Archive
1 August 2018
Vulnerabilities first published on this day (UTC), newest first.
79 results · Feed
-
Unscored —
_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or po…
-
Medium 4.3
Johnson Controls Metasys and BCPro Generation of Error Message Containing Sensitive Information
In Johnson Controls Metasys System Versions 8.0 and prior and BCPro (BCM) all versions prior to 3.0.2, this vulnerability results from improper error handling in HTTP-based communications with the server, which could allow an attacker to obtain technical info…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthentica…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Small Business 300 Series (Sx300) Managed Switches could…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenti…
-
Unscored —
A vulnerability in the password change function of Cisco Prime Collaboration Provisioning could allow an authenticated,…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenti…
-
Unscored —
A vulnerability in Cisco AMP for Endpoints Mac Connector Software installed on Apple macOS 10.12 could allow an unauthe…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Small Business 300 Series (Sx300) Managed Switches could…
-
Critical 9.1
Arbitrary File Upload in GroupWise Administration Console
A vulnerability in the administration console of Micro Focus GroupWise prior to version 18.0.2 may allow a remote attacker authenticated as an administrator to upload files to an arbitrary path on the server. In certain circumstances this could result in remo…
-
High 8.8CVE-2018-3924 EPSS 44%
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader versio…
-
Critical 9.4
An exploitable unauthenticated XML external injection vulnerability was identified in FocalScope v2416. A unauthenticat…
-
High 8.0
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1…
-
High 8.8
Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality of the CFITSIO library versio…
-
Unscored —
An issue was discovered in DataLife Engine (DLE) through 13.0. An attacker can use XSS (related to the /addnews.html an…
-
High 7.5CVE-2018-8034 EPSS 21%
The host name verification missing in Apache Tomcat
The host name verification when using TLS with the WebSocket client was missing. It is now enabled by default. Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.9, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, and 7.0.35 to 7.0.88.
-
Unscored —CVE-2018-10618 Public exploit
Davolink DVW-3200N all version prior to Version 1.00.06. The device generates a weak password hash that is easily crack…
-
Critical 9.1
SQL Injection in pycsw
A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL (at least) it is possible to perform up…
-
High 8.8
IBM Spectrum Symphony and Platform Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to execute arbitrary co…
-
High 8.8
A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remot…
-
Medium 5.4
Keycloak Authentication Error
It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates. A malicious user could use this to access unauthorized data or possibly conduct further attacks.
-
Medium 4.6
The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling cloud-init…
-
Low 3.7
Improper Authentication in org.keycloak:keycloak-core
It was found that the keycloak before 2.3.0 did not implement authentication flow correctly. An attacker could use this flaw to construct a phishing URL, from which he could hijack the user's session. This could lead to information disclosure, or permit furth…
-
Medium 5.5
An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when proces…
-
Low 3.1
An input validation flaw was found in the way OpenShift 3 handles requests for images. A user, with a copy of the manif…
-
High 7.8
A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too smal…
-
Medium 5.9
A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error …
-
Medium 6.5
A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to …
-
Low 3.3
An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow.
-
Medium 4.4
openbuildservice allowed deleting packages via project links
openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links.
-
Medium 6.0
delete package via link exploit in open buildservice
Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against projects having the OBS:InitializeDevelPackage attribute, a similar issue to CVE-2018-7689.
-
High 8.8
A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54. A specially…
-
Unscored —
Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execut…
-
Unscored —
Insufficient Input Validation in Bleach module in INTEL Distribution for Python versions prior to IDP 2018 Update 2 all…
-
Unscored —
Escalation of privilege in Intel Saffron MemoryBase before version 11.4 potentially allows an authorized user of the Sa…
-
Unscored —
Escalation of privilege in Intel Saffron admin application before 11.4 allows an authenticated user to access unauthori…
-
High 8.8
A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.54. A specially…
-
High 8.8
A memory corruption vulnerability exists in the PSD-parsing functionality of Computerinsel Photoline 20.54. A specially…
-
Unscored —
Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execut…
-
Unscored —
Escalation of privilege in Intel Saffron MemoryBase before 11.4 allows an authenticated user access to privileged infor…