Archive
August 2018
Vulnerabilities first published in this month (UTC), newest first.
1,015 results · Feed
-
Unscored —CVE-2018-8302 EPSS 27%
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle …
-
Unscored —
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails…
-
High 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…
KEV Mar 25, 2022 -
Unscored —CVE-2018-8345 EPSS 15%
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file…
-
High 8.8
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows…
KEV Mar 25, 2022 -
High 7.5CVE-2018-8380 EPSS 15%
ChakraCore remote code execution vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft Cortana allows arbitrary website browsing on the lockscre…
-
Unscored —
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obj…
-
Unscored —CVE-2018-8379 EPSS 18%
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…
-
Unscored —
An information disclosure vulnerability exists when affected Microsoft browsers improperly allow cross-frame interactio…
-
High 7.5CVE-2018-8385 EPSS 15%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft…
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
Unscored —
A security feature bypass vulnerability exists when Microsoft Edge improperly handles redirect requests, aka "Microsoft…
-
Unscored —
SQL injection vulnerability in interface/de_identification_forms/de_identification_screen2.php in versions of OpenEMR b…
-
Unscored —
SQL injection vulnerability in interface/patient_file/encounter/search_code.php in versions of OpenEMR before 5.0.1.4 a…
-
Unscored —CVE-2018-15155 EPSS 10%
OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute …
-
Unscored —CVE-2018-15156 EPSS 10%
OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute …
-
Unscored —CVE-2018-15172 Public exploit
TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header.
-
Unscored —
Authentication bypass vulnerability in portal/account/register.php in versions of OpenEMR before 5.0.1.4 allows a remot…
-
Unscored —CVE-2018-15153 EPSS 61%
OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute …
-
Unscored —
SQL injection vulnerability in interface/de_identification_forms/find_immunization_popup.php in versions of OpenEMR bef…
-
Unscored —
SQL injection vulnerability in interface/forms_admin/forms_admin.php from library/registry.inc in versions of OpenEMR b…
-
Unscored —
SQL injection vulnerability in interface/forms/eye_mag/php/Anything_simple.php from library/forms.inc in versions of Op…
-
Unscored —
Ericsson-LG iPECS NMS 30M allows directory traversal via ipecs-cm/download?filename=../ URIs.
-
Unscored —
SQL injection vulnerability in interface/de_identification_forms/find_code_popup.php in versions of OpenEMR before 5.0.…
-
Unscored —CVE-2018-15154 EPSS 10%
OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute …
-
Medium 6.8
pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repo…
-
Unscored —
A Cross-site scripting (XSS) vulnerability was discovered on Intelbras Win 240 V1.1.0 devices. An attacker can change t…
-
Medium 4.3
IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site request forgery which cou…
-
Unscored —
The convertCommentToAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Conf…
-
Unscored —
The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Que…
-
Unscored —
VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds write vulnerability in…
-
Medium —CVE-2018-12537 Public exploit
Moderate severity vulnerability that affects io.vertx:vertx-core
In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters from the header value. This allow unfiltered values to inject a new header in the client request or s…
-
Unscored —
In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an E…
-
Critical 9.1
An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Serie…
-
Medium 5.6
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure…
-
High 7.3
Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow …
-
Medium 5.6
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure…
-
Critical 9.1
An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPE…
-
Unscored —
A vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS XE Software could all…