본문 바로가기
IT 와 Social 이야기

[US-CERT: Bulletin(SB18-323)] 2018년 11월 12일까지 발표된 보안 취약점

by manga0713 2018. 11. 20.

 

 

 

*** 출처: [US-CERT: Bulletin(SB18-323)] 2018년 11월 12일까지 발표된 보안 취약점

 

 

 

The vulnerabilities are based on the CVE vulnerability naming standard and are organized according to severity, determined by the Common Vulnerability Scoring System (CVSS) standard. The division of high, medium, and low severities correspond to the following scores:

  • High - Vulnerabilities will be labeled High severity if they have a CVSS base score of 7.0 - 10.0

  • Medium - Vulnerabilities will be labeled Medium severity if they have a CVSS base score of 4.0 - 6.9

  • Low - Vulnerabilities will be labeled Low severity if they have a CVSS base score of 0.0 - 3.9

Entries may include additional information provided by organizations and efforts sponsored by US-CERT. This information may include identifying information, values, definitions, and related links. Patch information is provided when available. Please note that some of the information in the bulletins is compiled from external, open source reports and is not a direct result of US-CERT analysis.

 The NCCIC Weekly Vulnerability Summary Bulletin is created using information from the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD). In some cases, the vulnerabilities in the Bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available.

High Vulnerabilities

Primary
Vendor -- Product
Description Published CVSS Score Source & Patch Info
There were no high vulnerabilities recorded this week.
Back to top

 

Medium Vulnerabilities

Primary
Vendor -- Product
Description Published CVSS Score Source & Patch Info
There were no medium vulnerabilities recorded this week.
Back to top

 

Low Vulnerabilities

Primary
Vendor -- Product
Description Published CVSS Score Source & Patch Info
There were no low vulnerabilities recorded this week.
Back to top

 

Severity Not Yet Assigned

Primary
Vendor -- Product
Description Published CVSS Score Source & Patch Info
amazon -- payfort The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in a success.php echo statement. 2018-11-14 not yet calculated CVE-2018-19187
BID
MISC
amazon -- payfort The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fort_id parameter. 2018-11-14 not yet calculated CVE-2018-19188
BID
MISC
MISC
amazon -- payfort The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in an error.php echo statement. 2018-11-14 not yet calculated CVE-2018-19189
BID
MISC
amazon -- payfort The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the error.php error_msg parameter. 2018-11-14 not yet calculated CVE-2018-19190
BID
MISC
amazon -- payfort
 
The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the route.php paymentMethod parameter. 2018-11-14 not yet calculated CVE-2018-19186
MISC
apache -- hadoop
 
Apache Hadoop 3.1.0, 3.0.0-alpha to 3.0.2, 2.9.0 to 2.9.1, 2.8.0 to 2.8.4, 2.0.0-alpha to 2.7.6, 0.23.0 to 0.23.11 is exploitable via the zip slip vulnerability in places that accept a zip file. 2018-11-13 not yet calculated CVE-2018-8009
BID
MISC
apache -- qpid_proton-j
 
The Apache Qpid Proton-J transport includes an optional wrapper layer to perform TLS, enabled by use of the 'transport.ssl(...)' methods. Unless a verification mode was explicitly configured, client and server modes previously defaulted as documented to not verifying a peer certificate, with options to configure this explicitly or select a certificate verification mode with or without hostname verification being performed. The latter hostname verifying mode was not implemented in Apache Qpid Proton-J versions 0.3 to 0.29.0, with attempts to use it resulting in an exception. This left only the option to verify the certificate is trusted, leaving such a client vulnerable to Man In The Middle (MITM) attack. Uses of the Proton-J protocol engine which do not utilise the optional transport TLS wrapper are not impacted, e.g. usage within Qpid JMS. Uses of Proton-J utilising the optional transport TLS wrapper layer that wish to enable hostname verification must be upgraded to version 0.30.0 or later and utilise the VerifyMode#VERIFY_PEER_NAME configuration, which is now the default for client mode usage unless configured otherwise. 2018-11-13 not yet calculated CVE-2018-17187
BID
MISC
MISC
MISC
baidu -- baidu_browser
 
Untrusted search path vulnerability in Baidu Browser Version 43.23.1000.500 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. 2018-11-15 not yet calculated CVE-2018-0692
JVN
bakeshop_inventory_system_web_application -- bakeshop_inventory_system_web_application Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb. 2018-11-16 not yet calculated CVE-2018-18804
MISC
EXPLOIT-DB
bluestacks -- bluestacks_app_player_for_windows_and_bluestacks_app_player_for_macos
 
BlueStacks App Player (BlueStacks App Player for Windows 3.0.0 to 4.31.55, BlueStacks App Player for macOS 2.0.0 and later) allows an attacker on the same network segment to bypass access restriction to gain unauthorized access. 2018-11-15 not yet calculated CVE-2018-0701
JVN
MISC
bsen_ordering_software_web_application -- bsen_ordering_software_web_application The BSEN Ordering software 1.0 has SQL Injection via student/index.php?view=view&id=[SQL] or index.php?q=single-item&id=[SQL]. 2018-11-16 not yet calculated CVE-2018-18801
MISC
EXPLOIT-DB
centreon -- centreon Centreon 3.4.x allows SNMP trap SQL Injection. 2018-11-14 not yet calculated CVE-2018-19281
MISC
centreon -- centreon Centreon 3.4.x has XSS via the resource name or macro expression of a poller macro. 2018-11-14 not yet calculated CVE-2018-19280
MISC
centreon -- centreon
 
Centreon 3.4.x allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI. 2018-11-16 not yet calculated CVE-2018-19312
MISC
centreon -- centreon
 
Centreon 3.4.x allows SQL Injection via the main.php searchH parameter. 2018-11-14 not yet calculated CVE-2018-19271
MISC
MISC
centreon -- centreon
 
Centreon 3.4.x allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring > Status Details > Services" screen. 2018-11-16 not yet calculated CVE-2018-19311
MISC
charles -- charles
 
An XML External Entity (XXE) vulnerability exists in the Charles 4.2.7 import/export setup option. If a user imports a "Charles Settings.xml" file from an attacker, an intranet network may be accessed and information may be leaked. 2018-11-13 not yet calculated CVE-2018-19244
MISC
cisco -- advanced_malware_protection_for_endpoints_on_windows
 
A vulnerability in the DLL loading component of Cisco Advanced Malware Protection (AMP) for Endpoints on Windows could allow an authenticated, local attacker to disable system scanning services or take other actions to prevent detection of unauthorized intrusions. To exploit this vulnerability, the attacker would need to have administrative credentials on the Windows system. The vulnerability is due to the improper validation of resources loaded by a system process at run time. An attacker could exploit this vulnerability by crafting a malicious DLL file and placing it in a specific location on the targeted system. A successful exploit could allow the attacker to disable the targeted system's scanning services and ultimately prevent the system from being protected from further intrusion. There are no workarounds that address this vulnerability. 2018-11-13 not yet calculated CVE-2018-15452
BID
CISCO
ckeditor -- ckeditor
 
CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a source-mode paste. 2018-11-14 not yet calculated CVE-2018-17960
MISC
MISC
clippercms -- clippercms
 
ClipperCMS 1.3.3 does not have CSRF protection on its kcfinder file upload (enabled by default). This can be used by an attacker to perform actions for an admin (or any user with the file upload capability). With this vulnerability, one can automatically upload files (by default, it allows html, pdf, xml, zip, and many other file types). A file can be accessed publicly under the "/assets/files" directory. 2018-11-10 not yet calculated CVE-2018-19135
MISC
EXPLOIT-DB

curriculum_evaluation_system_web_application -- curriculum_evaluation_system_web_application

Curriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse.vb and includes/user.vb. 2018-11-16 not yet calculated CVE-2018-18803
MISC
EXPLOIT-DB
cybozu -- garoon
 
Directory traversal vulnerability in Cybozu Garoon 3.5.0 to 4.6.3 allows authenticated attackers to read arbitrary files via unspecified vectors. 2018-11-15 not yet calculated CVE-2018-0673
JVN
MISC
dell_emc -- recoverpoint Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able to determine the existence of any system file via Boxmgmt CLI. 2018-11-13 not yet calculated CVE-2018-15771
BID
SECTRACK
FULLDISC
dell_emc -- recoverpoint
 
Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an uncontrolled resource consumption vulnerability. A malicious boxmgmt user may potentially be able to consume large amount of CPU bandwidth to make the system slow or to determine the existence of any system file via Boxmgmt CLI. 2018-11-13 not yet calculated CVE-2018-15772
BID
SECTRACK
FULLDISC
dell_emc -- rsa_bsafe_micro_edition_suite RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue. A malicious TLS server could potentially cause a Denial Of Service (DoS) on TLS clients during the handshake when a very large prime value is sent to the TLS client, and an Ephemeral or Anonymous Diffie-Hellman cipher suite (DHE or ADH) is used. 2018-11-16 not yet calculated CVE-2018-15769
BID
SECTRACK
FULLDISC
digium -- asterisk
 
Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x before 16.0.1 allows remote attackers to crash Asterisk via a specially crafted DNS SRV or NAPTR response, because a buffer size is supposed to match an expanded length but actually matches a compressed length. 2018-11-14 not yet calculated CVE-2018-19278
MISC
MISC
dilicms -- dilicms
 
An issue discovered in DiliCMS 2.4.0. There is a CSRF vulnerability that can delete a user or group via an admin/index.php/user/del/1 or admin/index.php/role/del/2 URI. 2018-11-15 not yet calculated CVE-2018-19291
MISC
domainmod -- domainmod
 
DomainMOD through 4.11.01 has XSS via the assets/edit/registrar-account.php raid parameter. 2018-11-09 not yet calculated CVE-2018-19136
MISC
EXPLOIT-DB
eclipse -- mosquitto
 
In Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is published to Mosquitto that has a topic starting with $, but that is not $SYS, e.g. $test/test, then an assert is triggered that should otherwise not be reachable and Mosquitto will exit. 2018-11-15 not yet calculated CVE-2018-12543
CONFIRM
ethereum -- go-ethereum cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode. 2018-11-11 not yet calculated CVE-2018-19184
MISC
ethereum -- py-evm Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers computation._stack.values with '"stack": [100, 100, 0]' where b'\x' was expected, resulting in an execution failure because of an invalid opcode. This is reportedly related to "smart contracts can be executed indefinitely without gas being paid." 2018-11-11 not yet calculated CVE-2018-18920
MISC
MISC
MISC
MISC
ethereumjs -- ethereumjs-vm
 
ethereumjs-vm 2.4.0 allows attackers to cause a denial of service (vm.runCode failure and REVERT) via a "code: Buffer.from(my_code, 'hex')" attribute. 2018-11-11 not yet calculated CVE-2018-19183
MISC
feitian_japan -- securecore_standard_edition
 
SecureCore Standard Edition Version 2.x allows an attacker to bypass the product 's authentication to log in to a Windows PC. 2018-11-15 not yet calculated CVE-2018-16160
JVN
foxit_software -- foxit_reader The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Data from Faulting Address controls Branch Selection starting at U3DBrowser!PlugInMain+0x00000000000d11bb" issue. 2018-11-17 not yet calculated CVE-2018-19347
MISC
MISC
foxit_software -- foxit_reader The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Data from Faulting Address controls Branch Selection starting at U3DBrowser!PlugInMain+0x000000000012dff5" issue. 2018-11-17 not yet calculated CVE-2018-19348
MISC
MISC
MISC
MISC
foxit_software -- foxit_reader The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Read Access Violation near NULL starting at FoxitReader!std::basic_ostream >::operator<<+0x0000000000087906" issue. 2018-11-17 not yet calculated CVE-2018-19341
MISC
MISC
foxit_software -- foxit_reader The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read), obtain sensitive information, or possibly have unspecified other impact via a U3D sample because of a "Data from Faulting Address controls Code Flow starting at U3DBrowser!PlugInMain+0x00000000000f43ff" issue. 2018-11-17 not yet calculated CVE-2018-19343
MISC
MISC
foxit_software -- foxit_reader The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Data from Faulting Address may be used as a return value starting at U3DBrowser!PlugInMain+0x0000000000031a75" issue. 2018-11-17 not yet calculated CVE-2018-19344
MISC
MISC
foxit_software -- foxit_reader The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Read Access Violation near NULL starting at U3DBrowser!PlugInMain+0x0000000000053f8b" issue. 2018-11-17 not yet calculated CVE-2018-19345
MISC
MISC
foxit_software -- foxit_reader The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Data from Faulting Address controls Branch Selection starting at U3DBrowser!PlugInMain+0x00000000000d11ea" issue. 2018-11-17 not yet calculated CVE-2018-19346
MISC
MISC
foxit_software -- foxit_reader
 
The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Read Access Violation starting at U3DBrowser+0x000000000000347a" issue. 2018-11-17 not yet calculated CVE-2018-19342
MISC
MISC
MISC
MISC
fxc -- multiple products
 
Cross-site scripting vulnerability in multiple FXC Inc. network devices (Managed Ethernet switch FXC5210/5218/5224 firmware prior to version Ver1.00.22, Managed Ethernet switch FXC5426F firmware prior to version Ver1.00.06, Managed Ethernet switch FXC5428 firmware prior to version Ver1.00.07, Power over Ethernet (PoE) switch FXC5210PE/5218PE/5224PE firmware prior to version Ver1.00.14, and Wireless LAN router AE1021/AE1021PE firmware all versions) allows attacker with administrator rights to inject arbitrary web script or HTML via the administrative page. 2018-11-15 not yet calculated CVE-2018-0679
JVN
MISC
google -- android In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-111450417 2018-11-14 not yet calculated CVE-2018-9540
BID
CONFIRM
google -- android In parseMPEGCCData of NuPlayer2CCDecoder.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-111874331 2018-11-14 not yet calculated CVE-2018-9521
BID
CONFIRM
google -- android In the ClearKey CAS descrambler, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-113027383 2018-11-14 not yet calculated CVE-2018-9539
BID
CONFIRM
google -- android In the serialization functions of StatsLogEventWrapper.java, there is a possible out-of-bounds write due to unnecessary functionality which may be abused. This could lead to local escalation of privilege in the system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112550251 2018-11-14 not yet calculated CVE-2018-9522
BID
CONFIRM
google -- android In ixheaacd_over_lap_add1_armv8 of ixheaacd_overlap_add1.s there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112551721 2018-11-14 not yet calculated CVE-2018-9528
CONFIRM
google -- android In vorbis_book_decodev_set of codebook.c there is a possible out of bounds write due to missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-112159345 2018-11-14 not yet calculated CVE-2018-9527
BID
CONFIRM
google -- android In onCheckedChanged of BluetoothPairingController.java, there is a possible way to retrieve contact information due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-72872376 2018-11-14 not yet calculated CVE-2018-9457
BID
CONFIRM
google -- android In BTA_HdRegisterApp of bta_hd_api.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-113111784 2018-11-14 not yet calculated CVE-2018-9545
BID
CONFIRM
google -- android In CAacDecoder_DecodeFrame of aacdecode.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution in the media server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112891564 2018-11-14 not yet calculated CVE-2018-9537
BID
CONFIRM
google -- android In avrc_pars_vendor_rsp of avcr_pars_ct.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-111450531 2018-11-14 not yet calculated CVE-2018-9541
BID
CONFIRM
google -- android In the AndroidManifest.xml file defining the SliceBroadcastReceiver handler for com.android.settings.slice.action.WIFI_CHANGED, there is a possible permissions bypass due to a confused deputy. This could lead to local escalation of privilege, allowing a local attacker to change device settings, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-111330641 2018-11-14 not yet calculated CVE-2018-9525
BID
CONFIRM
google -- android In ixheaacd_extract_frame_info_ld of ixheaacd_env_extr.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112765917 2018-11-14 not yet calculated CVE-2018-9532
CONFIRM
google -- android In function SMF_ParseMetaEvent of file eas_smf.c there is incorrect input validation causing an infinite loop. This could lead to a remote temporary DoS with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-68664359 2018-11-14 not yet calculated CVE-2018-9347
BID
CONFIRM
google -- android In numerous functions of libFDK, there are possible out of bounds writes due to incorrect bounds checks. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112662184 2018-11-14 not yet calculated CVE-2018-9536
BID
CONFIRM
google -- android In ixheaacd_dec_data_init of ixheaacd_create.c there is a possible out of write read due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112766520 2018-11-14 not yet calculated CVE-2018-9533
CONFIRM
google -- android In AudioSpecificConfig_Parse of tpdec_asc.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112661641 2018-11-14 not yet calculated CVE-2018-9531
BID
CONFIRM
google -- android In ixheaacd_mps_getstridemap of ixheaacd_mps_parse.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112857941 2018-11-14 not yet calculated CVE-2018-9534
CONFIRM
google -- android In functionality implemented in System UI, there are insufficient protections implemented around overlay windows. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1. Android ID: A-34170870 2018-11-14 not yet calculated CVE-2018-9524
BID
CONFIRM
google -- android A Elevation of privilege vulnerability in the HTC bootloader. Product: Android. Versions: Android kernel. Android ID: A-76222002. 2018-11-14 not yet calculated CVE-2018-9580
CONFIRM
google -- android In device configuration data, there is an improperly configured setting. This could lead to remote disclosure of device location. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112159033 2018-11-14 not yet calculated CVE-2018-9526
BID
CONFIRM
google -- android In Parcel.writeMapInternal of Parcel.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-112859604 2018-11-14 not yet calculated CVE-2018-9523
BID
CONFIRM
google -- android In ixheaacd_tns_ar_filter_dec of ixheaacd_aac_tns.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112609715 2018-11-14 not yet calculated CVE-2018-9530
CONFIRM
google -- android In register_app of btif_hd.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-113037220 2018-11-14 not yet calculated CVE-2018-9544
BID
CONFIRM
google -- android In avrc_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-111896861 2018-11-14 not yet calculated CVE-2018-9542
BID
CONFIRM
google -- android In ixheaacd_individual_ch_stream of ixheaacd_channel.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112551874 2018-11-14 not yet calculated CVE-2018-9529
CONFIRM
google -- android In ixheaacd_reset_acelp_data_fix of ixheaacd_lpc.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112858010 2018-11-14 not yet calculated CVE-2018-9535
CONFIRM
google -- android In f2fs_format_utils.c WITH_BLKDISCARD is not defined, which may cause the data partition to not be wiped at factory reset, leading to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112868088 2018-11-14 not yet calculated CVE-2018-9543
BID
CONFIRM

google -- chrome

Incorrect use of mojo::WrapSharedMemoryHandle in Mojo in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-6063
BID
REDHAT
CONFIRM
MISC
DEBIAN

google -- chrome

Incorrect IPC serialization in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-6067
BID
REDHAT
CONFIRM
MISC
DEBIAN

google -- chrome

Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-6065
BID
REDHAT
CONFIRM
MISC
DEBIAN
EXPLOIT-DB

google -- chrome

Type Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-6064
BID
REDHAT
CONFIRM
MISC
DEBIAN
EXPLOIT-DB

google -- chrome

Use after free in HTMLImportsController in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-17474
BID
REDHAT
CONFIRM
MISC
DEBIAN

google -- chrome

Lack of access control checks in Instrumentation in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to obtain memory metadata from privileged processes . 2018-11-14 not yet calculated CVE-2018-6080
BID
REDHAT
CONFIRM
MISC
DEBIAN

google -- chrome

Including port 22 in the list of allowed FTP ports in Networking in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially enumerate internal host services via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-6082
BID
REDHAT
CONFIRM
MISC
DEBIAN

google -- chrome

A race in the handling of SharedArrayBuffers in WebAssembly in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-6061
BID
REDHAT
CONFIRM
MISC
DEBIAN

google -- chrome

Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-17475
BID
REDHAT
CONFIRM
MISC
DEBIAN

google -- chrome

Lack of special casing of Android ashmem in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to bypass inter-process read only guarantees via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-6057
BID
REDHAT
CONFIRM
MISC
DEBIAN

google -- chrome

Incorrect handling of timer information during navigation in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obtain cross origin URLs via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-17468
BID
REDHAT
CONFIRM
MISC
DEBIAN

google -- chrome

Lack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-6066
BID
REDHAT
CONFIRM
MISC
DEBIAN

google -- chrome

Incorrect refcounting in AppCache in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform a sandbox escape via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-17462
BID
REDHAT
CONFIRM
MISC
DEBIAN

google -- chrome

Insufficiently quick clearing of stale rendered content in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-17467
BID
REDHAT
CONFIRM
MISC
DEBIAN

google -- chrome

Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-17466
BID
REDHAT
CONFIRM
MISC
DEBIAN

google -- chrome

Incorrect implementation of object trimming in V8 in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-17465
BID
REDHAT
CONFIRM
MISC
DEBIAN

google -- chrome

Heap overflow write in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-6062
BID
REDHAT
CONFIRM
MISC
DEBIAN

google -- chrome

Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name. 2018-11-14 not yet calculated CVE-2018-17473
BID
REDHAT
CONFIRM
MISC
DEBIAN

google -- chrome

Incorrect dialog placement in Extensions in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of extension popups via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-17477
BID
REDHAT
CONFIRM
MISC
DEBIAN

google -- chrome

Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-17464
BID
REDHAT
CONFIRM
MISC
DEBIAN

google -- chrome

Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-17463
BID
REDHAT
CONFIRM
MISC
DEBIAN
google -- chrome An integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. 2018-11-14 not yet calculated CVE-2018-6072
BID
REDHAT
CONFIRM
MISC
DEBIAN

google -- chrome

Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-17476
BID
REDHAT
CONFIRM
MISC
DEBIAN

google -- chrome

Failure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to access privileged APIs via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-6083
BID
REDHAT
CONFIRM
MISC
DEBIAN

google -- chrome

Use after free in WebAudio in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-6060
BID
REDHAT
CONFIRM
MISC
DEBIAN
google -- chrome
 
Incorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to escape the <iframe> sandbox via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-17472
BID
CONFIRM
MISC
google -- chrome
 
Incorrect handling of PDF filter chains in PDFium in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. 2018-11-14 not yet calculated CVE-2018-17469
BID
REDHAT
CONFIRM
MISC
DEBIAN
google -- chrome
 
Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-17471
BID
REDHAT
CONFIRM
MISC
DEBIAN
google -- chrome    Insufficient encoding of URL fragment identifiers in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform a DOM based XSS attack via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-6076
BID
REDHAT
CONFIRM
MISC
DEBIAN
google -- chrome    Object lifecycle issue in Chrome Custom Tab in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-6068
BID
CONFIRM
MISC
DEBIAN
google -- chrome    XSS vulnerabilities in Interstitials in Google Chrome prior to 65.0.3325.146 allowed an attacker who convinced a user to install a malicious extension or open Developer Console to inject arbitrary scripts or HTML via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-6081
BID
REDHAT
CONFIRM
MISC
DEBIAN
google -- chrome    Inappropriate sharing of TEXTURE_2D_ARRAY/TEXTURE_3D data between tabs in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-6079
BID
REDHAT
CONFIRM
MISC
DEBIAN
google -- chrome    Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name. 2018-11-14 not yet calculated CVE-2018-6078
BID
REDHAT
CONFIRM
MISC
DEBIAN
google -- chrome    Displacement map filters being applied to cross-origin images in Blink SVG rendering in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-6077
BID
REDHAT
CONFIRM
MISC
DEBIAN
google -- chrome    Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-6074
BID
REDHAT
CONFIRM
MISC
DEBIAN
google -- chrome    A heap buffer overflow in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-6073
BID
REDHAT
CONFIRM
MISC
DEBIAN
google -- chrome    Stack buffer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-6069
BID
REDHAT
CONFIRM
MISC
DEBIAN
google -- chrome    Lack of CSP enforcement on WebUI pages in Bink in Google Chrome prior to 65.0.3325.146 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension. 2018-11-14 not yet calculated CVE-2018-6070
BID
REDHAT
CONFIRM
MISC
DEBIAN
google -- chrome    An integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. 2018-11-14 not yet calculated CVE-2018-6071
BID
REDHAT
CONFIRM
MISC
DEBIAN
google -- chrome    Incorrect handling of specified filenames in file downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page and user interaction. 2018-11-14 not yet calculated CVE-2018-6075
BID
REDHAT
CONFIRM
MISC
DEBIAN
google -- gvisor
 
pkg/sentry/kernel/shm/shm.go in Google gVisor before 2018-11-01 allows attackers to overwrite memory locations in processes running as root (but not escape the sandbox) via vectors involving IPC_RMID shmctl calls, because reference counting is mishandled. 2018-11-17 not yet calculated CVE-2018-19333
MISC
MISC
greencms -- greencms
 
GreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files by modifying a base64-encoded pathname in an m=admin&c=media&a=delfilehandle&id= call, related to the m=admin&c=media&a=restorefile delete button. 2018-11-17 not yet calculated CVE-2018-19329
MISC
guriddo -- guriddo_form_php
 
Guriddo Form PHP 5.3 has XSS via the demos/jqform/defaultnodb/default.php OrderID, ShipName, ShipAddress, ShipCity, ShipPostalCode, ShipCountry, Freight, or details parameter. 2018-11-17 not yet calculated CVE-2018-19340
MISC
harfbuzz -- harfbuzz
 
HarfBuzz before 1.0.4 allows remote attackers to cause a denial of service (invalid read of two bytes and application crash) because of GPOS and GSUB table mishandling, related to hb-ot-layout-gpos-table.hh, hb-ot-layout-gsub-table.hh, and hb-ot-layout-gsubgpos-private.hh. 2018-11-15 not yet calculated CVE-2015-9274
MISC
hiroshi_yuki -- yukiwiki
 
Cross-site scripting vulnerability in YukiWiki 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. 2018-11-15 not yet calculated CVE-2018-0699
JVN
MISC
hiroshi_yuki -- yukiwiki
 
YukiWiki 2.1.3 and earlier does not process a particular request properly that may allow consumption of large amounts of CPU and memory resources and may result in causing a denial of service condition. 2018-11-15 not yet calculated CVE-2018-0700
JVN
MISC
huawei -- emily-al00a_smartphones The radio module of some Huawei smartphones Emily-AL00A The versions before 8.1.0.171(C00) have a lock-screen bypass vulnerability. An unauthenticated attacker could start third-part input method APP through certain operations to bypass lock-screen by exploit this vulnerability. 2018-11-13 not yet calculated CVE-2018-7925
CONFIRM
huawei -- multiple_smartphones
 
Some Huawei smartphones ALP-AL00B 8.0.0.118D(C00), ALP-TL00B 8.0.0.118D(C01), BLA-AL00B 8.0.0.118D(C00), BLA-L09C 8.0.0.127(C432), 8.0.0.128(C432), 8.0.0.137(C432), BLA-L29C 8.0.0.129(C432), 8.0.0.137(C432) have an authentication bypass vulnerability. When the attacker obtains the user's smartphone, the vulnerability can be used to replace the start-up program so that the attacker can obtain the information in the smartphone and achieve the purpose of controlling the smartphone. 2018-11-13 not yet calculated CVE-2018-7910
CONFIRM
huawei -- watch_2 Huawei Watch 2 with versions and earlier than OWDD.180707.001.E1 have an improper authorization vulnerability. Due to improper permission configuration for specific operations, an attacker who obtained the Huawei ID bound to the watch can bypass permission verification to perform specific operations and modify some data on the watch. 2018-11-13 not yet calculated CVE-2018-7926
CONFIRM
ibm -- case_manager
 
IBM Case Manager 5.2.0.0, 5.2.0.4, 5.2.1.0, 5.2.1.7, 5.3.0.0, and 5.3.3.0 is vulnerable to a "zip slip" vulnerability which could allow a remote attacker to execute code using directory traversal techniques. IBM X-Force ID: 151970. 2018-11-12 not yet calculated CVE-2018-1884
CONFIRM
XF
ibm -- jazz_reporting_service
 
The Report Builder of Jazz Reporting Service 5.0 through 5.0.2 and 6.0 through 6.0.6 could allow an authenticated user to obtain sensitive information beyond its assigned privileges. IBM X-Force ID: 144579. 2018-11-16 not yet calculated CVE-2018-1639
XF
CONFIRM
ibm -- spectrum_protect
 
IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state. This can cause TCP/IP resource leakage and may result in a denial of service. IBM X-Force ID: 148871. 2018-11-12 not yet calculated CVE-2018-1786
CONFIRM
BID
XF
ibm -- websphere_application_server
 
The Installation Verification Tool of IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 144588 2018-11-15 not yet calculated CVE-2018-1643
SECTRACK
XF
CONFIRM
ibm -- websphere_application_server
 
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 149428. 2018-11-12 not yet calculated CVE-2018-1798
CONFIRM
BID
SECTRACK
XF
ibm -- websphere_application_server
 
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using Enterprise bundle Archives (EBA) could allow a local attacker to traverse directories on the system. By persuading a victim to extract a specially-crafted ZIP archive containing "dot dot slash" sequences (../), an attacker could exploit this vulnerability to write to arbitrary files on the system. Note: This vulnerability is known as "Zip-Slip". IBM X-Force ID: 149427. 2018-11-16 not yet calculated CVE-2018-1797
SECTRACK
XF
CONFIRM
ibm -- websphere_commerce
 
IBM WebSphere Commerce 9.0.0.0 through 9.0.0.6 could allow some server-side code injection due to inadequate input control. IBM X-Force ID: 149828. 2018-11-13 not yet calculated CVE-2018-1808
SECTRACK
XF
CONFIRM
ibm -- websphere_mq
 
IBM WebSphere MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, 9.0.1 through 9.0.5, and 9.1.0.0 could allow a local user to inject code that could be executed with root privileges. IBM X-Force ID: 148947. 2018-11-13 not yet calculated CVE-2018-1792
BID
XF
CONFIRM
inova_software -- inova_partner Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated users authorization bypass via insecure direct object reference. 2018-11-16 not yet calculated CVE-2018-15693
MISC
inova_software -- inova_partner
 
Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated users authorization bypass and data manipulation in certain functions. 2018-11-16 not yet calculated CVE-2018-15692
MISC
intel -- driver_&_support_assistant
 
Insufficient input validation in the Intel Driver & Support Assistant before 3.6.0.4 may allow an unauthenticated user to potentially enable information disclosure via adjacent access. 2018-11-14 not yet calculated CVE-2018-3621
CONFIRM
intel -- media_server_studio
 
Improper directory permissions in the installer for the Intel Media Server Studio may allow unprivileged users to potentially enable an escalation of privilege via local access. 2018-11-14 not yet calculated CVE-2018-3697
CONFIRM
intel -- parallel_studio_xe_2018
 
Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to potentially escalate privileges via local access. 2018-11-14 not yet calculated CVE-2018-12174
CONFIRM
intel -- raid_web_console_for_windows Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potentially gain administrative privileges via local access. 2018-11-14 not yet calculated CVE-2018-3696
CONFIRM
intel -- raid_web_console_for_windows Cross-site scripting in the Intel RAID Web Console v3 for Windows may allow an unauthenticated user to elevate privilege via remote access. 2018-11-14 not yet calculated CVE-2018-3699
CONFIRM
intel -- rapid_store_technology
 
Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access. 2018-11-14 not yet calculated CVE-2018-3635
CONFIRM
intel -- ready_mode_technology
 
Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potentially gain privileged access via local access. 2018-11-14 not yet calculated CVE-2018-3698
CONFIRM
jeesns -- jeesns In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulnerability than CVE-2018-17886. 2018-11-11 not yet calculated CVE-2018-19178
MISC
jpressprojects -- jpress In JPress v1.0-rc.5, there is stored XSS via each of the first three input fields to the starter-tomcat-1.0/admin/setting URI, as demonstrated by the web_name parameter. 2018-11-11 not yet calculated CVE-2018-19170
MISC
jtbc(php) -- jtbc(php)
 
An issue was discovered in JTBC(PHP) 3.0.1.7. aboutus/manage.php?type=action&action=add allows CSRF. 2018-11-17 not yet calculated CVE-2018-19327
MISC
krisoft -- k-iwi_framework_1775
 
K-iwi Framework 1775 has SQL Injection via the admin/user/group/update user_group_id parameter or the admin/user/user/update user_id parameter. 2018-11-16 not yet calculated CVE-2018-18755
MISC
EXPLOIT-DB
laobancms -- laobancms An issue was discovered in LAOBANCMS 2.0. It allows XSS via the admin/art.php?typeid=1 biaoti parameter. 2018-11-12 not yet calculated CVE-2018-19229
MISC
laobancms -- laobancms An issue was discovered in LAOBANCMS 2.0. /admin/login.php allows spoofing of the id and guanliyuan cookies. 2018-11-12 not yet calculated CVE-2018-19224
MISC
laobancms -- laobancms An issue was discovered in LAOBANCMS 2.0. admin/mima.php has CSRF. 2018-11-12 not yet calculated CVE-2018-19225
MISC
laobancms -- laobancms An issue was discovered in LAOBANCMS 2.0. It allows XSS via the first input field to the admin/type.php?id=1 URI. 2018-11-12 not yet calculated CVE-2018-19223
MISC
laobancms -- laobancms An issue was discovered in LAOBANCMS 2.0. It allows arbitrary file deletion via ../ directory traversal in the admin/pic.php del parameter, as demonstrated by deleting install/install.txt to permit a reinstallation. 2018-11-12 not yet calculated CVE-2018-19228
MISC
laobancms -- laobancms An issue was discovered in LAOBANCMS 2.0. It allows SQL Injection via the admin/login.php guanliyuan parameter. 2018-11-12 not yet calculated CVE-2018-19221
MISC
laobancms -- laobancms An issue was discovered in LAOBANCMS 2.0. It allows a /install/mysql_hy.php?riqi=0&i=0 attack to reset the admin password, even if install.txt exists. 2018-11-12 not yet calculated CVE-2018-19222
MISC
laobancms -- laobancms An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to list .txt files via a direct request for the /data/0/admin.txt URI. 2018-11-12 not yet calculated CVE-2018-19226
MISC
laobancms -- laobancms
 
An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to execute arbitrary PHP code via the host parameter to the install/ URI. 2018-11-12 not yet calculated CVE-2018-19220
MISC
laobancms -- laobancms
 
LAOBANCMS 2.0 allows install/mysql_hy.php?riqi=../ Directory Traversal. 2018-11-17 not yet calculated CVE-2018-19328
MISC
laobancms -- laobancms
 
An issue was discovered in LAOBANCMS 2.0. It allows XSS via the admin/liuyan.php neirong[] parameter. 2018-11-12 not yet calculated CVE-2018-19227
MISC
laolisafe -- kimsq kimsQ Rb 2.3.0 allows XSS via the second input field to the /?r=home&mod=mypage&page=info URI. 2018-11-17 not yet calculated CVE-2018-19324
MISC
lenovo -- chassis_management_module Lenovo Chassis Management Module (CMM) prior to version 2.0.0 utilizes a hardcoded encryption key to protect certain secrets. Possession of the key can allow an attacker that has already compromised the server to decrypt these secrets. 2018-11-16 not yet calculated CVE-2018-9073
CONFIRM
lenovo -- chassis_management_module Lenovo Chassis Management Module (CMM) prior to version 2.0.0 allows unauthenticated users to retrieve information related to the current authentication configuration settings. Exposed settings relate to password lengths, expiration, and lockout configuration. 2018-11-16 not yet calculated CVE-2018-9071
CONFIRM
lenovo -- lenovo_and_ibm_system_x_servers A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potentially allowing an attacker with administrator access to modify the subset of flash memory containing Intel Server Platform Services (SPS) and the system Flash Descriptors. 2018-11-16 not yet calculated CVE-2018-9085
CONFIRM
lenovo -- thinkserver-branded_servers In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC firmware download command. This allows a privileged user to download and execute arbitrary code inside the BMC. This can only be exploited by authorized privileged users. 2018-11-16 not yet calculated CVE-2018-9086
CONFIRM
library_management_system_web_application -- library_management_system_web_application Library Management System 1.0 has SQL Injection via the "Search for Books" screen. 2018-11-16 not yet calculated CVE-2018-18796
MISC
libsass -- libsass In LibSass 3.5-stable, there is an illegal address access at Sass::Eval::operator that will lead to a DoS attack. 2018-11-12 not yet calculated CVE-2018-19219
MISC
libsass -- libsass
 
In LibSass 3.5-stable, there is an illegal address access at Sass::Parser::parse_css_variable_value_token that will lead to a DoS attack. 2018-11-12 not yet calculated CVE-2018-19218
MISC
libtiff -- libtiff
 
In LibTIFF 4.0.9, there is a NULL pointer dereference in the TIFFWriteDirectorySec function in tif_dirwrite.c that will lead to a denial of service attack, as demonstrated by tiffset. 2018-11-12 not yet calculated CVE-2018-19210
MISC
BID
libwebm -- libwebm
 
In libwebm through 2018-10-03, there is an abort caused by libwebm::Webm2Pes::InitWebmParser() that will lead to a DoS attack. 2018-11-12 not yet calculated CVE-2018-19212
MISC
libwpd -- libwpd
 
In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will lead to a denial of service attack. This is related to WPXTable.h. 2018-11-12 not yet calculated CVE-2018-19208
MISC
life_sciences_computing_corporation -- opendolphin OpenDolphin 2.7.0 and earlier allows authenticated attackers to obtain other users credentials such as a user ID and/or its password via unspecified vectors. 2018-11-15 not yet calculated CVE-2018-16162
JVN
MISC
life_sciences_computing_corporation -- opendolphin OpenDolphin 2.7.0 and earlier allows authenticated attackers to bypass authentication to create and/or delete other users accounts via unspecified vectors. 2018-11-15 not yet calculated CVE-2018-16163
JVN
MISC
life_sciences_computing_corporation -- opendolphin
 
OpenDolphin 2.7.0 and earlier allows authenticated users to gain administrative privileges and perform unintended operations. 2018-11-15 not yet calculated CVE-2018-16161
JVN
MISC
linux -- linux_kernel In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalation because it mishandles nested user namespaces with more than 5 UID or GID ranges. A user who has CAP_SYS_ADMIN in an affected user namespace can bypass access controls on resources outside the namespace, as demonstrated by reading /etc/shadow. This occurs because an ID transformation takes place properly for the namespaced-to-kernel direction but not for the kernel-to-namespaced direction. 2018-11-16 not yet calculated CVE-2018-18955
MISC
BID
MISC
MISC
MISC
MISC
EXPLOIT-DB
local_server_web_application -- local_server_web_application
 
Local Server 1.0.9 has a Buffer Overflow via crafted data on Port 4008. 2018-11-16 not yet calculated CVE-2018-18756
MISC
losant -- arduino_mqtt_client
 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Losant Arduino MQTT Client prior to V2.7. User interaction is not required to exploit this vulnerability. The specific flaw exists within the parsing of MQTT PUBLISH packets. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6436. 2018-11-13 not yet calculated CVE-2018-17614
MISC
MISC
metabase -- metabase
 
Cross-site scripting vulnerability in Metabase version 0.29.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. 2018-11-15 not yet calculated CVE-2018-0697
JVN
MISC
micro_focus -- service_manager
 
A potential unauthorized disclosure of data vulnerability has been identified in Micro Focus Service Manager versions: 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51. The vulnerability could be exploited to release unauthorized disclosure of data. 2018-11-13 not yet calculated CVE-2018-18591
CONFIRM
microsoft -- .net_core A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1. 2018-11-13 not yet calculated CVE-2018-8416
BID
SECTRACK
CONFIRM
microsoft -- azure_app_service_on_azure_stack A Cross-site Scripting (XSS) vulnerability exists when Azure App Services on Azure Stack does not properly sanitize user provided input, aka "Azure App Service Cross-site Scripting Vulnerability." This affects Azure App. 2018-11-13 not yet calculated CVE-2018-8600
BID
CONFIRM
microsoft -- chakracore_and_edge A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542, CVE-2018-8543, CVE-2018-8551, CVE-2018-8555, CVE-2018-8557, CVE-2018-8588. 2018-11-13 not yet calculated CVE-2018-8556
BID
SECTRACK
CONFIRM
microsoft -- chakracore_and_edge A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8542, CVE-2018-8543, CVE-2018-8551, CVE-2018-8555, CVE-2018-8556, CVE-2018-8557, CVE-2018-8588. 2018-11-13 not yet calculated CVE-2018-8541
BID
SECTRACK
CONFIRM
microsoft -- chakracore_and_edge A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542, CVE-2018-8551, CVE-2018-8555, CVE-2018-8556, CVE-2018-8557, CVE-2018-8588. 2018-11-13 not yet calculated CVE-2018-8543
BID
SECTRACK
CONFIRM
microsoft -- chakracore_and_edge A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8543, CVE-2018-8551, CVE-2018-8555, CVE-2018-8556, CVE-2018-8557, CVE-2018-8588. 2018-11-13 not yet calculated CVE-2018-8542
BID
SECTRACK
CONFIRM
microsoft -- chakracore_and_edge A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542, CVE-2018-8543, CVE-2018-8551, CVE-2018-8555, CVE-2018-8556, CVE-2018-8588. 2018-11-13 not yet calculated CVE-2018-8557
BID
SECTRACK
CONFIRM
microsoft -- chakracore_and_edge A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542, CVE-2018-8543, CVE-2018-8555, CVE-2018-8556, CVE-2018-8557, CVE-2018-8588. 2018-11-13 not yet calculated CVE-2018-8551
BID
SECTRACK
CONFIRM
microsoft -- chakracore_and_edge A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542, CVE-2018-8543, CVE-2018-8551, CVE-2018-8555, CVE-2018-8556, CVE-2018-8557. 2018-11-13 not yet calculated CVE-2018-8588
BID
SECTRACK
CONFIRM
microsoft -- chakracore_and_edge A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542, CVE-2018-8543, CVE-2018-8551, CVE-2018-8556, CVE-2018-8557, CVE-2018-8588. 2018-11-13 not yet calculated CVE-2018-8555
BID
SECTRACK
CONFIRM
microsoft -- dynamics_365 A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) version 8 when the server fails to properly sanitize web requests to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Remote Code Execution Vulnerability." This affects Microsoft Dynamics 365. 2018-11-13 not yet calculated CVE-2018-8609
BID
CONFIRM
microsoft -- dynamics_365 A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft Dynamics 365. This CVE ID is unique from CVE-2018-8605, CVE-2018-8607, CVE-2018-8608. 2018-11-13 not yet calculated CVE-2018-8606
BID
CONFIRM
microsoft -- dynamics_365 A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft Dynamics 365. This CVE ID is unique from CVE-2018-8606, CVE-2018-8607, CVE-2018-8608. 2018-11-13 not yet calculated CVE-2018-8605
BID
CONFIRM
microsoft -- dynamics_365 A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft Dynamics 365. This CVE ID is unique from CVE-2018-8605, CVE-2018-8606, CVE-2018-8608. 2018-11-13 not yet calculated CVE-2018-8607
BID
CONFIRM
microsoft -- dynamics_365 A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft Dynamics 365. This CVE ID is unique from CVE-2018-8605, CVE-2018-8606, CVE-2018-8607. 2018-11-13 not yet calculated CVE-2018-8608
BID
CONFIRM
microsoft -- edge An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. 2018-11-13 not yet calculated CVE-2018-8545
BID
SECTRACK
CONFIRM
microsoft -- edge An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Microsoft Edge Elevation of Privilege Vulnerability." This affects Microsoft Edge. 2018-11-13 not yet calculated CVE-2018-8567
BID
SECTRACK
CONFIRM
microsoft -- edge A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge. 2018-11-13 not yet calculated CVE-2018-8564
BID
CONFIRM
microsoft -- exchange_server An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server. 2018-11-13 not yet calculated CVE-2018-8581
BID
SECTRACK
CONFIRM
microsoft -- internet_explorer A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11. 2018-11-13 not yet calculated CVE-2018-8570
BID
SECTRACK
CONFIRM
microsoft -- internet_explorer An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Windows Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. 2018-11-13 not yet calculated CVE-2018-8552
BID
CONFIRM
microsoft -- multiple_products A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft PowerShell Tampering Vulnerability." This affects Windows 7, PowerShell Core 6.1, Windows Server 2012 R2, Windows RT 8.1, PowerShell Core 6.0, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. 2018-11-13 not yet calculated CVE-2018-8415
BID
SECTRACK
CONFIRM
microsoft -- multiple_products A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Lync, Skype. 2018-11-13 not yet calculated CVE-2018-8546
BID
SECTRACK
CONFIRM
microsoft -- multiple_products A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8577. 2018-11-13 not yet calculated CVE-2018-8574
BID
SECTRACK
CONFIRM
microsoft -- multiple_products A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka "Microsoft Project Remote Code Execution Vulnerability." This affects Microsoft Project, Office 365 ProPlus, Microsoft Project Server. 2018-11-13 not yet calculated CVE-2018-8575
BID
SECTRACK
CONFIRM
microsoft -- multiple_products A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This CVE ID is unique from CVE-2018-8574. 2018-11-13 not yet calculated CVE-2018-8577
BID
SECTRACK
CONFIRM
microsoft -- multiple_products An elevation of privilege vulnerability exists in the way that the Microsoft RemoteFX Virtual GPU miniport driver handles objects in memory, aka "Microsoft RemoteFX Virtual GPU miniport driver Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 8.1, Windows 7, Windows Server 2019. 2018-11-13 not yet calculated CVE-2018-8471
BID
SECTRACK
CONFIRM
microsoft -- multiple_products A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8522, CVE-2018-8524, CVE-2018-8576. 2018-11-13 not yet calculated CVE-2018-8582
BID
SECTRACK
CONFIRM
microsoft -- multiple_products A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8539. 2018-11-13 not yet calculated CVE-2018-8573
BID
SECTRACK
CONFIRM
microsoft -- multiple_products A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Code Execution Vulnerability." This affects Windows RT 8.1, PowerShell Core 6.0, Microsoft.PowerShell.Archive 1.2.2.0, Windows Server 2016, Windows Server 2012, Windows Server 2008 R2, Windows Server 2019, Windows 7, Windows Server 2012 R2, PowerShell Core 6.1, Windows 10 Servers, Windows 10, Windows 8.1. 2018-11-13 not yet calculated CVE-2018-8256
BID
SECTRACK
CONFIRM
microsoft -- office An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8558. 2018-11-13 not yet calculated CVE-2018-8579
BID
SECTRACK
CONFIRM
microsoft -- office An information disclosure vulnerability exists when Microsoft Outlook fails to respect "Default link type" settings configured via the SharePoint Online Admin Center, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8579. 2018-11-13 not yet calculated CVE-2018-8558
BID
CONFIRM
microsoft -- office_and_outlook A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8522, CVE-2018-8524, CVE-2018-8582. 2018-11-13 not yet calculated CVE-2018-8576
BID
SECTRACK
CONFIRM
microsoft -- office_and_outlook A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8524, CVE-2018-8576, CVE-2018-8582. 2018-11-13 not yet calculated CVE-2018-8522
BID
SECTRACK
CONFIRM
microsoft -- office_and_outlook A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8522, CVE-2018-8576, CVE-2018-8582. 2018-11-13 not yet calculated CVE-2018-8524
BID
SECTRACK
CONFIRM
microsoft -- office_and_sharepoint_server A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft SharePoint Server, Microsoft Office. This CVE ID is unique from CVE-2018-8573. 2018-11-13 not yet calculated CVE-2018-8539
BID
SECTRACK
CONFIRM
microsoft -- sharepoint An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages, aka "Microsoft SharePoint Information Disclosure Vulnerability." This affects Microsoft SharePoint. 2018-11-13 not yet calculated CVE-2018-8578
BID
SECTRACK
CONFIRM
microsoft -- sharepoint_and_sharepoint_server An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8572. 2018-11-13 not yet calculated CVE-2018-8568
BID
SECTRACK
CONFIRM
microsoft -- sharepoint_and_sharepoint_server An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8568. 2018-11-13 not yet calculated CVE-2018-8572
BID
CONFIRM
microsoft -- team_foundation_server A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Server Cross-site Scripting Vulnerability." This affects Team. 2018-11-13 not yet calculated CVE-2018-8602
BID
CONFIRM
microsoft -- team_foundation_server
 
A remote code execution vulnerability exists when Team Foundation Server (TFS) does not enable basic authorization on the communication between the TFS and Search services, aka "Team Foundation Server Remote Code Execution Vulnerability." This affects Team. 2018-11-15 not yet calculated CVE-2018-8529
BID
CONFIRM
microsoft -- windows_and_windows_server An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka "Win32k Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. 2018-11-13 not yet calculated CVE-2018-8565
BID
CONFIRM
microsoft -- windows_and_windows_server An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. 2018-11-13 not yet calculated CVE-2018-8408
BID
SECTRACK
CONFIRM
microsoft -- windows_and_windows_server A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD FS) does not properly sanitize a specially crafted web request to an affected AD FS server, aka "Active Directory Federation Services XSS Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. 2018-11-13 not yet calculated CVE-2018-8547
BID
CONFIRM
microsoft -- windows_and_windows_server A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. 2018-11-13 not yet calculated CVE-2018-8549
BID
SECTRACK
CONFIRM
microsoft -- windows_and_windows_server An elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. 2018-11-13 not yet calculated CVE-2018-8550
BID
SECTRACK
CONFIRM
microsoft -- windows_and_windows_server A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. 2018-11-13 not yet calculated CVE-2018-8544
BID
SECTRACK
CONFIRM
microsoft -- windows_and_windows_server A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10. 2018-11-13 not yet calculated CVE-2018-8553
BID
SECTRACK
CONFIRM
microsoft -- windows_and_windows_server An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, aka "MSRPC Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. 2018-11-13 not yet calculated CVE-2018-8407
BID
SECTRACK
CONFIRM
microsoft -- windows_and_windows_server A security feature bypass vulnerability exists when Windows improperly suspends BitLocker Device Encryption, aka "BitLocker Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. 2018-11-13 not yet calculated CVE-2018-8566
BID
CONFIRM
microsoft -- windows_and_windows_server A security feature bypass vulnerability exists in Microsoft JScript that could allow an attacker to bypass Device Guard, aka "Microsoft JScript Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. 2018-11-13 not yet calculated CVE-2018-8417
BID
SECTRACK
CONFIRM
microsoft -- windows_and_windows_server An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8485, CVE-2018-8554. 2018-11-13 not yet calculated CVE-2018-8561
BID
SECTRACK
CONFIRM
microsoft -- windows_and_windows_server A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. 2018-11-13 not yet calculated CVE-2018-8450
BID
SECTRACK
CONFIRM
microsoft -- windows_and_windows_server An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. 2018-11-13 not yet calculated CVE-2018-8584
BID
SECTRACK
CONFIRM
microsoft -- windows_and_windows_server An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. 2018-11-13 not yet calculated CVE-2018-8589
BID
SECTRACK
CONFIRM
microsoft -- windows_and_windows_server An elevation of privilege vulnerability exists in Windows 10 version 1809 when installed from physical media (USB, DVD, etc, aka "Windows Elevation Of Privilege Vulnerability." This affects Windows 10, Windows Server 2019. 2018-11-13 not yet calculated CVE-2018-8592
BID
SECTRACK
CONFIRM
microsoft -- windows_and_windows_server An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8554, CVE-2018-8561. 2018-11-13 not yet calculated CVE-2018-8485
BID
SECTRACK
CONFIRM
microsoft -- windows_and_windows_server An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019. This CVE ID is unique from CVE-2018-8485, CVE-2018-8561. 2018-11-13 not yet calculated CVE-2018-8554
BID
SECTRACK
CONFIRM
microsoft -- windows_and_windows_server An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2008 R2. 2018-11-13 not yet calculated CVE-2018-8563
BID
SECTRACK
CONFIRM
microsoft -- windows_and_windows_server An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. 2018-11-13 not yet calculated CVE-2018-8562
BID
CONFIRM
microsoft -- windows_and_windows_server An information disclosure vulnerability exists when Windows Audio Service fails to properly handle objects in memory, aka "Windows Audio Service Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019. 2018-11-13 not yet calculated CVE-2018-8454
BID
SECTRACK
CONFIRM
microsoft -- windows_server A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "Windows Deployment Services TFTP Server Remote Code Execution Vulnerability." This affects Windows Server 2012 R2, Windows Server 2008, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows Server 2008 R2, Windows 10 Servers. 2018-11-13 not yet calculated CVE-2018-8476
BID
SECTRACK
CONFIRM
mubu_note -- mubu_note
 
The server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value (along with an arbitrary username value), and then creating and sharing a note. 2018-11-15 not yet calculated CVE-2018-19286
MISC
multiple_vendors -- message_app_for_android_and_message_app_for_ios
 
Multiple +Message Apps (Softbank +Message App for Android prior to version 10.1.7, Softbank +Message App for iOS prior to version 1.1.23, NTT DOCOMO +Message App for Android prior to version 42.40.2800, NTT DOCOMO +Message App for iOS prior to version 1.1.23, KDDI +Message App for Android prior to version 1.0.6, and KDDI +Message App for iOS prior to version 1.1.23) do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. 2018-11-15 not yet calculated CVE-2018-0691
JVN
MISC
MISC
MISC
mz-automation -- libIEC61850
 
An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoder_encodeOctetString in mms/asn1/ber_encoder.c. This is exploitable even after CVE-2018-18834 has been patched, with a different dataSetValue sequence than the CVE-2018-18834 attack vector. 2018-11-12 not yet calculated CVE-2018-19185
MISC
MISC
ncurses -- ncurses
 
In ncurses 6.1, there is a NULL pointer dereference at the function _nc_name_match that will lead to a denial of service attack. 2018-11-12 not yet calculated CVE-2018-19217
MISC
ncurses -- ncurses
 
In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. 2018-11-12 not yet calculated CVE-2018-19211
MISC
neojapan -- denbun_pop SQL injection vulnerability in the Denbun POP version V3.3P R4.0 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via HTTP requests for mail search. 2018-11-15 not yet calculated CVE-2018-0685
JVN
MISC
MISC
neojapan -- denbun_pop_and_denbun_imap Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) uses hard-coded credentials, which may allow remote attackers to read/send mail or change the configuration. 2018-11-15 not yet calculated CVE-2018-0680
JVN
MISC
MISC
neojapan -- denbun_pop_and_denbun_imap Cross-site scripting vulnerability in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. 2018-11-15 not yet calculated CVE-2018-0687
JVN
MISC
MISC
neojapan -- denbun_pop_and_denbun_imap Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) uses hard-coded credentials, which may allow remote attackers to login to the Management page and change the configuration. 2018-11-15 not yet calculated CVE-2018-0681
JVN
MISC
MISC
neojapan -- denbun_pop_and_denbun_imap Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) allows remote authenticated attackers to upload and execute any executable files via unspecified vectors. 2018-11-15 not yet calculated CVE-2018-0686
JVN
MISC
MISC
neojapan -- denbun_pop_and_denbun_imap Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) does not properly manage sessions, which allows remote attackers to read/send mail or change the configuration via unspecified vectors. 2018-11-15 not yet calculated CVE-2018-0682
JVN
MISC
MISC
neojapan -- denbun_pop_and_denbun_imap Buffer overflow in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R3.0 and earlier, Denbun IMAP version V3.3I R3.0 and earlier) allows remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition via multipart/form-data format data. 2018-11-15 not yet calculated CVE-2018-0684
JVN
MISC
MISC
neojapan -- denbun_pop_and_denbun_imap Buffer overflow in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) allows remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition via Cookie data. 2018-11-15 not yet calculated CVE-2018-0683
JVN
MISC
MISC
netapp – storagegrid_webscale All StorageGRID Webscale versions are susceptible to a vulnerability which could permit an unauthenticated attacker to communicate with systems on the same network as the StorageGRID Webscale Admin Node via HTTP or to take over services on the Admin Node. 2018-11-14 not yet calculated CVE-2018-5495
CONFIRM
netiq -- access_manager
 
Mitigates an XSS issue in NetIQ Access Manager versions prior to 4.4 SP3. 2018-11-15 not yet calculated CVE-2018-12480
CONFIRM
CONFIRM
netwide_assembler -- netwide_assembler Netwide Assembler (NASM) 2.14rc15 has a NULL pointer dereference in the function find_label in asm/labels.c that will lead to a DoS attack. 2018-11-12 not yet calculated CVE-2018-19209
MISC
netwide_assembler -- netwide_assembler Netwide Assembler (NASM) 2.14rc16 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for the special cases of the % and $ and ! characters. 2018-11-12 not yet calculated CVE-2018-19215
MISC
MISC
netwide_assembler -- netwide_assembler Netwide Assembler (NASM) 2.14rc15 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for insufficient input. 2018-11-12 not yet calculated CVE-2018-19214
MISC
MISC
netwide_assembler -- netwide_assembler Netwide Assembler (NASM) before 2.13.02 has a use-after-free in detoken at asm/preproc.c. 2018-11-12 not yet calculated CVE-2018-19216
MISC
MISC
netwide_assembler -- netwide_assembler
 
Netwide Assembler (NASM) through 2.14rc16 has memory leaks that may lead to DoS, related to nasm_malloc in nasmlib/malloc.c. 2018-11-12 not yet calculated CVE-2018-19213
MISC
nvidia -- graphics_driver NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the GPU performance counters. Local user access is required. This is not a network or remote attack vector. 2018-11-13 not yet calculated CVE-2018-6260
CONFIRM
open_ticket_request_system -- open_ticket_request_system Open Ticket Request System (OTRS) 4.0.x before 4.0.33, 5.0.x before 5.0.31, and 6.0.x before 6.0.13 allows an authenticated user to delete files via a modified submission form because upload caching is mishandled. 2018-11-11 not yet calculated CVE-2018-19143
MISC
open_ticket_request_system -- open_ticket_request_system Open Ticket Request System (OTRS) 4.0.x before 4.0.33 and 5.0.x before 5.0.31 allows an admin to conduct an XSS attack via a modified URL because user and customer preferences are mishandled. 2018-11-11 not yet calculated CVE-2018-19141
MISC
open_ticket_request_system -- open_ticket_request_system
 
Open Ticket Request System (OTRS) 6.0.x before 6.0.13 allows an admin to conduct an XSS attack via a modified URL. 2018-11-11 not yet calculated CVE-2018-19142
MISC
openssl -- openssl Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'. 2018-11-15 not yet calculated CVE-2018-5407
BID
MISC
MISC
EXPLOIT-DB
paessler -- prtg_network_monitor PRTG Network Monitor before 18.2.41.1652 allows remote unauthenticated attackers to terminate the PRTG Core Server Service via a special HTTP request. 2018-11-12 not yet calculated CVE-2018-19203
MISC
MISC
MISC
paessler -- prtg_network_monitor PRTG Network Monitor before 18.3.44.2054 allows a remote authenticated attacker (with read-write privileges) to execute arbitrary code and OS commands with system privileges. When creating an HTTP Advanced Sensor, the user's input in the POST parameter 'proxyport_' is mishandled. The attacker can craft an HTTP request and override the 'writeresult' command-line parameter for HttpAdvancedSensor.exe to store arbitrary data in an arbitrary place on the file system. For example, the attacker can create an executable file in the \Custom Sensors\EXE directory and execute it by creating EXE/Script Sensor. 2018-11-12 not yet calculated CVE-2018-19204
MISC
MISC
MISC
php-proxy -- php-proxy
 
PHP-Proxy 5.1.0 allows remote attackers to read local files if the default "pre-installed version" (intended for users who lack shell access to their web server) is used. This occurs because the aeb067ca0aa9a3193dce3a7264c90187 app_key value from the default config.php is in place, and this value can be easily used to calculate the authorization data needed for local file inclusion. 2018-11-13 not yet calculated CVE-2018-19246
MISC
EXPLOIT-DB
phpbb -- phpbb
 
Passing an absolute path to a file_exists check in phpBB before 3.2.4 allows Remote Code Execution through Object Injection by employing Phar deserialization when an attacker has access to the Admin Control Panel with founder permissions. 2018-11-17 not yet calculated CVE-2018-19274
CONFIRM
phpmailer -- phpmailer
 
PHPMailer before 5.2.27 and 6.x before 6.0.6 is vulnerable to an object injection attack. 2018-11-16 not yet calculated CVE-2018-19296
MISC
MISC
phpoffice -- phpspreadsheet securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file 2018-11-14 not yet calculated CVE-2018-19277
MISC
pivotal_cloud_foundry -- credhub_service_broker
 
Pivotal CredHub Service Broker, versions prior to 1.1.0, uses a guessable form of random number generation in creating service broker's UAA client. A remote malicious user may guess the client secret and obtain or modify credentials for users of the CredHub Service. 2018-11-13 not yet calculated CVE-2018-15795
BID
CONFIRM
pointofsales_web_application -- pointofsales_web_application PointOfSales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb. 2018-11-16 not yet calculated CVE-2018-18805
MISC
EXPLOIT-DB
polycom -- trio
 
The Web administration console on Polycom Trio devices with software before 5.5.4 has XSS. 2018-11-15 not yet calculated CVE-2018-14935
CONFIRM
polycom -- trio
 
The Bluetooth subsystem on Polycom Trio devices with software before 5.5.4 has Incorrect Access Control. An attacker can connect without authentication and subsequently record audio from the device microphone. 2018-11-15 not yet calculated CVE-2018-14934
CONFIRM
postgresql -- postgresql
 
postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges. 2018-11-13 not yet calculated CVE-2018-16850
BID
SECTRACK
CONFIRM
UBUNTU
CONFIRM
prim'x -- zonecentral
 
PRIMX ZoneCentral before 6.1.2236 on Windows sometimes leaks the plaintext of NTFS files. On non-SSD devices, this is limited to a 5-second window and file sizes less than 600 bytes. The effect on SSD devices may be greater. 2018-11-14 not yet calculated CVE-2018-19279
MISC
qemu -- qemu
 
The pnv_lpc_do_eccb function in hw/ppc/pnv_lpc.c in Qemu before 3.1 allows out-of-bounds write or read access to PowerNV memory. 2018-11-15 not yet calculated CVE-2018-18954
MLIST
BID
MLIST
rack -- rack There is a possible XSS vulnerability in Rack before 2.0.6 and 1.6.11. Carefully crafted requests can impact the data returned by the `scheme` method on `Rack::Request`. Applications that expect the scheme to be limited to 'http' or 'https' and do not escape the return value could be vulnerable to an XSS attack. Note that applications using the normal escaping mechanisms provided by Rails may not impacted, but applications that bypass the escaping mechanisms, or do not use them may be vulnerable. 2018-11-13 not yet calculated CVE-2018-16471
MISC
rack -- rack There is a possible DoS vulnerability in the multipart parser in Rack before 2.0.6. Specially crafted requests can cause the multipart parser to enter a pathological state, causing the parser to use CPU resources disproportionate to the request size. 2018-11-13 not yet calculated CVE-2018-16470
MISC
redhat -- red_hat_single_sign-on_and_red_hat_single_sign-on_for_rhel A flaw was found in JBOSS Keycloak 3.2.1.Final. The Redirect URL for both Login and Logout are not normalized in org.keycloak.protocol.oidc.utils.RedirectUtils before the redirect url is verified. This can lead to an Open Redirection attack 2018-11-13 not yet calculated CVE-2018-14658
REDHAT
REDHAT
REDHAT
CONFIRM
redhat -- red_hat_single_sign-on_and_red_hat_single_sign-on_for_rhel A flaw was found in Keycloak 3.4.3.Final, 4.0.0.Beta2, 4.3.0.Final. When using 'response_mode=form_post' it is possible to inject arbitrary Javascript-Code via the 'state'-parameter in the authentication URL. This allows an XSS-Attack upon succesfully login. 2018-11-13 not yet calculated CVE-2018-14655
REDHAT
REDHAT
REDHAT
CONFIRM
redhat -- red_hat_single_sign-on_and_red_hat_single_sign-on_for_rhel A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force detection algorithm will not enforce its protection measures. 2018-11-13 not yet calculated CVE-2018-14657
REDHAT
REDHAT
REDHAT
CONFIRM
roundcube -- roundcube steps/mail/func.inc in Roundcube before 1.3.8 has XSS via crafted use of <svg><style>, as demonstrated by an onload attribute in a BODY element, within an HTML attachment. 2018-11-12 not yet calculated CVE-2018-19206
MISC
MISC
roundcube -- roundcube
 
Roundcube before 1.3.7 mishandles GnuPG MDC integrity-protection warnings, which makes it easier for attackers to obtain sensitive information, a related issue to CVE-2017-17688. This is associated with plugins/enigma/lib/enigma_driver_gnupg.php. 2018-11-12 not yet calculated CVE-2018-19205
MISC
MISC
ruby -- ruby
 
An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. It does not taint strings that result from unpacking tainted strings with some formats. 2018-11-16 not yet calculated CVE-2018-16396
MISC
MLIST
UBUNTU
DEBIAN
CONFIRM
CONFIRM
CONFIRM
CONFIRM
CONFIRM
ruby -- ruby
 
An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations. 2018-11-16 not yet calculated CVE-2018-16395
MISC
MLIST
UBUNTU
DEBIAN
CONFIRM
CONFIRM
CONFIRM
CONFIRM
CONFIRM
s-cms -- s-cms An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter. 2018-11-17 not yet calculated CVE-2018-19331
MISC
s-cms -- s-cms
 
An issue was discovered in S-CMS v1.5. There is a CSRF vulnerability that can add a new user via the admin/ajax.php?type=member&action=add URI. 2018-11-17 not yet calculated CVE-2018-19332
MISC
saltos -- rhinos RhinOS 3.0 build 1190 allows CSRF. 2018-11-16 not yet calculated CVE-2018-18760
MISC
EXPLOIT-DB
saltos -- saltos
 
SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=[SQL] SQL Injection. 2018-11-16 not yet calculated CVE-2018-18763
MISC
EXPLOIT-DB
saltos -- saltos
 
SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection. 2018-11-16 not yet calculated CVE-2018-18761
EXPLOIT-DB
sap -- basis
 
An attacker can use specially crafted inputs to execute commands on the host of a TREX / BWA installation, SAP Basis, versions: 7.0 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40 and 7.50 to 7.53. Not all commands are possible, only those that can be executed by the <sid>adm user. The commands executed depend upon the privileges of the <sid>adm user. 2018-11-13 not yet calculated CVE-2018-2478
BID
MISC
MISC
sap -- businessobjects_business_intelligence HTTP Verb Tampering is possible in SAP BusinessObjects Business Intelligence Platform, versions 4.1 and 4.2, Central Management Console (CMC) by changing request method. 2018-11-13 not yet calculated CVE-2018-2483
BID
MISC
MISC
sap -- businessobjects_business_intelligence_platform SAP BusinessObjects Business Intelligence Platform (BIWorkspace), versions 4.1 and 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. 2018-11-13 not yet calculated CVE-2018-2479
BID
MISC
MISC
sap -- businessobjects_business_intelligence_platform_server SAP BusinessObjects Business Intelligence Platform Server, versions 4.1 and 4.2, when using Web Intelligence Richclient 3 tiers mode gateway allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. 2018-11-13 not yet calculated CVE-2018-2473
BID
MISC
MISC
sap -- disclosure_management SAP Disclosure Management 10.x allows an attacker to exploit through a specially crafted zip file provided by users: When extracted in specific use cases, files within this zip file can land in different locations than the originally intended extraction point. 2018-11-13 not yet calculated CVE-2018-2487
BID
MISC
MISC
sap -- fiori_client It is possible for a malware application installed on an Android device to send local push notifications with an empty message to SAP Fiori Client and cause the application to crash. SAP Fiori Client version 1.11.5 in Google Play store addresses these issues and users must update to that version. 2018-11-13 not yet calculated CVE-2018-2488
MISC
MISC
sap -- fiori_client The broadcast messages received by SAP Fiori Client are not protected by permissions. SAP Fiori Client version 1.11.5 in Google Play store addresses these issues and users must update to that version. 2018-11-13 not yet calculated CVE-2018-2490
MISC
MISC
sap -- fiori_client When opening a deep link URL in SAP Fiori Client with log level set to "Debug", the client application logs the URL to the log file. If this URL contains malicious JavaScript code it can eventually run inside the built-in log viewer of the application in case user opens the viewer and taps on the hyperlink in the viewer. SAP Fiori Client version 1.11.5 in Google Play store addresses these issues and users must update to that version. 2018-11-13 not yet calculated CVE-2018-2491
MISC
MISC
sap -- fiori_client It is possible for a malicious application or malware to execute JavaScript in a SAP Fiori application. This can include reading and writing of information and calling device specific JavaScript APIs in the application. SAP Fiori Client version 1.11.5 in Google Play store addresses these issues and users must update to that version. 2018-11-13 not yet calculated CVE-2018-2485
BID
MISC
MISC
sap -- fiori_client Locally, without any permission, an arbitrary android application could delete the SSO configuration of SAP Fiori Client. SAP Fiori Client version 1.11.5 in Google Play store addresses these issues and users must update to that version. 2018-11-13 not yet calculated CVE-2018-2489
MISC
MISC
sap -- mobile_secure_for_android SAP Mobile Secure Android Application, Mobile-secure.apk Android client, before version 6.60.19942.0, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Install the Mobile Secure Android client released in Mid-Oct 2018. 2018-11-13 not yet calculated CVE-2018-2482
BID
MISC
MISC
sap -- netweaver Due to insufficient URL Validation in forums in SAP NetWeaver versions 7.30, 7.31, 7.40, an attacker can redirect users to a malicious site. 2018-11-13 not yet calculated CVE-2018-2476
BID
MISC
MISC
sap -- netweaver Knowledge Management (XMLForms) in SAP NetWeaver, versions 7.30, 7.31, 7.40 and 7.50 does not sufficiently validate an XML document accepted from an untrusted source. 2018-11-13 not yet calculated CVE-2018-2477
BID
MISC
MISC
sap -- netweaver_abap In some SAP standard roles, in SAP_ABA versions, 7.00 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, 75C to 75D, a transaction code reserved for customer is used. By implementing such transaction code a malicious user may execute unauthorized transaction functionality. 2018-11-13 not yet calculated CVE-2018-2481
BID
MISC
MISC
school_attendance_monitoring_system_web_application -- school_attendance_monitoring_system_web_application School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php. 2018-11-16 not yet calculated CVE-2018-18797
MISC
EXPLOIT-DB
school_attendance_monitoring_system_web_application -- school_attendance_monitoring_system_web_application School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos. 2018-11-16 not yet calculated CVE-2018-18799
MISC
EXPLOIT-DB
school_equipment_monitoring_system_web_application -- school_equipment_monitoring_system_web_application School Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to include/user.vb. 2018-11-16 not yet calculated CVE-2018-18806
MISC
school_event_management_system_web_application -- school_event_management_system_web_application School Event Management System 1.0 allows CSRF via user/controller.php?action=edit. 2018-11-16 not yet calculated CVE-2018-18794
MISC
EXPLOIT-DB
school_event_management_system_web_application -- school_event_management_system_web_application School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter. 2018-11-16 not yet calculated CVE-2018-18795
MISC
EXPLOIT-DB
school_event_management_system_web_application -- school_event_management_system_web_application School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos. 2018-11-16 not yet calculated CVE-2018-18793
MISC
EXPLOIT-DB
seacms -- seacms In SeaCMS v6.64, there is SQL injection via the admin_makehtml.php topic parameter because of mishandling in include/mkhtml.func.php. 2018-11-17 not yet calculated CVE-2018-19349
MISC
seacms -- seacms
 
In SeaCMS v6.6.4, there is stored XSS via the member.php?action=chgpwdsubmit email parameter during a password change, as demonstrated by a data: URL in an OBJECT element. 2018-11-17 not yet calculated CVE-2018-19350
MISC
soliton_systems_k_k -- filezen FileZen V3.0.0 to V4.2.1 allows remote attackers to execute arbitrary OS commands via unspecified vectors. 2018-11-15 not yet calculated CVE-2018-0694
JVN
MISC
soliton_systems_k_k -- filezen
 
Directory traversal vulnerability in FileZen V3.0.0 to V4.2.1 allows remote attackers to upload an arbitrary file in the specific directory in FileZen via unspecified vectors. 2018-11-15 not yet calculated CVE-2018-0693
JVN
MISC
sonatype -- nexus_respository_manager Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection. 2018-11-15 not yet calculated CVE-2018-16621
CONFIRM
sonatype -- nexus_respository_manager Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control. 2018-11-15 not yet calculated CVE-2018-16620
CONFIRM
sonatype -- nexus_respository_manager
 
Sonatype Nexus Repository Manager before 3.14 allows XSS. 2018-11-15 not yet calculated CVE-2018-16619
CONFIRM
sony -- music_center_for_pc
 
An unvalidated software update vulnerability in Music Center for PC version 1.0.02 and earlier could allow a man-in-the-middle attacker to tamper with an update file and inject executable files. 2018-11-15 not yet calculated CVE-2018-0690
JVN
MISC
srcms -- srcms
 
SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=gifts&a=update to change goods prices with the super administrator's privileges. 2018-11-16 not yet calculated CVE-2018-19319
MISC
srcms -- srcms
 
SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=manager&a=update to change the username and password of the super administrator account. 2018-11-16 not yet calculated CVE-2018-19318
MISC
teleport -- teleport
 
tp4a TELEPORT 3.1.0 allows XSS via the login page because a crafted username is mishandled when an administrator later views the system log. 2018-11-15 not yet calculated CVE-2018-19301
MISC
tenable -- nagios_xi Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php. 2018-11-14 not yet calculated CVE-2018-15710
MISC
tenable -- nagios_xi Nagios XI 5.5.6 allows persistent cross site scripting from remote authenticated attackers via the stored email address in admin/users.php. 2018-11-14 not yet calculated CVE-2018-15713
MISC
tenable -- nagios_xi Nagios XI 5.5.6 allows remote authenticated attackers to reset and regenerate the API key of more privileged users. The attacker can then use the new API key to execute API calls at elevated privileges. 2018-11-14 not yet calculated CVE-2018-15711
MISC
tenable -- nagios_xi Nagios XI 5.5.6 allows remote authenticated attackers to execute arbitrary commands via a crafted HTTP request. 2018-11-14 not yet calculated CVE-2018-15709
MISC
tenable -- nagios_xi Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request. 2018-11-14 not yet calculated CVE-2018-15708
MISC
tenable -- nagios_xi Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the host parameter in api_tool.php. 2018-11-14 not yet calculated CVE-2018-15712
MISC
tenable -- nagios_xi Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the oname and oname2 parameters. 2018-11-14 not yet calculated CVE-2018-15714
MISC
tibco_software -- datasynapse_gridserver_manager
 
The GridServer Broker and GridServer Director components of TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager contain vulnerabilities which may allow an unauthenticated user to perform cross-site request forgery (CSRF). Affected releases are TIBCO Software Inc. TIBCO DataSynapse GridServer Manager: versions up to and including 5.2.0; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; 6.2.0; 6.3.0. 2018-11-13 not yet calculated CVE-2018-12416
BID
CONFIRM
uriparser -- uriparser An issue was discovered in uriparser before 0.9.0. UriCommon.c allows attempted operations on NULL input via a uriResetUri* function. 2018-11-12 not yet calculated CVE-2018-19200
MISC
MISC
uriparser -- uriparser An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an out-of-bounds write via a uriComposeQuery* or uriComposeQueryEx* function because the '&' character is mishandled in certain contexts. 2018-11-12 not yet calculated CVE-2018-19198
MISC
MISC
uriparser -- uriparser An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an integer overflow via a uriComposeQuery* or uriComposeQueryEx* function because of an unchecked multiplication. 2018-11-12 not yet calculated CVE-2018-19199
MISC
MISC
usvn_team -- user-friendly_svn
 
Cross-site scripting vulnerability in User-friendly SVN (USVN) Version 1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. 2018-11-15 not yet calculated CVE-2018-0695
JVN
MISC
valine -- valine
 
An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file. 2018-11-15 not yet calculated CVE-2018-19289
MISC
vmware -- vrealize_log_insight VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authorization in the user registration method. Successful exploitation of this issue may allow Admin users with view only permission to perform certain administrative functions which they are not allowed to perform. 2018-11-13 not yet calculated CVE-2018-6980
BID
CONFIRM
witte_software -- modbus_slave
 
Modbus Slave 7.0.0 in modbus tools has a Buffer Overflow. 2018-11-16 not yet calculated CVE-2018-18759
MISC
EXPLOIT-DB
wordpress -- wordpress
 
The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb->prepare() input is mishandled, as exploited in the wild in November 2018. 2018-11-12 not yet calculated CVE-2018-19207
BID
MISC
MISC
MISC
wordpress -- wordpress
 
XSS in the Ninja Forms plugin before 3.3.18 for WordPress allows Remote Attackers to execute JavaScript via the includes/Admin/Menus/Submissions.php (aka submissions page) begin_date, end_date, or form_id parameter. 2018-11-15 not yet calculated CVE-2018-19287
MISC
MISC
EXPLOIT-DB
xiaocms -- xiaocms An issue was discovered in XiaoCms 20141229. There is XSS via the largest input box on the "New news" screen. 2018-11-12 not yet calculated CVE-2018-19193
MISC
xiaocms -- xiaocms An issue was discovered in XiaoCms 20141229. admin\controller\database.php allows arbitrary directory deletion via admin/index.php?c=database&a=import&paths[]=../ directory traversal. 2018-11-12 not yet calculated CVE-2018-19197
MISC
MISC
xiaocms -- xiaocms An issue was discovered in XiaoCms 20141229. It allows remote attackers to execute arbitrary code by using the type parameter to bypass the standard admin\controller\uploadfile.php restrictions on uploaded file types (jpg, jpeg, bmp, png, gif), as demonstrated by an admin/index.php?c=uploadfile&a=uploadify_upload&type=php URI. 2018-11-12 not yet calculated CVE-2018-19196
MISC
MISC
xiaocms -- xiaocms An issue was discovered in XiaoCms 20141229. There is XSS related to the template\default\show_product.html file. 2018-11-12 not yet calculated CVE-2018-19195
MISC
xiaocms -- xiaocms An issue was discovered in XiaoCms 20141229. /admin/index.php?c=database allows full path disclosure in a "failed to open stream" error message. 2018-11-12 not yet calculated CVE-2018-19194
MISC
xiaocms -- xiaocms
 
An issue was discovered in XiaoCms 20141229. admin/index.php?c=content&a=add&catid=3 has CSRF, as demonstrated by entering news via the data[content] parameter. 2018-11-12 not yet calculated CVE-2018-19192
MISC
yunucms -- yunucms statics/ueditor/php/vendor/Local.class.php in YUNUCMS 1.1.5 allows arbitrary file deletion via the statics/ueditor/php/controller.php?action=remove key parameter, as demonstrated by using directory traversal to delete the install.lock file. 2018-11-11 not yet calculated CVE-2018-19181
MISC
yunucms -- yunucms
 
statics/app/index/controller/Install.php in YUNUCMS 1.1.5 (if install.lock is not present) allows remote attackers to execute arbitrary PHP code by placing this code in the index.php?s=index/install/setup2 DB_PREFIX field, which is written to database.php. 2018-11-11 not yet calculated CVE-2018-19180
MISC
zoho_manageengine -- opmanager
 
Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API. 2018-11-15 not yet calculated CVE-2018-19288
MISC
zte -- multiple_products All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization vulnerability. Since appviahttp service has no authorization delay, an attacker can be allowed to brute force account credentials. 2018-11-16 not yet calculated CVE-2018-7363
CONFIRM
zte -- multiple_products All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability, which may allows an unauthorized user to perform unauthorized operations on the router. 2018-11-16 not yet calculated CVE-2018-7362
CONFIRM
zte -- multiple_products All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which may allows an attacker to cause a denial of service. 2018-11-16 not yet calculated CVE-2018-7361
CONFIRM
zte -- multiple_products All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get the GPON SN information via appviahttp service. 2018-11-16 not yet calculated CVE-2018-7360
CONFIRM
zte -- multiple_products All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by heap-based buffer overflow vulnerability, which may allow an attacker to execute arbitrary code. 2018-11-16 not yet calculated CVE-2018-7359
CONFIRM
zte -- zxhn_h168n ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper change control vulnerability, which may allow an unauthorized user to perform unauthorized operations. 2018-11-14 not yet calculated CVE-2018-7358
CONFIRM
zte -- zxhn_h168n ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper access control vulnerability, which may allow an unauthorized user to gain unauthorized access. 2018-11-14 not yet calculated CVE-2018-7357
CONFIRM
zyxel -- vmg1312-b10d_devices Zyxel VMG1312-B10D devices before 5.13(AAXA.8)C0 allow ../ Directory Traversal, as demonstrated by reading /etc/passwd. 2018-11-17 not yet calculated CVE-2018-19326
MISC