Skip to content
OpenAdvisories

Archive

10 October 2018

Vulnerabilities first published on this day (UTC), newest first.

← September 2018 2018 / October /10 November 2018 →
  1. 151
  2. 278
  3. 340
  4. 429
  5. 5134
  6. 62
  7. 76
  8. 848
  9. 958
  10. 10110
  11. 1116
  12. 12114
  13. 13 
  14. 144
  15. 1533
  16. 1625
  17. 17262
  18. 1862
  19. 1942
  20. 202
  21. 214
  22. 2214
  23. 2369
  24. 2435
  25. 257
  26. 2637
  27. 2715
  28. 2840
  29. 2954
  30. 3040
  31. 3142
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2018-12410

    TIBCO Spotfire Statistics Services remote execution vulnerabilities

    The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may allow the remote execution of code. Without needing to authenticate, an attacker may be able to remotely execute code with the permissions…

    TIBCO Software TIBCO Spotfire Statistics Services
  • Critical 9.8
    CVE-2018-12542 Public exploit

    Eclipse Vert.x does not properly neutralize '' (forward slashes) sequences that can resolve to an external location

    In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\' (forward slashes) sequences that can resolve to a location th…

    The Eclipse Foundation Eclipse Vert.x io.vertx:vertx-web Maven
  • Critical 9.8
    CVE-2018-0044

    NFX Series: Insecure sshd configuration in Juniper Device Manager (JDM) and host OS

    An insecure SSHD configuration in Juniper Device Manager (JDM) and host OS on Juniper NFX Series devices may allow remote unauthenticated access if any of the passwords on the system are empty. The affected SSHD configuration has the PermitEmptyPasswords opti…

    Juniper Networks Junos OS Network devices
  • Critical 9.8
    CVE-2018-8500 EPSS 18%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore.

    Microsoft ChakraCore Microsoft.ChakraCore NuGet