CVEs published in October 2018
1,469 vulnerabilities, 177 critical, 2 exploited.
- linhandante andaThe server API in the Anda app relies on hardcoded credentials.9.8 Critical
- eaton 9px ups firmwareAn issue was discovered on Eaton UPS 9PX 8000 SP devices. The administration panel is vulnerable...8.8 High
- eaton 9px ups firmwareAn issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the SNMP...4.9 Medium
- eaton 9px ups firmwareAn issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the user's...4.9 Medium
- d-link dsl-2640t firmwareXSS exists in cgi-bin/webcm on D-link DSL-2640T routers via the var:RelaodHref or var:conid...6.1 Medium
- mailcleanerwww/guis/admin/application/controllers/UserController.php in the administration login interface...6.1 Medium
- ajenti ajenticpAjenti Cross-site Scripting Via Filename6.1 Medium
- vestacp control panelVesta Control Panel through 0.9.8-22 has XSS via the edit/web/ domain parameter, the list/backup/...6.1 Medium
- citrix netscaler gateway firmwareCitrix NetScaler Gateway 10.5.x before 10.5.69.003, 11.1.x before 11.1.59.004, 12.0.x before 12.0...4.8 Medium
- nedap mysql-binuuid-railsmysql-bunuuid-rails vulnerable to SQL injection9.8 Critical
- citrix xenmobile server** DISPUTED *** Lack of authentication in Citrix Xen Mobile through 10.8 allows low-privileged...7.8 High
- citrix xenmobile server** DISPUTED *** Xen Mobile through 10.8.0 includes a service listening on port 5001 within its...7.8 High
- fuji electric energy savings estimatorAn uncontrolled search path element (DLL Hijacking) vulnerability has been identified in Fuji...7.8 High
- myadrenalin human resource management softwareAdrenalin HRMS version 5.4.0 contains a Reflected Cross Site Scripting (XSS) vulnerability in the...6.1 Medium
- zmanda amanda, redhat enterprise linux +1 moreAn issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a...7.8 High
- zmanda amanda, debian linux, redhat enterprise linux +2 moreAn issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a...7.8 High
- apache impalaIn Apache Impala before 3.0.1, ALTER TABLE/VIEW RENAME required ALTER on the old table. This may...9.8 Critical
- apache impalaMissing authorization check in Apache Impala before 3.0.1 allows a Kerberos-authenticated but...6.5 Medium
- cisco webex meetings desktop, webex event center, webex productivity tools +2 moreCisco Webex Meetings Desktop App Update Service Command Injection Vulnerability7.8 High
- telecrane f25 series, f25-10d firmware, f25-10s firmware +9 more +11 moreAll versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are...8.1 High
- ibm websphere commerce enterprise, websphere commerce +1 moreIBM WebSphere Commerce Enterprise V7, V8, and V9 is vulnerable to cross-site scripting. This...5.4 Medium
- mozilla firefox, canonical ubuntu linux +1 moreIf a site is loaded over a HTTPS connection but loads a favicon resource over HTTP, the mixed...5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe internal WebBrowserPersist code does not use correct origin context for a resource being...6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreSome special resource URIs will cause a non-exploitable crash if loaded with optional parameters...7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreWhen a new protocol handler is registered, the API accepts a title argument which can be used to...4.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreBy using the reflected URL in some special resource URIs, such as chrome:, it is possible to...6.5 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +5 more +7 moreA WebExtension can request access to local files without the warning prompt stating that the...7.1 High
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreA vulnerability where a WebExtension can run content scripts in disallowed contexts following...6.5 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +5 more +7 moreBy rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain...7.5 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA potential vulnerability was found in 32-bit builds where an integer overflow during the...7.5 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreWhen manipulating user events in nested loops while opening a document through script, it is...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMozilla developers and community members reported memory safety bugs present in Firefox 62 and...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2....8.8 High
- mozilla firefox, canonical ubuntu linux +1 moreMozilla developers and community members reported memory safety bugs present in Firefox 62. Some...8.8 High
- apache sparkImproper Input Validation in Apache Spark7.5 High
- splunkSplunk Enterprise 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.7, and 6.5.x before...7.5 High
- splunkDirectory traversal vulnerability in the Splunk Django App in Splunk Enterprise 6.0.x before 6.0...6.5 Medium
- splunkSplunkd in Splunk Enterprise 6.2.x before 6.2.14 6.3.x before 6.3.11, and 6.4.x before 6.4.8; and...7.5 High
- splunkCross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.0.x before 6.0.14,...6.1 Medium
- zohocorp manageengine opmanagerZoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload.9.8 Critical
- conversationsAn issue was discovered in Daniel Gultsch Conversations 2.3.4. It is possible to spoof a custom...7.5 High
- axiositalia registro elettronicoIn AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via...6.1 Medium
- ruletkaioA gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a...7.5 High
- greedy599 greedy 599A lottery smart contract implementation for Greedy 599, an Ethereum gambling game, generates a...7.5 High
- wifiranger firmwareAn incorrect access control vulnerability in the FTP configuration of WiFiRanger devices with...8.8 High
- citrix netscaler sd-wan, sd-wan +1 moreAn Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3...9.8 Critical
- citrix netscaler sd-wan, sd-wan +1 moreAn Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and...7.5 High
- citrix netscaler sd-wan, sd-wan +1 moreA SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9...9.8 Critical
- citrix netscaler sd-wan, sd-wan +1 moreA Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x...9.8 Critical
- citrix netscaler sd-wan, sd-wan +1 moreA Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x...7.5 High
- Show moreLoading…