Skip to content
OpenAdvisories

Archive

11 October 2018

Vulnerabilities first published on this day (UTC), newest first.

← September 2018 2018 / October /11 November 2018 →
  1. 151
  2. 278
  3. 340
  4. 429
  5. 5134
  6. 62
  7. 76
  8. 848
  9. 958
  10. 10110
  11. 1116
  12. 12114
  13. 13 
  14. 144
  15. 1533
  16. 1625
  17. 17262
  18. 1862
  19. 1942
  20. 202
  21. 214
  22. 2214
  23. 2369
  24. 2435
  25. 257
  26. 2637
  27. 2715
  28. 2840
  29. 2954
  30. 3040
  31. 3142
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2018-17927

    In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple out-of-bounds write vulnerabilities…

    Delta Electronics Delta Industrial Automation TPEditor ICS / OT
  • Unscored —
    CVE-2018-17929

    In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based buffer overflow vulnera…

    Delta Electronics Delta Industrial Automation TPEditor ICS / OT
  • Unscored —
    CVE-2018-12441

    The CorsairService Service in Corsair Utility Engine is installed with insecure default permissions, which allows unpri…

  • Unscored —
    CVE-2018-18257

    An issue was discovered in BageCMS 3.1.3. An attacker can delete any files and folders on the web server via an index.p…

  • Unscored —
    CVE-2018-18258

    An issue was discovered in BageCMS 3.1.3. The attacker can execute arbitrary PHP code on the web server and can read an…

  • Unscored —
    CVE-2018-15766

    Dell Encryption and Dell Endpoint Security Suite Enterprise Security Policy Overwrite Vulnerability

    On install, Dell Encryption versions prior 10.0.1 and Dell Endpoint Security Suite Enterprise versions prior 2.0.1 will overwrite and manually set the "Minimum Password Length" group policy object to a value of 1 on that device. This allows for users to bypas…

    Dell Encryption Endpoint Security Suite Enterprise
  • Unscored —
    CVE-2018-18215

    In youke365 v1.1.5, admin/user.html has a CSRF vulnerability that can add an user account.

  • Critical 9.8
    CVE-2018-9206 Public exploit Scanner template EPSS 97%

    Unrestricted Upload of File with Dangerous Type in blueimp-file-upload

    Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0

    Blueimp Blueimp jQuery-File-Upload libjs-jquery-file-upload blueimp-file-upload Debian Ubuntu npm
  • Unscored —
    CVE-2018-18242

    youke365 v1.1.5 has SQL injection via admin/login.html, as demonstrated by username=admin&pass=123456&code=9823&act=log…

  • Unscored —
    CVE-2018-12449

    The Whale browser installer 0.4.3.0 and earlier versions allows DLL hijacking.

    NAVER Whale Browser Installer
  • High 7.1
    CVE-2018-1738

    IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0 could allow an authenticated user to obtain highly sensitive informati…

    IBM Security Key Lifecycle Manager
  • Medium 5.9
    CVE-2018-1724

    IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3, and 10.1 could allow a local user to change their job user at job submission time …

    IBM Spectrum LSF
  • Medium 6.5
    CVE-2018-1708

    IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as …

    IBM Spectrum Symphony
  • High 7.5
    CVE-2018-1745

    IBM Security Key Lifecycle Manager 2.7 and 3.0 could allow an unauthenticated user to restart the SKLM server due to mi…

    IBM Security Key Lifecycle Manager
  • Medium 5.4
    CVE-2018-1706

    IBM Spectrum Symphony 7.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

    IBM Spectrum Symphony
  • Critical 9.8
    CVE-2018-18240

    Pippo RCE Vulnerability

    Pippo through 1.11.0 allows remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine component does not use XStream's available protection mechanisms to restrict unmarshalling.

    ro.pippo:pippo-core ro.pippo:pippo-session Maven