Skip to content
OpenAdvisories

Archive

November 2018

Vulnerabilities first published in this month (UTC), newest first.

← October 2018 2018 / November December 2018 →
  1. 129
  2. 228
  3. 33
  4. 46
  5. 522
  6. 647
  7. 750
  8. 838
  9. 932
  10. 108
  11. 119
  12. 1243
  13. 1338
  14. 14157
  15. 1542
  16. 1639
  17. 1720
  18. 185
  19. 1910
  20. 2036
  21. 2115
  22. 2212
  23. 2313
  24. 241
  25. 253
  26. 2661
  27. 2796
  28. 2842
  29. 2944
  30. 3037
All Critical High Medium Low Exploited only Public exploit

986 results · Feed

  • Unscored —
    CVE-2018-19319

    SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=gifts&a=update to change goods prices with the super administrator's pr…

  • Unscored —
    CVE-2018-18803 Public exploit

    Curriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse.vb and includes/user.v…

  • Unscored —
    CVE-2018-18799 Public exploit

    School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos.

  • Unscored —
    CVE-2018-18804 Public exploit

    Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb.

  • Unscored —
    CVE-2018-18761 Public exploit EPSS 16%

    SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection.

  • Unscored —
    CVE-2018-18759 Public exploit

    Modbus Slave 7.0.0 in modbus tools has a Buffer Overflow.

  • Unscored —
    CVE-2018-18760 Public exploit

    RhinOS 3.0 build 1190 allows CSRF.

  • Unscored —
    CVE-2018-18797 Public exploit

    School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php.

  • Unscored —
    CVE-2018-18806

    School Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to include/user.vb.

  • Unscored —
    CVE-2018-18796

    Library Management System 1.0 has SQL Injection via the "Search for Books" screen.

  • Unscored —
    CVE-2018-18801 Public exploit

    The BSEN Ordering software 1.0 has SQL Injection via student/index.php?view=view&id=[SQL] or index.php?q=single-item&id…

  • Unscored —
    CVE-2018-18763 Public exploit

    SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=[SQL] SQL Injection.

  • Unscored —
    CVE-2018-18805 Public exploit

    Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb.

  • Unscored —
    CVE-2018-18755 Public exploit

    K-iwi Framework 1775 has SQL Injection via the admin/user/group/update user_group_id parameter or the admin/user/user/u…

  • Unscored —
    CVE-2018-18756

    Local Server 1.0.9 has a Buffer Overflow via crafted data on Port 4008.

  • Unscored —
    CVE-2018-18795 Public exploit

    School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter.

  • Unscored —
    CVE-2018-18793 Public exploit

    School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos.

  • Unscored —
    CVE-2018-18794 Public exploit

    School Event Management System 1.0 allows CSRF via user/controller.php?action=edit.

  • Unscored —
    CVE-2018-16396

    An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. …

    ruby2.3 ruby ruby2.5 ruby2.0 Ubuntu Alpine
  • Critical 9.8
    CVE-2018-16395 EPSS 11%

    Ruby Openssl Allows Incorrect Value Comparison

    An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return t…

    ruby2.3 ruby ruby2.5 ruby2.0 Ubuntu Alpine RubyGems
  • Unscored —
    CVE-2018-15693

    Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated users authorization bypass via insecure d…

  • Unscored —
    CVE-2018-15692

    Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated users authorization bypass and data manip…

  • Medium 6.3
    CVE-2018-1797

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using Enterprise bundle Archives (EBA) could allow a local atta…

    IBM WebSphere Application Server
  • Medium 4.3
    CVE-2018-1639

    The Report Builder of Jazz Reporting Service 5.0 through 5.0.2 and 6.0 through 6.0.6 could allow an authenticated user …

    IBM Jazz Reporting Service
  • High 7.5
    CVE-2018-7362

    All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which m…

    ZTE ZXHN F670
  • Medium 4.3
    CVE-2018-7363

    All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability. Since ap…

    ZTE ZXHN F670
  • Critical 9.0
    CVE-2018-7359

    All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by heap-based buffer overflow vulnerability, whic…

    ZTE ZXHN F670
  • Critical 9.6
    CVE-2018-7360

    All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may …

    ZTE ZXHN F670
  • Medium 6.5
    CVE-2018-7361

    All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which …

    ZTE ZXHN F670
  • Unscored —
    CVE-2018-9073

    CMM Security Vulnerability

    Lenovo Chassis Management Module (CMM) prior to version 2.0.0 utilizes a hardcoded encryption key to protect certain secrets. Possession of the key can allow an attacker that has already compromised the server to decrypt these secrets.

    Lenovo Chassis Management Module (CMM)
  • Unscored —
    CVE-2018-9086

    Legacy Server BMC Remote Command Injection

    In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC firmware download command. This allows a privileged user to download and execute arbitrary code inside the BMC. This can only be exploited by authorized privileged…

    Lenovo ThinkServer BMC
  • Unscored —
    CVE-2018-9085

    Missing System x Flash Memory Write Protection Lock Bit

    A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potentially allowing an attacker with administrator access to modify the subset of flash memory containing Intel Server Platform Services (SPS) an…

    IBM Lenovo System x UEFI System x UEFI
  • Unscored —
    CVE-2018-9071

    CMM Security Vulnerability

    Lenovo Chassis Management Module (CMM) prior to version 2.0.0 allows unauthenticated users to retrieve information related to the current authentication configuration settings. Exposed settings relate to password lengths, expiration, and lockout configuration.

    Lenovo Chassis Management Module (CMM)
  • High 8.8
    CVE-2018-19296

    Phar object injection in PHPMailer

    PHPMailer before 5.2.27 and 6.x before 6.0.6 is vulnerable to an object injection attack.

    phpmailer/phpmailer libphp-phpmailer libphp-phpmailer Debian Ubuntu Packagist
  • Unscored —
    CVE-2018-19301

    tp4a TELEPORT 3.1.0 allows XSS via the login page because a crafted username is mishandled when an administrator later …

  • Unscored —
    CVE-2018-5407 Public exploit

    Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attack…

    openssl openssl openssl openssl1.0 Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-18954

    The pnv_lpc_do_eccb function in hw/ppc/pnv_lpc.c in Qemu before 3.1 allows out-of-bounds write or read access to PowerN…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2018-16621 Public exploit

    Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection.

  • Unscored —
    CVE-2018-16620

    Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control.

  • Unscored —
    CVE-2018-16619

    Sonatype Nexus Repository Manager before 3.14 allows XSS.