CVEs published in October 2018
1,469 vulnerabilities, 177 critical, 2 exploited.
- douchatAn XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexml_load_string....7.5 High
- catfish-cms catfish blogAn XSS issue was discovered in catfish blog 2.0.33, related to "write source code."5.4 Medium
- catfish-cms catfish blogA CSRF issue was discovered in admin/Index/tiquan in catfish blog 2.0.33.8.8 High
- catfish-cms catfish cmsA CSRF issue was discovered in admin/Index/addmanageuser.html in Catfish CMS 4.8.30.8.8 High
- catfish-cms catfish cmsAn XSS issue was discovered in Catfish CMS 4.8.30, related to "write source code," a similar...5.4 Medium
- projectsendProjectSend (formerly cFTP) r582 allows Insecure Direct Object Reference via includes/actions.log...9.8 Critical
- projectsendProjectSend (formerly cFTP) r582 allows directory traversal via file=../ in the process-zip...9.8 Critical
- projectsendProjectSend (formerly cFTP) r582 allows authentication bypass via a direct request for users.php,...9.8 Critical
- projectsendProjectSend (formerly cFTP) r582 allows SQL injection via manage-files.php with the request...9.8 Critical
- tenda ac10 firmware, ac15 firmware, ac18 firmware +2 more +4 moreAn issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06...7.5 High
- tenda ac10 firmware, ac15 firmware, ac18 firmware +2 more +4 moreAn issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06...7.5 High
- tenda ac10 firmware, ac15 firmware, ac18 firmware +2 more +4 moreAn issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06...7.5 High
- tenda ac10 firmware, ac15 firmware, ac18 firmware +2 more +4 moreAn issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06...9.8 Critical
- tenda ac15 firmware, ac18 firmware, ac9 firmware +2 moreAn issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN, and AC18 V15.03...9.8 Critical
- tenda ac10 firmware, ac15 firmware, ac18 firmware +2 more +4 moreAn issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06...7.5 High
- yunucmsAn XSS issue was discovered in admin/sitelink/editsitelink?id=16 in YUNUCMS 1.1.5.4.8 Medium
- yunucmsAn XSS issue was discovered in admin/banner/editbanner?id=20 in YUNUCMS 1.1.5.4.8 Medium
- yunucmsAn XSS issue was discovered in index.php/admin/category/editcategory?id=73 in YUNUCMS 1.1.5.4.8 Medium
- yunucmsAn XSS issue was discovered in index.php/admin/area/editarea/id/110000 in YUNUCMS 1.1.5.4.8 Medium
- yunucmsAn XSS issue was discovered in admin/content/editcontent?id=29&gopage=1 in YUNUCMS 1.1.5.4.8 Medium
- yunucmsAn XSS issue was discovered in admin/link/editlink?id=5 in YUNUCMS 1.1.5.4.8 Medium
- yunucmsAn XSS issue was discovered in index.php/admin/system/basic in YUNUCMS 1.1.5.4.8 Medium
- gnome gthumb, debian linux +1 moreAn issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the...7.8 High
- eleanor-cms eleanor cmsAn issue was discovered in Eleanor CMS through 2015-03-19. XSS exists via the ajax.php?direct...4.8 Medium
- phpyunThe function down_sql_action() in /admin/model/database.class.php in PHPYun 4.6 allows remote...7.5 High
- wuzhicmsAn issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can change the...8.8 High
- wuzhicmsAn issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can change the...8.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel through 4.19. An information leak in...5.5 Medium
- tenda ac10 firmware, ac15 firmware, ac18 firmware +2 more +4 moreAn issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06...7.5 High
- tenda ac10 firmware, ac15 firmware, ac18 firmware +2 more +4 moreAn issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06...7.5 High
- tenda ac10 firmware, ac15 firmware, ac18 firmware +2 more +4 moreAn issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06...7.5 High
- tenda ac10 firmware, ac15 firmware, ac18 firmware +2 more +4 moreAn issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06...7.5 High
- phptpoint hospital management systemPhpTpoint hospital management system suffers from multiple SQL injection vulnerabilities via the...9.8 Critical
- phptpoint pharmacy management systemPhpTpoint Pharmacy Management System suffers from a SQL injection vulnerability in the index.php...9.8 Critical
- phptpoint mailing server using file handlingPhpTpoint Mailing Server Using File Handling 1.0 suffers from multiple Arbitrary File Read...7.5 High
- icmsdev icmsspider.admincp.php in iCMS v7.0.11 allows SQL injection via admincp.php?app=spider&do=import_rule...9.8 Critical
- gnu binutilsAn issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31....5.5 Medium
- gnu binutilsAn issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31....5.5 Medium
- gopro gpmf-parserAn issue was discovered in GoPro gpmf-parser 1.2.1. There is an out-of-bounds write in...8.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreSince Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping...7.8 High
- monstraadmin/index.php?id=filesmanager in Monstra CMS 3.0.4 allows remote authenticated administrators...4.8 Medium
bluemanMageiaUpdated blueman packages fix security vulnerabilityNo score- mkvtoolnix mkvinfoA use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV ...7.3 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +12 more +14 moreImproper input validation in TZ led to array out of bound in TZ function while accessing the...7.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +14 more +16 moreWhile processing logs, data is copied into a buffer pointed to by an untrusted pointer in...7.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +9 more +11 moreThere is improper access control of the SSC and GPU mapped regions which lead to inject code from...7.8 High
- artifex mupdfThere is an out-of-bounds read in fz_run_t3_glyph in fitz/font.c in Artifex MuPDF 1.14.0, as...5.5 Medium
- arcserve udpAn issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. There is...6.1 Medium
- arcserve udpAn issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. There is...7.5 High
- arcserve udpAn issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. There is...7.5 High
- Show moreLoading…