September 2018

9 results · Clear filters · Feed

• High 7.8
  CVE-2018-14634 Exploited Public exploit EPSS 15%

  An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with …

  The Linux Foundation Kernel linux-raspi2 linux-hwe Debian Ubuntu
  Sep 25, 2018

  KEV Jan 26, 2026
• High 7.5
  CVE-2018-17297 Public exploit

  Unzip function in ZipUtil.java in Hutool allows remote attackers to overwrite arbitrary files via directory traversal

  The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequences in a filename within a ZIP archive.

  cn.hutool:hutool-core cn.hutool:hutool-all cn.hutool:hutool-parent Maven
  Sep 21, 2018
• High 7.5
  CVE-2018-11761 Public exploit

  High severity vulnerability that affects org.apache.tika:tika-core

  In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit entity expansion. They were therefore vulnerable to an entity expansion vulnerability which can lead to a denial of service attack.

  Apache Software Foundation Apache Tika tika tika Debian Ubuntu Maven
  Sep 19, 2018
• High 7.5
  CVE-2018-12086 Public exploit EPSS 12%

  High severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua

  Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.

  wireshark wireshark OPCFoundation.NetStandard.Opc.Ua Debian Alpine NuGet
  Sep 14, 2018
• High 7.8
  CVE-2018-8440 Exploited · Ransomware Public exploit EPSS 19%

  An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (…

  Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows
  Sep 13, 2018

  KEV Mar 28, 2022
• High 7.5
  CVE-2018-8467 Public exploit EPSS 69%

  ChakraCore RCE Vulnerability

  A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

  Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  Sep 13, 2018
• High 7.5
  CVE-2018-8466 Public exploit EPSS 69%

  ChakraCore RCE Vulnerability

  A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

  Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  Sep 13, 2018
• High 7.5
  CVE-2018-8269 Public exploit EPSS 27%

  Denial of service in ASP.NET Core

  A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability." This affects Microsoft.Data.OData.

  Microsoft Microsoft.Data.OData Microsoft.AspNetCore.All Microsoft.Data.OData NuGet
  Sep 13, 2018
• High 7.5
  CVE-2018-1756 Public exploit EPSS 11%

  IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 is vulnerable to SQL injection. A remote attacker c…

  IBM Security Identity Governance and Intelligence
  Sep 7, 2018