CVEs published August 14, 2018
34 CVEs were published on August 14, 2018: 2 critical, 1 high. Browse them by severity, product and exploitation status.
- Published
- 34
- Critical
- 2
- High
- 1
- Medium
- 2
- Low
- 0
- Unrated
- 29
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Hewlett Packard Enterprise HPE 3PAR Service Processors
- 6
- Intel Multiple
- 3
- SAP BusinessObjects Business Intelligence
- 3
- Talos Sony
- 2
- Apache Software Foundation Apache HTTP Server
- 1
- Cisco Systems IOS and IOS XE
- 1
- Hewlett Packard Enterprise HP 1810-24G, HP 1810-48G, HP 181…
- 1
- Hewlett Packard Enterprise HPE XP P9000 Command View Advanc…
- 1
- Hewlett Packard Enterprise iLO 5 for HPE Gen10 Servers, iLO…
- 1
- mingw-w64
- 1
Critical 2
- CVE-2018-3937An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5…Talos Sony
- CVE-2018-3938An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera…Talos Sony
High 1
Medium, low and unrated 31
- CVE-2018-12537In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and…The Eclipse Foundation Eclipse Vert.x · io.vertx:vertx-core
- CVE-2018-12539In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or…The Eclipse Foundation Eclipse OpenJ9
- CVE-2018-3620Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information…Intel Multiple
- CVE-2018-3646Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information…Intel Multiple
- CVE-2018-0131A vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS XE Software could allow an…Cisco Systems IOS and IOS XE
- CVE-2018-14348libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of…
- CVE-2018-14424The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows…
- CVE-2018-14429man-cgi before 1.16 allows Local File Inclusion via absolute path traversal, as demonstrated by a cgi-bin/man-cgi?/etc/passwd URI.
- CVE-2018-14888inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or thread subject.
- CVE-2018-14922Multiple cross-site scripting (XSS) vulnerabilities in Monstra CMS 3.0.4 allow remote attackers to inject arbitrary web script or HTML via…
- CVE-2018-2441Under certain conditions the SAP Change and Transport System (ABAP), SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP…SAP Change and Transport System
- CVE-2018-2442In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelligence report from BI Launchpad, the…SAP BusinessObjects Business Intelligence
- CVE-2018-2444SAP BusinessObjects Financial Consolidation, versions 10.0, 10.1, does not sufficiently encode user-controlled inputs, resulting in…SAP BusinessObjects Financial Consolidation
- CVE-2018-2445AdminTools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allows an attacker to manipulate the vulnerable application to…SAP BusinessObjects Business Intelligence Platform
- CVE-2018-2446Admin tools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allow an unauthenticated user to read sensitive information…SAP BusinessObjects Business Intelligence
- CVE-2018-2447SAP BusinessObjects Business Intelligence (Launchpad Web Intelligence), version 4.2, allows an attacker to execute crafted InfoObject…SAP BusinessObjects Business Intelligence
- CVE-2018-2448Under certain conditions SAP SRM-MDM (CATALOG versions 3.0, 7.01, 7.02) utilities functionality allows an attacker to access information…SAP SRM-MDM CATALOG
- CVE-2018-2449SAP SRM MDM Catalog versions 3.73, 7.31, 7.32 in (SAP NetWeaver 7.3) - import functionality does not perform authentication checks for…SAP Supplier Relationship Management Master Data Management…
- CVE-2018-2450SAP MaxDB (liveCache), versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges to execute crafted database queries and…SAP MaxDB
- CVE-2018-2451XS Command-Line Interface (CLI) user sessions with the SAP HANA Extended Application Services (XS), version 1, advanced server may have an…SAP HANA Extended Application Services
- CVE-2018-5392mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLRmingw-w64
- CVE-2018-7077A security vulnerability in HPE XP P9000 Command View Advanced Edition (CVAE) Device Manager (DevMgr 8.5.0-00 and prior to 8.6.0-00)…Hewlett Packard Enterprise HPE XP P9000 Command View Advanc…
- CVE-2018-7093A security vulnerability in HPE Integrated Lights-Out 3 prior to v1.90, iLO 4 prior to v2.60, iLO 5 prior to v1.30, Moonshot Chassis…Hewlett Packard Enterprise iLO 5 for HPE Gen10 Servers, iLO…
- CVE-2018-7094A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-5.0.0.0-22913(GA).Hewlett Packard Enterprise HPE 3PAR Service Processors
- CVE-2018-7095A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7).Hewlett Packard Enterprise HPE 3PAR Service Processors
Show all 31 entriesShow fewer entries
- CVE-2018-7096A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7).Hewlett Packard Enterprise HPE 3PAR Service Processors
- CVE-2018-7097A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7).Hewlett Packard Enterprise HPE 3PAR Service Processors
- CVE-2018-7098A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7).Hewlett Packard Enterprise HPE 3PAR Service Processors
- CVE-2018-7099A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7).Hewlett Packard Enterprise HPE 3PAR Service Processors
- CVE-2018-7100A potential security vulnerability has been identified in HPE OfficeConnect 1810 Switch Series (HP 1810-24G - P.2.22 and previous…Hewlett Packard Enterprise HP 1810-24G, HP 1810-48G, HP 181…
- CVE-2016-4975mod_userdir CRLF injectionApache Software Foundation Apache HTTP Server