Archive

14 November 2018

Vulnerabilities first published on this day (UTC), newest first.

← October 2018 2018 / November /14 December 2018 →

All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

Unscored —

CVE-2018-15710 Public exploit EPSS 38%

Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php.

Nagios Nagios XI

Nov 14, 2018
Unscored —

CVE-2018-15708 Public exploit EPSS 89%

Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP …

Nagios Nagios XI

Nov 14, 2018
Unscored —

CVE-2018-9539 Public exploit

In the ClearKey CAS descrambler, there is a possible use after free due to a race condition. This could lead to local e…

Google Android Android

Nov 14, 2018
Medium 6.5

CVE-2018-7357 Public exploit EPSS 88%

ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper ac…

ZTE ZXHN H168N

Nov 14, 2018
Medium 6.5

CVE-2018-7358 Public exploit EPSS 90%

ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper ch…

ZTE ZXHN H168N

Nov 14, 2018
High 8.8

CVE-2018-17463 Exploited Public exploit EPSS 85%

Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbi…

Google Chrome chromium-browser oxide-qt Browsers Ubuntu

Nov 14, 2018
KEV Jun 8, 2022
High 8.8

CVE-2018-6065 Exploited Public exploit EPSS 60%

Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google C…

Google Chrome chromium-browser oxide-qt Browsers Ubuntu

Nov 14, 2018
KEV Jun 8, 2022
Unscored —

CVE-2018-6066 Public exploit

Lack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0.3325.146 allowed a remo…

Google Chrome chromium-browser oxide-qt Browsers Ubuntu

Nov 14, 2018
Unscored —

CVE-2018-6064 Public exploit

Type Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote…

Google Chrome chromium-browser oxide-qt Browsers Ubuntu

Nov 14, 2018
High 8.8

CVE-2018-19277 Public exploit

XXE in PHPSpreadsheet due to encoding issue

securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file

phpoffice/phpspreadsheet phpoffice/phpexcel Packagist

Nov 14, 2018
High 7.4

CVE-2018-8581 Exploited · Ransomware Public exploit EPSS 28%

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation o…

Microsoft Microsoft Exchange Server

Nov 14, 2018
KEV Mar 3, 2022
Unscored —

CVE-2018-8552 Public exploit EPSS 51%

An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which cou…

Microsoft Internet Explorer 11 Internet Explorer 10 Internet Explorer 9

Nov 14, 2018
Unscored —

CVE-2018-8550 Public exploit

An elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation of Privilege Vulnerabil…

Nov 14, 2018
Unscored —

CVE-2018-8584 Public exploit

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (…

Microsoft Windows Server 2019 Windows Server 2016 Windows 10 Windows

Nov 14, 2018
Unscored —

CVE-2018-8544 Public exploit EPSS 48%

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Window…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018