Skip to content
OpenAdvisories

Archive

October 2018

Vulnerabilities first published in this month (UTC), newest first.

← September 2018 2018 / October November 2018 →
  1. 151
  2. 278
  3. 340
  4. 429
  5. 5134
  6. 62
  7. 76
  8. 848
  9. 958
  10. 10110
  11. 1116
  12. 12114
  13. 13 
  14. 144
  15. 1533
  16. 1625
  17. 17262
  18. 1862
  19. 1942
  20. 202
  21. 214
  22. 2214
  23. 2369
  24. 2435
  25. 257
  26. 2637
  27. 2715
  28. 2840
  29. 2954
  30. 3040
  31. 3142
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.8
    CVE-2018-15687 Public exploit

    systemd: chown_one() can dereference symlinks

    A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary permissions on arbitrary files. Affected releases are systemd versions up to and including 239.

    systemd systemd systemd systemd Debian Ubuntu
  • High 7.0
    CVE-2018-15686 Public exploit

    systemd: reexec state injection: fgets() on overlong lines leads to line splitting

    A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected relea…

    systemd systemd systemd systemd Debian Ubuntu
  • High 7.8
    CVE-2018-15442 Public exploit EPSS 16%

    Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability

    A vulnerability in the update service of Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied paramet…

    Cisco Cisco WebEx Event Center Network devices
  • High 7.2
    CVE-2018-3953 Public exploit EPSS 14%

    Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Versio…

    Linksys ESeries E2500 ESeries E1200
  • High 7.8
    CVE-2018-8453 Exploited · Ransomware Public exploit EPSS 70%

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

    Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows
    KEV Jan 21, 2022
  • High 7.5
    CVE-2018-18074 Public exploit

    Insufficiently Protected Credentials in Requests

    The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.

    python-pip requests requests requests Debian Ubuntu PyPI