Archive

9 November 2018

Vulnerabilities first published on this day (UTC), newest first.

← October 2018 2018 / November /9 December 2018 →

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

High 8.1

CVE-2018-15796

Signing Key Extraction in Bits Service Release

Cloud Foundry Bits Service Release, versions prior to 2.14.0, uses an insecure hashing algorithm to sign URLs. A remote malicious user may obtain a signed URL and extract the signing key, allowing them complete read and write access to the the Bits Service st…

Cloud Foundry bits-service-release

Nov 9, 2018
High 7.8

CVE-2018-1780

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local db2 ins…

IBM DB2 for Linux, UNIX and Windows Linux Windows

Nov 9, 2018
High 7.4

CVE-2018-1834

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability th…

IBM DB2 for Linux, UNIX and Windows Linux Windows

Nov 9, 2018
High 8.9

CVE-2018-1774

IBM API Connect 5.0.0.0, 5.0.8.4, 2018.1 and 2018.3.6 is vulnerable to CSV injection via the developer portal and analy…

IBM API Connect

Nov 9, 2018
High 8.4

CVE-2018-1802

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared librar…

IBM DB2 for Linux, UNIX and Windows Linux Windows

Nov 9, 2018
High 8.4

CVE-2018-1781

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to…

IBM DB2 for Linux, UNIX and Windows Linux Windows

Nov 9, 2018