Skip to content
OpenAdvisories

Archive

18 September 2018

Vulnerabilities first published on this day (UTC), newest first.

← August 2018 2018 / September /18 October 2018 →
  1. 120
  2. 228
  3. 331
  4. 452
  5. 554
  6. 651
  7. 765
  8. 87
  9. 97
  10. 1047
  11. 1139
  12. 1269
  13. 13104
  14. 1431
  15. 159
  16. 1626
  17. 1738
  18. 1878
  19. 1957
  20. 2043
  21. 2163
  22. 226
  23. 2316
  24. 2427
  25. 2554
  26. 2663
  27. 2715
  28. 2862
  29. 292
  30. 306
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.1
    CVE-2018-6690

    McAfee Application Control (MAC) - Whitelist bypass using a hard drive solidified by MACC

    Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control (MACC) 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external syste…

    McAfee McAfee Application Control (MAC)
  • Medium 5.6
    CVE-2018-6693

    Endpoint Security for Linux Threat Prevention (ENSLTP) privilege escalation vulnerability

    An unprivileged user can delete arbitrary files on a Linux system running ENSLTP 10.5.1, 10.5.0, and 10.2.3 Hotfix 1246778 and earlier. By exploiting a time of check to time of use (TOCTOU) race condition during a specific scanning sequence, the unprivileged …

    McAfee Endpoint Security for Linux Threat Prevention (ENSLTP) Linux
  • Medium 4.4
    CVE-2017-3912

    McAfee Application Control and Change Control (MACC) - password management security feature bypass (SFB) leading to an authentication bypass

    Bypassing password security vulnerability in McAfee Application and Change Control (MACC) 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility.

    McAfee McAfee Application Control and Change Control (MACC)
  • Medium 6.8
    CVE-2018-11084

    Garden-runC prevents deletion of some app environments

    Cloud Foundry Garden-runC release, versions prior to 1.16.1, prevents deletion of some app environments based on file attributes. A remote authenticated malicious user may create and delete apps with crafted file attributes to cause a denial of service for ne…

    Cloud Foundry Garden-runC
  • Medium 5.3
    CVE-2018-17175

    In marshmallow library the schema "only" option treats an empty list as implying no "only" option

    In the marshmallow library before 2.15.1 and 3.x before 3.0.0b9 for Python, the schema "only" option treats an empty list as implying no "only" option, which allows a request that was intended to expose no fields to instead expose all fields (if the schema is…

    marshmallow python-marshmallow python-marshmallow Debian Ubuntu PyPI
  • Medium 5.3
    CVE-2018-14642

    Exposure of Sensitive Information to an Unauthorized Actor in Undertow

    An information leak vulnerability was found in Undertow. If all headers are not written out in the first write() call then the code that handles flushing the buffer will always write out the full contents of the writevBuffer buffer, which may contain data fro…

    Red Hat undertow undertow undertow Debian Ubuntu Maven
  • Medium 6.5
    CVE-2018-14641

    A security flaw was found in the ip_frag_reasm() function in net/ipv4/ip_fragment.c in the Linux kernel from 4.19-rc1 t…

    The Linux Foundation Kernel