Skip to content
OpenAdvisories

Archive

17 October 2018

Vulnerabilities first published on this day (UTC), newest first.

← September 2018 2018 / October /17 November 2018 →
  1. 151
  2. 278
  3. 340
  4. 429
  5. 5134
  6. 62
  7. 76
  8. 848
  9. 958
  10. 10110
  11. 1116
  12. 12114
  13. 13 
  14. 144
  15. 1533
  16. 1625
  17. 17262
  18. 1862
  19. 1942
  20. 202
  21. 214
  22. 2214
  23. 2369
  24. 2435
  25. 257
  26. 2637
  27. 2715
  28. 2840
  29. 2954
  30. 3040
  31. 3142
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.8
    CVE-2018-0381

    Cisco Aironet 1560, 1800, 2800, and 3800 Series Access Points Denial of Service Vulnerability

    A vulnerability in the Cisco Aironet Series Access Points (APs) software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to a deadlo…

    Cisco Cisco Aironet Access Points Network devices
  • Medium 6.5
    CVE-2018-0420

    Cisco Wireless LAN Controller Software Directory Traversal Vulnerability

    A vulnerability in the web-based interface of Cisco Wireless LAN Controller Software could allow an authenticated, remote attacker to view sensitive information. The issue is due to improper sanitization of user-supplied input in HTTP request parameters that …

    Cisco Cisco Wireless LAN Controller (WLC) Network devices
  • Medium 6.5
    CVE-2018-15438

    Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability

    A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected system. The vulnera…

    Cisco Cisco Prime Collaboration Assurance Network devices
  • Medium 6.1
    CVE-2018-15435

    Cisco SocialMiner Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to …

    Cisco Cisco SocialMiner Network devices
  • Medium 5.4
    CVE-2018-15402

    Cisco Enterprise NFV Infrastructure Software Cross-Site Request Forgery Vulnerability

    A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to conduct cross-site request forgery (CSRF) attacks. The vulnerability is due to improper validation of Origin headers on HTTP requests wi…

    Cisco Cisco Enterprise NFV Infrastructure Software Network devices
  • Medium 5.4
    CVE-2018-15395

    Cisco Wireless LAN Controller Software Privilege Escalation Vulnerability

    A vulnerability in the authentication and authorization checking mechanisms of Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, adjacent attacker to gain network access to a Cisco TrustSec domain. Under normal circumstances, this acc…

    Cisco Cisco Wireless LAN Controller (WLC) Network devices
  • Medium 5.3
    CVE-2018-0416

    Cisco Wireless LAN Controller Software Information Disclosure Vulnerability

    A vulnerability in the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to view system information that under normal circumstances should be prohibited. The vulnerability is due to incomplete …

    Cisco Cisco Wireless LAN Controller (WLC) Network devices
  • Medium 4.8
    CVE-2018-0388

    Cisco Wireless LAN Controller Software Cross-Site Scripting Vulnerability

    A vulnerability in the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web-based interface of an affected system. The vuln…

    Cisco Cisco Wireless LAN Controller (WLC) Network devices