Skip to content
OpenAdvisories

Archive

22 October 2018

Vulnerabilities first published on this day (UTC), newest first.

← September 2018 2018 / October /22 November 2018 →
  1. 151
  2. 278
  3. 340
  4. 429
  5. 5134
  6. 62
  7. 76
  8. 848
  9. 958
  10. 10110
  11. 1116
  12. 12114
  13. 13 
  14. 144
  15. 1533
  16. 1625
  17. 17262
  18. 1862
  19. 1942
  20. 202
  21. 214
  22. 2214
  23. 2369
  24. 2435
  25. 257
  26. 2637
  27. 2715
  28. 2840
  29. 2954
  30. 3040
  31. 3142
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • Unscored —
    CVE-2018-18583

    An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c …

  • Unscored —
    CVE-2018-18581

    An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer over-read in internalPrintf in miniz/lup…

  • Unscored —
    CVE-2018-18582

    An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c …

  • Unscored —
    CVE-2018-18579

    Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/pm.php folder parameter.

  • Unscored —
    CVE-2018-18578

    DedeCMS 5.7 SP2 allows XSS via the plus/qrcode.php type parameter.

  • Unscored —
    CVE-2018-13115

    Lack of an authentication mechanism in KERUI Wifi Endoscope Camera (YPC99) allows an attacker to watch or block the cam…

  • Unscored —
    CVE-2018-13114

    Missing authentication and improper input validation in KERUI Wifi Endoscope Camera (YPC99) allow an attacker to execut…

  • Unscored —
    CVE-2018-12246

    Symantec Web Isolation (WI) 1.11 prior to 1.11.21 is susceptible to a reflected cross-site scripting (XSS) vulnerabilit…

    Symantec Symantec Web Isolation
  • Unscored —
    CVE-2018-15704 EPSS 22%

    Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability. A remote authenticated atta…

    Advantech Advantech WebAccess
  • Unscored —
    CVE-2018-15703

    Advantech WebAccess 8.3.2 and below is vulnerable to multiple reflected cross site scripting vulnerabilities. A remote …

    Advantech Advantech WebAccess
  • Unscored —
    CVE-2018-18557 Public exploit EPSS 15%

    LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.…

    tiff tiff tiff Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-18559

    In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanout_add from setsockopt…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • High 8.8
    CVE-2018-1850

    IBM Security Access Manager Appliance 9.0.3.1, 9.0.4.0 and 9.0.5.0 could allow unauthorized administration operations w…

    IBM Security Access Manager Appliance
  • Unscored —
    CVE-2018-18553

    Leanote 2.6.1 has XSS via the Blog Basic Setting title field, which is mishandled during rendering of the "likes" page.