Archive

29 August 2018

Vulnerabilities first published on this day (UTC), newest first.

← July 2018 2018 / August /29 September 2018 →

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Critical 9.1

CVE-2018-16115

Cryptographically Weak Pseudo-Random Number Generator (PRNG) in akka-actor

Lightbend Akka 2.5.x before 2.5.16 allows message disclosure and modification because of an RNG error. A random number generator is used in Akka Remoting for TLS (both classic and Artery Remoting). Akka allows configuration of custom random number generators.…

com.typesafe.akka:akka-actor_2.11 com.typesafe.akka:akka-actor_2.12 Maven

Aug 29, 2018
Critical 9.8

CVE-2018-7790

An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product (all references, all …

Schneider Electric Modicon M221, all references, all versions prior to firmware V1.6.2.0 ICS / OT

Aug 29, 2018
Critical 9.8

CVE-2018-7791

A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product (all re…

Schneider Electric Modicon M221, all references, all versions prior to firmware V1.6.2.0 ICS / OT

Aug 29, 2018
Critical 9.8

CVE-2018-15727 Public exploit EPSS 63%

Grafana Authentication Bypass

Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie knowing only a username of an LDAP or OAuth user.

grafana github.com/grafana/grafana Ubuntu Go

Aug 29, 2018