Archive
10 October 2018
Vulnerabilities first published on this day (UTC), newest first.
110 results · Feed
-
Unscored —
Multiple instances of this vulnerability (Unsafe ActiveX Control Marked Safe For Scripting) have been identified in the…
-
Unscored —
A vulnerability has been identified in SIMATIC ET 200SP Open Controller (All versions >= V2.0 and < V2.1.6), SIMATIC S7…
-
Unscored —
A vulnerability has been identified in ROX II (All versions < V2.12.1). An authenticated attacker with a high-privilege…
-
Unscored —
A vulnerability has been identified in ROX II (All versions < V2.12.1). An attacker with network access to port 22/tcp …
-
Unscored —
A vulnerability has been identified in SIMATIC S7-1200 CPU family version 4 (All versions < V4.2.3). The web interface …
-
Unscored —
XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_type parameter.
-
Unscored —
XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_url parameter.
-
Unscored —
PbootCMS 1.2.1 has SQL injection via the HTTP POST data to the api.php/cms/addform?fcode=1 URI.
-
Unscored —
Virtualmin 6.03 allows Frame Injection via the settings-editor_read.cgi file parameter.
-
Unscored —
Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webmin_search.cgi URI.
-
Unscored —
All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. T…
-
Unscored —
All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use an undocument…
-
Unscored —
All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses…
-
Unscored —
Permissions in the driver pack installers for Intel NVMe before version 4.0.0.1007 and Intel RSTe before version 4.7.0.…
-
Medium 6.1
Apache ActiveMQ web console vulnerable to Cross-site Scripting
An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp page of Apache ActiveMQ versions 5.0.0 to 5.15.5. The root cause of this issue is improper data filtering of the QueueFil…
-
Unscored —
When F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.5.1-11.5.6 is processing specially crafted TCP …
-
Unscored —
An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a maliciou…
-
Unscored —
An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Wi…
-
Unscored —
A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka "Windows Shell Remote Code…
-
High 7.8
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
KEV Jan 21, 2022 -
Unscored —CVE-2018-8460 EPSS 21%
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Interne…
-
Unscored —
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input fro…
-
Unscored —
A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows …
-
Unscored —
An Information Disclosure vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memo…
-
Unscored —CVE-2018-8432 EPSS 20%
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, ak…
-
Unscored —
An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a maliciou…
-
Unscored —CVE-2018-8491 EPSS 13%
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Interne…
-
Unscored —
An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, …
-
Unscored —
A security feature bypass vulnerability exists in DNS Global Blocklist feature, aka "Windows DNS Security Feature Bypas…
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …
-
Unscored —CVE-2018-8501 EPSS 20%
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handl…
-
Unscored —
A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, ak…
-
Unscored —
An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Informat…
-
High 7.5CVE-2018-8513 EPSS 14%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …
-
High 7.5CVE-2018-8292 EPSS 15%
.NET Core Information Disclosure
An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core…
-
Unscored —
An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious …
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…
-
Unscored —CVE-2018-8472 EPSS 19%
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles obje…
-
Unscored —CVE-2018-8502 EPSS 20%
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…