Skip to content
OpenAdvisories

Archive

8 November 2018

Vulnerabilities first published on this day (UTC), newest first.

← October 2018 2018 / November /8 December 2018 →
  1. 129
  2. 228
  3. 33
  4. 46
  5. 522
  6. 647
  7. 750
  8. 838
  9. 932
  10. 108
  11. 119
  12. 1243
  13. 1338
  14. 14157
  15. 1542
  16. 1639
  17. 1720
  18. 185
  19. 1910
  20. 2036
  21. 2115
  22. 2212
  23. 2313
  24. 241
  25. 253
  26. 2661
  27. 2796
  28. 2842
  29. 2944
  30. 3037
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Medium 5.4
    CVE-2018-15451

    Cisco Prime Service Catalog Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to…

    Cisco Cisco Prime Service Catalog Network devices
  • Medium 6.5
    CVE-2018-15450

    Cisco Prime Collaboration Assurance File Overwrite Vulnerability

    A vulnerability in the web-based UI of Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to overwrite files on the file system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerabi…

    Cisco Cisco Prime Collaboration Assurance Network devices
  • Medium 6.5
    CVE-2018-15447

    Cisco Integrated Management Controller Supervisor SQL Injection Vulnerability

    A vulnerability in the web framework code of Cisco Integrated Management Controller (IMC) Supervisor could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The vulnerability is due to a lack of proper validation of user-supplied inp…

    Cisco Cisco Integrated Management Controller (IMC) Supervisor Network devices
  • Medium 4.3
    CVE-2018-15449

    Cisco Video Surveillance Media Server Denial of Service Vulnerability

    A vulnerability in the web-based management interface of Cisco Video Surveillance Media Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of the web-based management interface of an affected system. The vulnerability is…

    Cisco Cisco Video Surveillance Media Server Software Network devices
  • Medium 5.3
    CVE-2018-15448

    Cisco Registered Envelope Service Information Disclosure Vulnerability

    A vulnerability in the user management functions of Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to discover sensitive user information. The attacker could use this information to conduct additional reconnaissance attacks.…

    Cisco Cisco Registered Envelope Service Network devices
  • Medium 6.3
    CVE-2018-15445

    Cisco Energy Management Suite Cross-Site Request Forgery Vulnerability

    A vulnerability in the web-based management interface of Cisco Energy Management Suite Software could allow an authenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulner…

    Cisco Cisco Energy Management Suite Network devices
  • Medium 5.3
    CVE-2018-15446

    Cisco Meeting Server Information Disclosure Vulnerability

    A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper protections on data that is returned from user meeting requests when the Guest access via ID …

    Cisco Cisco Meeting Server Network devices
  • Medium 6.3
    CVE-2018-15444

    Cisco Energy Management Suite XML External Entity Vulnerability

    A vulnerability in the web-based user interface of Cisco Energy Management Suite Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system. The vulnerability is due to improper han…

    Cisco Cisco Energy Management Suite Network devices
  • Medium 5.8
    CVE-2018-15443

    Cisco Firepower Detection Engine TCP Intrusion Prevention System Rule Bypass Vulnerability

    A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a configured Intrusion Prevention System (IPS) rule that inspects certain types of TCP traffic. The vulnerability is due to in…

    Cisco Cisco Firepower Management Center Network devices
  • Medium 4.8
    CVE-2018-15393

    Cisco Content Security Management Appliance (SMA) Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Content Security Management Appliance (SMA) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management inter…

    Cisco Cisco Content Security Management Appliance (SMA) Network devices
  • Medium 5.5
    CVE-2018-15437 Public exploit

    Cisco Immunet and Cisco AMP for Endpoints System Scan Denial of Service Vulnerability

    A vulnerability in the system scanning component of Cisco Immunet and Cisco Advanced Malware Protection (AMP) for Endpoints running on Microsoft Windows could allow a local attacker to disable the scanning functionality of the product. This could allow execut…

    Cisco Cisco AMP for Endpoints Network devices
  • Medium 4.3
    CVE-2018-1314

    Moderate severity vulnerability that affects org.apache.hive:hive-jdbc

    In Apache Hive 2.3.3, 3.1.0 and earlier, Hive "EXPLAIN" operation does not check for necessary authorization of involved entities in a query. An unauthorized user can do "EXPLAIN" on arbitrary table or view and expose table metadata and statistics.

    Apache Software Foundation Apache Hive org.apache.hive:hive-jdbc Maven