Skip to content
OpenAdvisories

Archive

17 October 2018

Vulnerabilities first published on this day (UTC), newest first.

← September 2018 2018 / October /17 November 2018 →
  1. 151
  2. 278
  3. 340
  4. 429
  5. 5134
  6. 62
  7. 76
  8. 848
  9. 958
  10. 10110
  11. 1116
  12. 12114
  13. 13 
  14. 144
  15. 1533
  16. 1625
  17. 17262
  18. 1862
  19. 1942
  20. 202
  21. 214
  22. 2214
  23. 2369
  24. 2435
  25. 257
  26. 2637
  27. 2715
  28. 2840
  29. 2954
  30. 3040
  31. 3142
All Critical High Medium Low Exploited only Public exploit

262 results · Feed

  • High 7.4
    CVE-2018-0441

    Cisco IOS Access Points Software 802.11r Fast Transition Denial of Service Vulnerability

    A vulnerability in the 802.11r Fast Transition feature set of Cisco IOS Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a corruption…

    Cisco Cisco Aironet Access Point Software Network devices
  • Medium 5.8
    CVE-2018-0381

    Cisco Aironet 1560, 1800, 2800, and 3800 Series Access Points Denial of Service Vulnerability

    A vulnerability in the Cisco Aironet Series Access Points (APs) software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to a deadlo…

    Cisco Cisco Aironet Access Points Network devices
  • High 7.5
    CVE-2018-0417

    Cisco Wireless LAN Controller Software GUI Privilege Escalation Vulnerability

    A vulnerability in TACACS authentication with Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to perform certain operations within the GUI that are not normally available to that user on the CLI. The vulnerability is …

    Cisco Cisco Wireless LAN Controller (WLC) Network devices
  • Medium 6.5
    CVE-2018-0420

    Cisco Wireless LAN Controller Software Directory Traversal Vulnerability

    A vulnerability in the web-based interface of Cisco Wireless LAN Controller Software could allow an authenticated, remote attacker to view sensitive information. The issue is due to improper sanitization of user-supplied input in HTTP request parameters that …

    Cisco Cisco Wireless LAN Controller (WLC) Network devices
  • High 8.6
    CVE-2018-0443

    Cisco Wireless LAN Controller Software Control and Provisioning of Wireless Access Points Protocol Denial of Service Vulnerability

    A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerabili…

    Cisco Cisco Wireless LAN Controller (WLC) Network devices
  • High 7.5
    CVE-2018-0442

    Cisco Wireless LAN Controller Software Control and Provisioning of Wireless Access Points Protocol Information Disclosure Vulnerability

    A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to retrieve memory contents, which could lead to the disclosu…

    Cisco Cisco Wireless LAN Controller (WLC) Network devices
  • Unscored —
    CVE-2018-18450

    apps\admin\controller\content\SingleController.php in PbootCMS before V1.3.0 build 2018-11-12 has SQL Injection, as dem…

  • Medium 6.5
    CVE-2018-15438

    Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability

    A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected system. The vulnera…

    Cisco Cisco Prime Collaboration Assurance Network devices
  • Medium 6.1
    CVE-2018-15435

    Cisco SocialMiner Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to …

    Cisco Cisco SocialMiner Network devices
  • High 8.6
    CVE-2018-0378

    Cisco NX-OS Software for Nexus 5500, 5600, and 6000 Series Switches Precision Time Protocol Denial of Service Vulnerability

    A vulnerability in the Precision Time Protocol (PTP) feature of Cisco Nexus 5500, 5600, and 6000 Series Switches running Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. T…

    Cisco Cisco NX-OS Software for Nexus 6000 Series Network devices
  • Unscored —
    CVE-2018-14597

    CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and …

    CA Technologies CA Identity Governance
  • High 7.7
    CVE-2018-0456

    Cisco NX-OS Software Authenticated Simple Network Management Protocol Denial of Service Vulnerability

    A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application of an affected device to restart unexpectedly. The vulnerability is due…

    Cisco Cisco NX-OS Software for Nexus 3000 Series 7.0(3)I7(3) Network devices
  • High 8.8
    CVE-2018-0395

    Cisco FXOS and NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerability

    A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition when the device unexpectedly reloads. Th…

    Cisco Cisco NX-OS Software Firepower 4100 Series Next-Generation Firewalls Network devices
  • Unscored —
    CVE-2018-18386

    drivers/tty/n_tty.c in the Linux kernel before 4.14.11 allows local attackers (who are able to access pseudo terminals)…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Medium 5.4
    CVE-2018-15402

    Cisco Enterprise NFV Infrastructure Software Cross-Site Request Forgery Vulnerability

    A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to conduct cross-site request forgery (CSRF) attacks. The vulnerability is due to improper validation of Origin headers on HTTP requests wi…

    Cisco Cisco Enterprise NFV Infrastructure Software Network devices
  • Medium 5.4
    CVE-2018-15395

    Cisco Wireless LAN Controller Software Privilege Escalation Vulnerability

    A vulnerability in the authentication and authorization checking mechanisms of Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, adjacent attacker to gain network access to a Cisco TrustSec domain. Under normal circumstances, this acc…

    Cisco Cisco Wireless LAN Controller (WLC) Network devices
  • Medium 5.3
    CVE-2018-0416

    Cisco Wireless LAN Controller Software Information Disclosure Vulnerability

    A vulnerability in the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to view system information that under normal circumstances should be prohibited. The vulnerability is due to incomplete …

    Cisco Cisco Wireless LAN Controller (WLC) Network devices
  • Medium 4.8
    CVE-2018-0388

    Cisco Wireless LAN Controller Software Cross-Site Scripting Vulnerability

    A vulnerability in the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web-based interface of an affected system. The vuln…

    Cisco Cisco Wireless LAN Controller (WLC) Network devices
  • Unscored —
    CVE-2018-18445

    In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in …

    linux-raspi2 linux-hwe linux-azure linux-gcp Debian Ubuntu
  • Unscored —
    CVE-2018-18443

    OpenEXR 2.3.0 has a memory leak in ThreadPool in IlmBase/IlmThread/IlmThreadPool.cpp, as demonstrated by exrmultiview.

    openexr ilmbase Debian Azure Linux
  • Unscored —
    CVE-2018-18444

    makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of-bounds write, leading to an assertion failure or possi…

    openexr openexr openexr OpenEXR Debian Ubuntu Azure Linux Alpine
  • Critical 9.0
    CVE-2018-15616

    System Platform Web UI Deserialization

    A vulnerability in the Web UI component of Avaya Aura System Platform could allow a remote, unauthenticated user to perform a targeted deserialization attack that could result in remote code execution. Affected versions of System Platform includes 6.3.0 throu…

    Avaya Avaya Aura® System Platform
  • Unscored —
    CVE-2018-12816

    Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could…

    Adobe Adobe Digital Editions
  • Unscored —
    CVE-2018-12814 EPSS 11%

    Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. Successful exploitation could lead …

    Adobe Adobe Digital Editions
  • Unscored —
    CVE-2018-12823

    Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. Successful exploitation could lead …

    Adobe Adobe Digital Editions
  • Unscored —
    CVE-2018-12820

    Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could…

    Adobe Adobe Digital Editions
  • Unscored —
    CVE-2018-12822

    Adobe Digital Editions versions 4.5.8 and below have an use after free vulnerability. Successful exploitation could lea…

    Adobe Adobe Digital Editions
  • Unscored —
    CVE-2018-12819

    Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could…

    Adobe Adobe Digital Editions
  • Unscored —
    CVE-2018-12821

    Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could…

    Adobe Adobe Digital Editions
  • Unscored —
    CVE-2018-12813 EPSS 11%

    Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. Successful exploitation could lead …

    Adobe Adobe Digital Editions
  • Unscored —
    CVE-2018-12818

    Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could…

    Adobe Adobe Digital Editions
  • Unscored —
    CVE-2018-15969

    Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability. Success…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2018-15973

    Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability. Success…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2018-15976

    Adobe Technical Communications Suite versions 1.0.5.1 and below have an insecure library loading (dll hijacking) vulner…

    Adobe Adobe Technical Communications Suite
  • Unscored —
    CVE-2018-15974

    Adobe Framemaker versions 1.0.5.1 and below have an insecure library loading (dll hijacking) vulnerability. Successful …

    Adobe Adobe Framemaker
  • Unscored —
    CVE-2018-15972

    Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability. Success…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2018-15971

    Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Succ…

    Adobe Adobe Experience Manager
  • Unscored —
    CVE-2018-15970

    Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Succ…

    Adobe Adobe Experience Manager
  • Unscored —
    DRUPAL-CONTRIB-2018-067

    The Workbench Moderation module adds arbitrary moderation states to Drupal core's "unpublished" and "published" node st…

    drupal/workbench_moderation Packagist
  • Unscored —
    CVE-2018-7989

    Huawei Mate 10 pro smartphones with the versions before BLA-AL00B 8.1.0.326(C00) have an improper authentication vulner…

    Huawei Mate 10 Pro Network devices