Archive

27 September 2018

Vulnerabilities first published on this day (UTC), newest first.

← August 2018 2018 / September /27 October 2018 →

All Critical High Medium Low Exploited only Public exploit

15 results · Feed

Medium 6.3

CVE-2018-15611

Communication Manager Local Administrator PrivEsc

A vulnerability in the local system administration component of Avaya Aura Communication Manager can allow an authenticated, privileged user on the local system to gain root privileges. Affected versions include 6.3.x and all 7.x version prior to 7.1.3.1.

Avaya Communication Manager

Sep 27, 2018
Unscored —

CVE-2018-14824

Delta Electronics Delta Industrial Automation PMSoft v2.11 or prior has an out-of-bounds read vulnerability that can be…

Delta Electronics Delta Industrial Automation PMSoft ICS / OT

Sep 27, 2018
Medium 5.9

CVE-2018-14650

It was discovered that sos-collector does not properly set the default permissions of newly created files, making all f…

[UNKNOWN] sos-collector

Sep 27, 2018
Medium 5.4

CVE-2018-1820

IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed …

IBM WebSphere Portal

Sep 27, 2018
Medium 5.4

CVE-2018-1660

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to e…

IBM WebSphere Portal

Sep 27, 2018
Medium 6.1

CVE-2018-1716

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to e…

IBM WebSphere Portal

Sep 27, 2018
High 7.4

CVE-2018-1736

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to conduct phishing attacks, using an open re…

IBM WebSphere Portal

Sep 27, 2018
Unscored —

CVE-2018-7109

HPE has addressed a remote arbitrary file modification vulnerability in HPE enhanced Internet Usage Manager (eIUM) v9.0…

Hewlett Packard Enterprise HPE enhanced Internet Usage Manager (eIUM)

Sep 27, 2018
Unscored —

CVE-2018-7107

A potential security vulnerability has been identified in HPE Device Entitlement Gateway (DEG) v3.2.4, v3.3 and v3.3.1.…

Hewlett Packard Enterprise HPE Device Entitlement Gateway (DEG)

Sep 27, 2018
Unscored —

CVE-2018-7104

A Remote Code Execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Services Manag…

Hewlett Packard Enterprise HPE Intelligent Management Center (iMC) Wireless Services Manager Software

Sep 27, 2018
Unscored —

CVE-2018-7108

HPE StorageWorks XP7 Automation Director (AutoDir) version 8.5.2-02 to earlier than 8.6.1-00 has a local and remote aut…

Hewlett Packard Enterprise HPE StorageWorks XP7 Automation Director (AutoDir)

Sep 27, 2018
Unscored —

CVE-2018-7102

A security vulnerability in HPE Intelligent Management Center (iMC) PLAT E0506P09, createFabricAutoCfgFile could be rem…

Hewlett Packard Enterprise HPE Intelligent Management Center (iMC) PLAT

Sep 27, 2018
Unscored —

CVE-2018-7101

A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to…

Hewlett Packard Enterprise HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers, HPE Integrated Lights-Out 4 (iLO 4), HPE Integrated Lights-Out 3 (iLO 3)

Sep 27, 2018
Unscored —

CVE-2018-7103

A Remote Code Execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Services Manag…

Hewlett Packard Enterprise HPE Intelligent Management Center (iMC) Wireless Services Manager Software

Sep 27, 2018
Unscored —

CVE-2018-7105

A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers prior to v1.35, HPE Integrated Li…

Hewlett Packard Enterprise HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers, HPE Integrated Lights-Out 4 (iLO 4), HPE Integrated Lights-Out 3 (iLO 3)

Sep 27, 2018