CVEs published in October 2018
1,469 vulnerabilities, 177 critical, 2 exploited.
- apex-publish-static-files project apex-publish-static-filesCommand Injection in apex-publish-static-files10.0 Critical
- libnmapCommand Injection in libnmap9.8 Critical
- bitdefender gravityzoneBitdefender GravityZone VMware appliance before 6.2.1-35 might allow attackers to gain access...9.8 Critical
- mantisbtMantisBT allows XSS via Edit Filter page5.4 Medium
- mantisbtMantisBT allows XSS via the Manage Filter page5.4 Medium
- tenda ac10 firmware, ac7, ac9, and ac10 routers, ac7 firmware +1 more +3 moreAn issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9...9.8 Critical
- asrock a-tuning, f-stream, rgbled +1 more +3 moreThe AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning...7.8 High
- asrock a-tuning, f-stream, rgbled +1 more +3 moreThe AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning...7.8 High
- asrock a-tuning, f-stream, rgbled +1 more +3 moreThe AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning...7.1 High
- asrock a-tuning, f-stream, rgbled +1 more +3 moreThe AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning...7.8 High
- ee 4gee firmwareAn issue was discovered on EE 4GEE HH70VB-2BE8GB3 HH70_E1_02.00_19 devices. Hardcoded root SSH...8.8 High
- kdcproxy project kdcproxyImproper Input Validation in kdcproxy7.5 High
- iab open real-time biddingThe Interactive Advertising Bureau (IAB) OpenRTB 2.3 protocol implementation might allow remote...7.5 High
apache2-mod_nssSUSESecurity update for apache2-mod_nssNo score- zblogcn z-blogphpCSRF exists in zb_users/plugin/AppCentre/theme.js.php in Z-BlogPHP 1.5.2.1935 (Zero), which...8.8 High
- sem-cms semcmsXSS was discovered in SEMCMS PHP V3.4 via the SEMCMS_SeoAndTag.php?Class=edit&CF=SeoAndTag...4.8 Medium
- sem-cms semcmsXSS was discovered in SEMCMS PHP V3.4 via the SEMCMS_SeoAndTag.php?Class=edit&CF=SeoAndTag...5.4 Medium
- doccmsupload_template() in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute...9.8 Critical
- mz-automation libiec61850An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in...9.8 Critical
- dkcmsadmin/check.asp in DKCMS 9.4 allows SQL Injection via an ASPSESSIONID cookie to admin/admin.asp.9.8 Critical
- mingsoft mcmsPath Traversal in minsoft:ms-mcms7.5 High
- mingsoft mcmsUnrestricted Upload of File with Dangerous Type in mingsoft:ms-mcms9.8 Critical
- libavThere exists a NULL pointer dereference in ff_vc1_parse_frame_header_adv in vc1.c in Libav 12.3,...6.5 Medium
- libavThere exists a heap-based buffer overflow in vc1_decode_i_block_adv in vc1_block.c in Libav 12.3,...6.5 Medium
- libavThere exists a heap-based buffer over-read in ff_vc1_pred_dc in vc1_block.c in Libav 12.3, which...6.5 Medium
- libavThere exists a heap-based buffer overflow in vc1_decode_p_mb_intfi in vc1_block.c in Libav 12.3,...6.5 Medium
- pagoda linux project linuxPagoda Linux panel V6.0 has XSS via the verification code associated with an invalid account...6.1 Medium
- grapixel new mediaGrapixel New Media v2.0 allows SQL Injection via the pages.aspx pageref parameter.9.8 Critical
- leostream agent, connection broker +1 moreThe Leostream Agent before Build 7.0.1.0 when used with Leostream Connection Broker 8.2.72 or...7.5 High
- openssl, canonical ubuntu linux, debian linux +16 more +18 moreTiming attack against DSA5.9 Medium
- foxit phantompdfThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to disclose sensitive information on vulnerable...6.5 Medium
- foxit readerThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- foxit readerThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- foxit readerThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- playsms project playsmsplaySMS through 1.4.2 allows Privilege Escalation through Daemon abuse.8.8 High
- advantech webaccessWebAccess Versions 8.3.2 and prior. The application fails to properly validate the length of user...7.8 High
- advantech webaccessWebAccess Versions 8.3.2 and prior. During installation, the application installer disables user...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sd 845 firmware +2 more +4 moreImproper input validation leads to buffer overflow while processing network list offload command...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sd 845 firmware +2 more +4 moreIncorrect bound check can lead to potential buffer overwrite in WLAN controller in Snapdragon...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sd 845 firmware +2 more +4 moreIncorrect bound check can lead to potential buffer overwrite in WLAN function in Snapdragon...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 845 firmware +1 moreWhen the buffer length passed is very large, bounds check could be bypassed leading to potential...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sd 845 firmware +2 more +4 moreWhen the buffer length passed is very large in WLAN, bounds check could be bypassed leading to...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sd 845 firmware +2 more +4 moreLack of input validation while copying to buffer in WLAN will lead to a buffer overflow in...7.8 High
- Show moreLoading…