Week 5, 2018
29 January – 4 February 2018
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
- Critical 9.8 EPSS 100%
- Critical 9.8 EPSS 3.1%
- Critical 9.1 EPSS 2.6%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
Unscored
CVE-2018-0101 A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, rem…EPSS 87%
-
Unscored
CVE-2018-6377 In Joomla! before 3.8.4, inadequate input filtering in com_fields leads to an XSS vulnerability in multiple field types, i.e., list, radio, and checkboxEPSS 57%
-
Unscored
CVE-2018-6317 The remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an unauthenticated format string vulnerability, allowing remote attack…EPSS 44%
-
Unscored
CVE-2018-6008 Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the download_file parameter.EPSS 37%
-
Unscored
CVE-2018-6580 Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! via a view=upload&task=upload&pop=true&tmpl=component request.EPSS 36%
-
Unscored
CVE-2018-6407 An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 devices. An unauthenticated attacker can crash a device by sending a POST request with a huge…EPSS 32%
-
Unscored
CVE-2016-6598 BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service (FileStorageService) on port 9010. This service contains a met…EPSS 19%
-
Unscored
CVE-2018-5701 In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerability due to not validating input values…EPSS 18%
Advisories
- SUSE / openSUSE Security Updates 54
- Debian Security (DSA / DLA) 13
- Ubuntu Security Notices (USN) 91 critical
- CISA ICS & IT advisories 52 critical
- Oracle Linux Security Advisories (ELSA) 3
- CERT@VDE 1
- ICSA-18-032-03 Gemalto Sentinel License Manager 7 CVEs
- USN-3553-1 ruby2.3 vulnerabilities 3 CVEs
- ICSA-18-032-02 3S-Smart Software Solutions GmbH CODESYS Web Server 1 CVEs