Skip to content
OpenAdvisories

Archive

24 September 2018

Vulnerabilities first published on this day (UTC), newest first.

← August 2018 2018 / September /24 October 2018 →
  1. 120
  2. 228
  3. 331
  4. 452
  5. 554
  6. 651
  7. 765
  8. 87
  9. 97
  10. 1047
  11. 1139
  12. 1269
  13. 13104
  14. 1431
  15. 159
  16. 1626
  17. 1738
  18. 1878
  19. 1957
  20. 2043
  21. 2163
  22. 226
  23. 2316
  24. 2427
  25. 2554
  26. 2663
  27. 2715
  28. 2862
  29. 292
  30. 306
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.3
    CVE-2018-17107

    tgstation-server cached user logins in legacy server

    In Tgstation tgstation-server 3.2.4.0 through 3.2.1.0 (fixed in 3.2.5.0), active logins would be cached, allowing subsequent logins to succeed with any username or password.

    TGServiceInterface NuGet
  • High 7.5
    CVE-2018-6700

    True Key (TK) - DLL Search Order Hijacking vulnerability

    DLL Search Order Hijacking vulnerability in Microsoft Windows Client in McAfee True Key (TK) before 5.1.165 allows local users to execute arbitrary code via specially crafted malware.

    McAfee True Key (TK)
  • High 7.2
    CVE-2018-15615

    CMS Supervisor Information Disclosure

    A vulnerability in the Supervisor component of Avaya Call Management System allows local administrative user to extract sensitive information from users connecting to a remote CMS host. Affected versions of CMS Supervisor include R17.0.x and R18.0.x.

    Avaya Call Management System Supervisor