Archive

14 November 2018

Vulnerabilities first published on this day (UTC), newest first.

← October 2018 2018 / November /14 December 2018 →

All Critical High Medium Low Exploited only Public exploit

157 results · Feed

Unscored —

CVE-2018-6067

Incorrect IPC serialization in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially ex…

Google Chrome chromium-browser oxide-qt Browsers Ubuntu

Nov 14, 2018
Unscored —

CVE-2018-6078

Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 65.0.3325.146 allowed a remote attacke…

Google Chrome chromium-browser oxide-qt Browsers Ubuntu

Nov 14, 2018
Unscored —

CVE-2018-12174

Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to…

Intel Intel Parallel Studio XE 2018

Nov 14, 2018
Unscored —

CVE-2018-3696

Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potent…

Intel Intel RAID Web Console v3 for Windows Windows

Nov 14, 2018
Unscored —

CVE-2018-3635

Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unpri…

Intel Intel Rapid Store Technology

Nov 14, 2018
Unscored —

CVE-2018-3621

Insufficient input validation in the Intel Driver & Support Assistant before 3.6.0.4 may allow an unauthenticated user …

Intel Intel Driver & Support Assistant

Nov 14, 2018
Unscored —

CVE-2018-3697

Improper directory permissions in the installer for the Intel Media Server Studio may allow unprivileged users to poten…

Intel Intel Media Server Studio

Nov 14, 2018
Unscored —

CVE-2018-3698

Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potent…

Intel Intel Ready Mode Technology

Nov 14, 2018
Unscored —

CVE-2018-3699

Cross-site scripting in the Intel RAID Web Console v3 for Windows may allow an unauthenticated user to elevate privileg…

Intel Intel RAID Web Console v3

Nov 14, 2018
High 8.8

CVE-2018-19271

Centreon SQL Injection

Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.28) allows SQL Injection via the main.php searchH parameter.

centreon/centreon Packagist

Nov 14, 2018
High 8.8

CVE-2018-19277 Public exploit

XXE in PHPSpreadsheet due to encoding issue

securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file

phpoffice/phpspreadsheet phpoffice/phpexcel Packagist

Nov 14, 2018
Unscored —

CVE-2018-19186

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the route.php paymentMethod param…

Nov 14, 2018
Unscored —

CVE-2018-19190

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the error.php error_msg parameter.

Nov 14, 2018
Unscored —

CVE-2018-19187

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or va…

Nov 14, 2018
Unscored —

CVE-2018-19188

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fort_id parameter.

Nov 14, 2018
Unscored —

CVE-2018-19189

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or va…

Nov 14, 2018
Unscored —

CVE-2018-8476 EPSS 65%

A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
High 7.4

CVE-2018-8581 Exploited · Ransomware Public exploit EPSS 28%

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation o…

Microsoft Microsoft Exchange Server

Nov 14, 2018
KEV Mar 3, 2022
Unscored —

CVE-2018-8549

A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "Windows Security Fea…

Nov 14, 2018
Unscored —

CVE-2018-8524 EPSS 19%

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in …

Microsoft Microsoft Office Office Microsoft Outlook

Nov 14, 2018
Unscored —

CVE-2018-8256 EPSS 23%

A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8546

A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vul…

Microsoft Microsoft Office Office Skype

Nov 14, 2018
Unscored —

CVE-2018-8582 EPSS 19%

A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export fi…

Microsoft Microsoft Office Office Microsoft Outlook

Nov 14, 2018
Unscored —

CVE-2018-8553 EPSS 19%

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, ak…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Nov 14, 2018
Unscored —

CVE-2018-8552 Public exploit EPSS 51%

An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which cou…

Microsoft Internet Explorer 11 Internet Explorer 10 Internet Explorer 9

Nov 14, 2018
High 7.8

CVE-2018-8589 Exploited

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k…

Microsoft Windows 7 Windows Server 2008 R2 Windows Server 2008 Windows

Nov 14, 2018
KEV May 23, 2022
Unscored —

CVE-2018-8592

An elevation of privilege vulnerability exists in Windows 10 version 1809 when installed from physical media (USB, DVD,…

Microsoft Windows Server 2019 Windows 10 Windows

Nov 14, 2018
Unscored —

CVE-2018-8564

A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoof…

Microsoft Microsoft Edge Browsers

Nov 14, 2018
Unscored —

CVE-2018-8545

An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka "Micro…

Microsoft Microsoft Edge Browsers

Nov 14, 2018
High 7.5

CVE-2018-8542 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
Unscored —

CVE-2018-8577 EPSS 19%

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…

Microsoft Microsoft Office Office Microsoft Excel

Nov 14, 2018
Unscored —

CVE-2018-8606

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanit…

Microsoft Microsoft Dynamics 365

Nov 14, 2018
Unscored —

CVE-2018-8600

A Cross-site Scripting (XSS) vulnerability exists when Azure App Services on Azure Stack does not properly sanitize use…

Microsoft Azure App

Nov 14, 2018
Unscored —

CVE-2018-8565

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka "W…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Nov 14, 2018
High 7.5

CVE-2018-8557 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
Unscored —

CVE-2018-8567

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, whi…

Microsoft Microsoft Edge Browsers

Nov 14, 2018
Unscored —

CVE-2018-8566

A security feature bypass vulnerability exists when Windows improperly suspends BitLocker Device Encryption, aka "BitLo…

Microsoft Windows Server 2019 Windows Server 2016 Windows 10 Windows

Nov 14, 2018
Unscored —

CVE-2018-8522 EPSS 19%

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in …

Microsoft Microsoft Office Office Microsoft Outlook

Nov 14, 2018
Unscored —

CVE-2018-8485

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevatio…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8608

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanit…

Microsoft Microsoft Dynamics 365

Nov 14, 2018