Week 46, 2018

12–18 November 2018

New CVEs: 344
Critical: 4
High: 29
Newly exploited: 0
Advisories: 46
Malicious pkgs: 0

Newly exploited 0

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

No newly exploited vulnerabilities were reported this week.

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.8
CVE-2018-16395 Ruby Openssl Allows Incorrect Value Comparison
EPSS 11%
Critical 9.0
CVE-2018-7359 All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by heap-based buffer overflow vulnerability, which may allow an attacker to execute arbit…
ZTE · ZXHN F670

EPSS 1.9%
Critical 9.8
CVE-2018-19281 Centreon allows SNMP trap SQL Injection
EPSS 1.8%
Critical 9.6
CVE-2018-7360 All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get…
ZTE · ZXHN F670

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Advisories