30 August 2018

56 results · Feed

• High 7.5
  CVE-2018-16131

  High severity vulnerability that affects com.typesafe.akka:akka-http-core_2.11 and com.typesafe.akka:akka-http-core_2.12

  The decodeRequest and decodeRequestWith directives in Lightbend Akka HTTP 10.1.x through 10.1.4 and 10.0.x through 10.0.13 allow remote attackers to cause a denial of service (memory consumption and daemon crash) via a ZIP bomb.

  com.typesafe.akka:akka-http-core_2.11 com.typesafe.akka:akka-http-core_2.12 Maven
  Aug 30, 2018
• Unscored —
  CVE-2018-16157

  waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing d…

  Aug 30, 2018
• High 8.1
  CVE-2018-10936 Public exploit

  Moderate severity vulnerability that affects org.postgresql:pgjdbc-aggregate

  A weakness was found in postgresql-jdbc before version 42.2.5. It was possible to provide an SSL Factory and not check the host name if a host name verifier was not provided to the driver. This could lead to a condition where a man-in-the-middle attacker coul…

  [UNKNOWN] PostgreSQL libpgjava libpgjava Debian Ubuntu Maven
  Aug 30, 2018
• Medium 5.3
  CVE-2018-14622

  A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xpr…

  [UNKNOWN] libtirpc libtirpc libtirpc Debian Ubuntu
  Aug 30, 2018
• Medium 5.3
  CVE-2018-14621

  An infinite loop vulnerability was found in libtirpc before version 1.0.2-rc2. With the port to using poll rather than …

  [UNKNOWN] libtirpc
  Aug 30, 2018
• High 7.5
  CVE-2018-11615

  Mosca REDoS Vulnerability

  This vulnerability allows remote attackers to deny service on vulnerable installations of npm mosca 2.8.1. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of topics. A crafted regular expression can…

  npm npm mosca mosca npm
  Aug 30, 2018
• Unscored —
  CVE-2018-11616

  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Tencent Foxmail 7.2…

  Tencent Tencent Foxmail
  Aug 30, 2018
• Unscored —
  CVE-2018-14317

  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.…

  Foxit Foxit Reader
  Aug 30, 2018
• Medium 6.2
  CVE-2018-14619

  A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The "null skcipher" was be…

  [UNKNOWN] kernel: linux Debian
  Aug 30, 2018
• Unscored —
  CVE-2018-16141

  ThinkCMF X2.2.3 has an arbitrary file deletion vulnerability in do_avatar in \application\User\Controller\ProfileContro…

  Aug 30, 2018
• Unscored —
  CVE-2018-16142

  PHPOK 4.8.278 has a Reflected XSS vulnerability in framework/www/login_control.php via the _back parameter to the ok_f …

  Aug 30, 2018
• Unscored —
  CVE-2018-16158 Public exploit EPSS 30%

  Eaton Power Xpert Meter 4000, 6000, and 8000 devices before 13.4.0.10 have a single SSH private key across different cu…

  Aug 30, 2018
• Unscored —
  CVE-2018-16140

  A buffer underwrite vulnerability in get_line() (read.c) in fig2dev 3.2.7a allows an attacker to write prior to the beg…

  fig2dev fig2dev transfig Debian Ubuntu
  Aug 30, 2018
• Unscored —
  CVE-2018-16058

  In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth AVDTP dissector could crash. This was a…

  wireshark wireshark wireshark Debian Ubuntu Alpine
  Aug 30, 2018
• Unscored —
  CVE-2018-16056

  In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth Attribute Protocol dissector could cras…

  wireshark wireshark wireshark Debian Ubuntu Alpine
  Aug 30, 2018
• Unscored —
  CVE-2018-16057

  In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash. This was addresse…

  wireshark wireshark wireshark Debian Ubuntu Alpine
  Aug 30, 2018