Skip to content
OpenAdvisories

Archive

5 October 2018

Vulnerabilities first published on this day (UTC), newest first.

← September 2018 2018 / October /5 November 2018 →
  1. 151
  2. 278
  3. 340
  4. 429
  5. 5134
  6. 62
  7. 76
  8. 848
  9. 958
  10. 10110
  11. 1116
  12. 12114
  13. 13 
  14. 144
  15. 1533
  16. 1625
  17. 17262
  18. 1862
  19. 1942
  20. 202
  21. 214
  22. 2214
  23. 2369
  24. 2435
  25. 257
  26. 2637
  27. 2715
  28. 2840
  29. 2954
  30. 3040
  31. 3142
All Critical High Medium Low Exploited only Public exploit

134 results · Feed

  • Unscored —
    CVE-2018-15420

    Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities

    A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software i…

    Cisco Cisco WebEx WRF Player Network devices
  • Medium 5.4
    CVE-2018-1686

    IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to cross-site scripting. This vulnerability allows users to…

    IBM Maximo Asset Management
  • Medium 5.4
    CVE-2018-1812

    IBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to persistent cross-site scripting,…

    IBM Robotic Process Automation with Automation Anywhere
  • High 7.5
    CVE-2018-1647

    IBM QRadar Incident Forensics 7.2 and 7.3 does not properly restrict the size or amount of resources requested which co…

    IBM QRadar Incident Forensics
  • Medium 6.1
    CVE-2018-1795

    IBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to cross-site scripting. This vulne…

    IBM Robotic Process Automation with Automation Anywhere
  • Unscored —
    CVE-2018-1783

    IBM GPFS (IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2) command line utility allows an un…

  • High 7.7
    CVE-2018-1649

    IBM QRadar Incident Forensics 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attac…

    IBM QRadar Incident Forensics
  • Medium 6.2
    CVE-2018-1723

    IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2 could allow an unprivileged, authenticated u…

    IBM Spectrum Scale
  • Unscored —
    CVE-2018-6979

    The VMware Workspace ONE Unified Endpoint Management Console (A/W Console) 9.7.x prior to 9.7.0.3, 9.6.x prior to 9.6.0…

    VMware VMware Workspace ONE Unified Endpoint Management Console (AirWatch Console)
  • Unscored —
    CVE-2015-9272

    The videowhisper-video-presentation plugin 3.31.17 for WordPress allows remote attackers to execute arbitrary code beca…

  • Unscored —
    CVE-2013-7465

    Ice Cold Apps Servers Ultimate 6.0.2(12) does not require authentication for TELNET, SSH, or FTP, which allows remote a…

  • Unscored —
    CVE-2014-10076

    The wp-db-backup plugin 2.2.4 for WordPress relies on a five-character string for access control, which makes it easier…

  • Critical 9.8
    CVE-2014-10075

    karo Metacharacter Handling Remote Command Execution

    The karo gem 2.3.8 for Ruby allows Remote command injection via the host field.

    karo RubyGems
  • Unscored —
    CVE-2018-17986

    rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user.