Archive

16 October 2018

Vulnerabilities first published on this day (UTC), newest first.

← September 2018 2018 / October /16 November 2018 →

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Medium —

GHSA-cgpw-2gph-2r9g

Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.App, and Microsoft.AspNetCore.Server.Kestrel.Core

Microsoft is aware of a denial of service vulnerability in ASP.NET Core when a malformed request is terminated. An attacker who successfully exploited this vulnerability could cause a denial of service attack. The update addresses the vulnerability by correct…

Microsoft.AspNetCore.All Microsoft.AspNetCore.App Microsoft.AspNetCore.Server.Kestrel.Core NuGet

Oct 16, 2018
Medium —

GHSA-3m2r-q8x3-xmf7

Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.Server.Kestrel.Core, Microsoft.AspNetCore.Server.Kestrel.Transport.Abstractions, and Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv

Microsoft made an internal discovery of a security vulnerability in version 2.x of ASP.NET Core where a specially crafted request can cause excess resource consumption in Kestrel.

Microsoft.AspNetCore.All Microsoft.AspNetCore.Server.Kestrel.Core Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv Microsoft.AspNetCore.Server.Kestrel.Transport.Abstractions NuGet

Oct 16, 2018
Medium 5.4

CVE-2018-1777

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allow…

IBM WebSphere Application Server

Oct 16, 2018
Medium 6.5

CVE-2018-10839

Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could le…

The QEMU Project Qemu-kvm qemu qemu Virtualization Debian Ubuntu

Oct 16, 2018