zenarioZenario CMS vulnerable to CSRF8.8 High
- ardawan user managementStored XSS has been discovered in the upload section of ARDAWAN.COM User Management 1.1, as...5.4 Medium
- creativeitem ekushey project managerIn the 3.1 version of Ekushey Project Manager CRM, Stored XSS has been discovered in the input...5.4 Medium
- pokkho langoLANGO Codeigniter Multilingual Script 1.0 has XSS in the input and upload sections, as...4.8 Medium
- xfce thunar, xfce +1 moreXfce Thunar 1.6.15, when Xfce 4.12 is used, mishandles the IBus-Unikey input method for file...4.7 Medium
- opendesign drawings sdk, oracle outside in technology +1 moreA vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK...8.1 High
- opendesign drawings sdk, oracle outside in technology +1 moreOpen Design Alliance Drawings SDK 2019Update1 has a vulnerability during the reading of malformed...8.1 High
- iobit malware fighterIMFCameraProtect.sys in IObit Malware Fighter 6.2 (and possibly lower versions) is vulnerable to...7.8 High
- sv3c h.264 poe ip camera firmwareThe SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B)...6.1 Medium
- sv3c h.264 poe ip camera firmwareThe SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B)...5.7 Medium
- sv3c h.264 poe ip camera firmwareAn attacker with remote access to the SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and...7.5 High
- sv3c h.264 poe ip camera firmwareThe SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B) does not perform proper validation...5.4 Medium
- sv3c h.264 poe ip camera firmwareAn attacker with remote access to the SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and...9.8 Critical
- sv3c h.264 poe ip camera firmwareSV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices...9.8 Critical
- sv3c h.264 poe ip camera firmwareSV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices...8.8 High
- sv3c h.264 poe ip camera firmwareSV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices...9.8 Critical
- sv3c h.264 poe ip camera firmwareThe SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B)...9.8 Critical
- sv3c h.264 poe ip camera firmwareSV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B devices improperly identifies users only...9.8 Critical
- kaptcha project kaptchaUse of Insufficiently Random Values in penggle:kaptcha9.8 Critical
- thinkphpThinkPHP SQLi Vulnerability9.8 Critical
- thinkphpThinkPHP SQLi Vulnerability9.8 Critical
- bigtreecms bigtree cmsA Session Fixation issue was discovered in Bigtree before 4.2.24. admin.php accepts a user...5.4 Medium
- Show moreLoading…