Week 31, 2018
30 July – 5 August 2018
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 9.1
CVE-2018-14847 MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due …EPSS 96%
-
Critical 9.8
CVE-2018-14933 upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command.EPSS 95%
- Critical 9.8 EPSS 5.4%
-
Critical 9.8
CVE-2018-9866 A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System (GMS) virtual appliance's, allow …EPSS 4.5%
- Critical 9.8 EPSS 2.8%
- Critical 9.1 EPSS 2.3%
- Critical 9.1 EPSS 2.2%
- Critical 9.8 EPSS 1.5%
-
Critical 9.4
CVE-2018-3881 An exploitable unauthenticated XML external injection vulnerability was identified in FocalScope v2416. A unauthenticated attacker could submit a specially cra…EPSS 1.2%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
Unscored
CVE-2018-14912 cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrated by a cgit/cgit.cg…EPSS 92%
-
Unscored
CVE-2018-14417 A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3. In particular, the snserv script did not sanitize …EPSS 89%
- Unscored EPSS 76%
- Medium 6.5 EPSS 58%
-
High 8.8
CVE-2018-3924 An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.5096. A specially crafted PDF docu…EPSS 44%
-
Unscored
CVE-2018-14767 In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentation fault and crash. T…EPSS 29%
- Medium 6.1 EPSS 25%
- High 7.5 EPSS 21%
Advisories
- SUSE / openSUSE Security Updates 21
- Debian Security (DSA / DLA) 152 critical
- Ubuntu Security Notices (USN) 5
- CISA ICS & IT advisories 52 critical
- Amazon Linux Security Center (ALAS) 21 critical
- Oracle Linux Security Advisories (ELSA) 2
- BSI CERT-Bund (WID) 1
- DSA-4259-1 ruby2.3 - security update 15 CVEs
- DSA-4262-1 symfony - security update 8 CVEs
- ALAS2-2018-1050 Critical: kernel security update (Amazon Linux 2) 4 CVEs
- ICSA-18-212-05 AVEVA Wonderware License Server 1 CVEs
- ICSA-18-212-01 Davolink DVW-3200N 1 CVEs