Archive

9 July 2018

Vulnerabilities first published on this day (UTC), newest first.

← June 2018 2018 / July /9 August 2018 →

All Critical High Medium Low Exploited only Public exploit

431 results · Feed

Unscored —

CVE-2018-13793

Multiple Cross Site Request Forgery (CSRF) vulnerabilities in the HTTP API in ABBYY FlexiCapture before 12 Release 1 Up…

Jul 9, 2018
Unscored —

CVE-2018-13791

The HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 allows an attacker to conduct Access Control attacks vi…

Jul 9, 2018
Unscored —

CVE-2018-13794

A heap-based buffer overflow exists in stbi__bmp_load_cont in stb_image.h in catimg 2.4.0.

catimg catimg Debian Ubuntu

Jul 9, 2018
Unscored —

CVE-2018-13795

Gravity before 0.5.1 does not support a maximum recursion depth.

Jul 9, 2018
Unscored —

CVE-2018-1000611

SURFnet OpenConext EngineBlock version 5.7.0 to 5.7.3 contains a Cross Site Scripting (XSS) vulnerability that can resu…

Jul 9, 2018
Critical 9.8

CVE-2018-1000620

Insufficient Entropy in cryptiles

Eran Hammer cryptiles version 4.1.1 earlier contains a CWE-331: Insufficient Entropy vulnerability in randomDigits() method that can result in An attacker is more likely to be able to brute force something that was supposed to be random.. This attack appear t…

cryptiles npm

Jul 9, 2018
Unscored —

CVE-2018-1000616

ONOS ONOS controller version 1.13.1 and earlier contains a XML External Entity (XXE) vulnerability in onos\drivers\util…

Jul 9, 2018
Unscored —

CVE-2018-1000614

ONOS ONOS Controller version 1.13.1 and earlier contains a XML External Entity (XXE) vulnerability in providers/netconf…

Jul 9, 2018
Unscored —

CVE-2018-1000615

ONOS ONOS Controller version 1.13.1 and earlier contains a Denial of Service (Service crash) vulnerability in OVSDB com…

Jul 9, 2018
Unscored —

CVE-2018-1000621

Mycroft AI mycroft-core version 18.2.8b and earlier contains a Incorrect Access Control vulnerability in Websocket conf…

Jul 9, 2018
Unscored —

CVE-2018-1000618

EOSIO/eos eos version after commit f1545dd0ae2b77580c2236fdb70ae7138d2c7168 contains a stack overflow vulnerability in …

Jul 9, 2018
Unscored —

CVE-2018-1000617

Atlassian Floodlight Atlassian Floodlight Controller version 1.2 and earlier versions contains a Denial of Service vuln…

Jul 9, 2018
Unscored —

CVE-2018-1000623

JFrog JFrog Artifactory version Prior to version 6.0.3, since version 4.0.0 contains a Directory Traversal vulnerabilit…

Jul 9, 2018
Unscored —

CVE-2018-1000622

The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Eleme…

rustc Debian

Jul 9, 2018
Unscored —

CVE-2018-1000619

Ovidentia version 8.4.3 and earlier contains a Unsanitized User Input vulnerability in utilit.php, bab_getAddonFilePath…

Jul 9, 2018
Critical 9.8

CVE-2018-1000613

Deserialization of Untrusted Data in Bouncy castle

Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in XMSS/XMSS^MT private key d…

bouncycastle bouncycastle org.bouncycastle:bcprov-jdk15on Debian Ubuntu Maven

Jul 9, 2018
Unscored —

CVE-2018-11450

A reflected Cross-Site-Scripting (XSS) vulnerability has been identified in Siemens PLM Software TEAMCENTER (V9.1.2.5).…

Siemens Siemens PLM Software TEAMCENTER ICS / OT

Jul 9, 2018
Unscored —

CVE-2018-13790

A Server Side Request Forgery (SSRF) vulnerability in tools/files/importers/remote.php in concrete5 8.2.0 can lead to a…

Jul 9, 2018
Unscored —

CVE-2018-6967

VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contai…

VMware VMware ESXi, Workstation, and Fusion Virtualization

Jul 9, 2018
Unscored —

CVE-2018-6965

VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contai…

VMware VMware ESXi, Workstation, and Fusion Virtualization

Jul 9, 2018
Unscored —

CVE-2018-6966

VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contai…

VMware VMware ESXi, Workstation, and Fusion Virtualization

Jul 9, 2018
Unscored —

CVE-2018-4968 EPSS 15%

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlie…

Jul 9, 2018
Unscored —

CVE-2018-4998

Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlie…

Jul 9, 2018
High 8.8

CVE-2018-4990 Exploited EPSS 36%

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlie…

Jul 9, 2018
KEV Jun 8, 2022
Unscored —

CVE-2018-4948 EPSS 15%

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlie…

Jul 9, 2018
Unscored —

CVE-2018-4988 EPSS 12%

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlie…

Jul 9, 2018
Unscored —

CVE-2018-4984 EPSS 15%

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlie…

Jul 9, 2018
Unscored —

CVE-2018-4973 EPSS 11%

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlie…

Jul 9, 2018
Unscored —

CVE-2018-4972

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlie…

Jul 9, 2018
Unscored —

CVE-2018-4982 EPSS 25%

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlie…

Jul 9, 2018
Unscored —

CVE-2018-4999

Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlie…

Jul 9, 2018
Unscored —

CVE-2018-4963 EPSS 11%

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlie…

Jul 9, 2018
Unscored —

CVE-2018-4955 EPSS 11%

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlie…

Jul 9, 2018
Unscored —

CVE-2018-4975 EPSS 11%

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlie…

Jul 9, 2018
Unscored —

CVE-2018-4947 EPSS 15%

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlie…

Jul 9, 2018
Unscored —

CVE-2018-4985 EPSS 36%

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlie…

Jul 9, 2018
Unscored —

CVE-2018-4976 EPSS 11%

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlie…

Jul 9, 2018
Unscored —

CVE-2018-4996

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlie…

Jul 9, 2018
Unscored —

CVE-2018-4953

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlie…

Jul 9, 2018
Unscored —

CVE-2018-4956 EPSS 33%

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlie…

Jul 9, 2018