CVEs published November 8, 2018
38 CVEs were published on November 8, 2018: 3 critical, 0 high. Browse them by severity, product and exploitation status.
- Published
- 38
- Critical
- 3
- High
- 0
- Medium
- 11
- Low
- 0
- Unrated
- 24
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Brocade Communications Systems Brocade Fabric OS
- 8
- Apache Software Foundation Apache Hive · org.apache.hive:hi…
- 2
- Cisco Energy Management Suite
- 2
- Cisco AMP for Endpoints
- 1
- Cisco Content Security Management Appliance
- 1
- Cisco Firepower Management Center
- 1
- Cisco Integrated Management Controller (IMC) Supervisor
- 1
- Cisco Meeting Server
- 1
- Cisco Meraki MR · Cisco Meraki M5 +3
- 1
- Cisco Prime Collaboration Assurance
- 1
Critical 3
- CVE-2018-15381Cisco Unity Express Arbitrary Command Execution VulnerabilityCisco Unity Express
- CVE-2018-15394Cisco Stealthwatch Management Console Authentication Bypass VulnerabilityCisco Stealthwatch Enterprise
- CVE-2018-15439Cisco Small Business Switches Privileged Access VulnerabilityCisco Small Business 300 Series Managed Switches
Medium, low and unrated 35
- CVE-2018-7718An issue was discovered in Telexy QPath 5.4.462.
- CVE-2018-15450Cisco Prime Collaboration Assurance File Overwrite VulnerabilityCisco Prime Collaboration Assurance
- CVE-2018-15451Cisco Prime Service Catalog Cross-Site Scripting VulnerabilityCisco Prime Service Catalog
- CVE-2018-19044keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats.
- CVE-2018-19045keepalived 2.0.8 used mode 0666 when creating new temporary files upon a call to PrintData or PrintStats, potentially leaking sensitive…
- CVE-2018-19046keepalived 2.0.8 didn't check for existing plain files when writing data to a temporary file upon a call to PrintData or PrintStats.
- CVE-2018-19115keepalived before 2.0.7 has a heap-based buffer overflow when parsing HTTP status codes resulting in DoS or possibly unspecified other…
- CVE-2018-15447Cisco Integrated Management Controller Supervisor SQL Injection VulnerabilityCisco Integrated Management Controller (IMC) Supervisor
- CVE-2018-15448Cisco Registered Envelope Service Information Disclosure VulnerabilityCisco Registered Envelope Service
- CVE-2018-15449Cisco Video Surveillance Media Server Denial of Service VulnerabilityCisco Video Surveillance Media Server Software
- CVE-2018-6436A Vulnerability in the firmwaredownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f…Brocade Communications Systems Brocade Fabric OS
- CVE-2018-6437A Vulnerability in the help command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could…Brocade Communications Systems Brocade Fabric OS
- CVE-2018-6438A Vulnerability in the supportsave command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d…Brocade Communications Systems Brocade Fabric OS
- CVE-2018-15444Cisco Energy Management Suite XML External Entity VulnerabilityCisco Energy Management Suite
- CVE-2018-15445Cisco Energy Management Suite Cross-Site Request Forgery VulnerabilityCisco Energy Management Suite
- CVE-2018-15446Cisco Meeting Server Information Disclosure VulnerabilityCisco Meeting Server
- CVE-2018-19114An issue was discovered in MinDoc through v1.0.2.
- CVE-2018-15393Cisco Content Security Management Appliance (SMA) Cross-Site Scripting VulnerabilityCisco Content Security Management Appliance
- CVE-2018-15437Cisco Immunet and Cisco AMP for Endpoints System Scan Denial of Service VulnerabilityCisco AMP for Endpoints
- CVE-2018-15443Cisco Firepower Detection Engine TCP Intrusion Prevention System Rule Bypass VulnerabilityCisco Firepower Management Center
- CVE-2018-0284Cisco Meraki Local Status Page Privilege Escalation VulnerabilityCisco Meraki MR · Cisco Meraki M5 +3
- CVE-2018-11777In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against malicious user if…Apache Software Foundation Apache Hive · org.apache.hive:hi…
- CVE-2018-1314In Apache Hive 2.3.3, 3.1.0 and earlier, Hive "EXPLAIN" operation does not check for necessary authorization of involved entities in a…Apache Software Foundation Apache Hive · org.apache.hive:hi…
- CVE-2018-6433A vulnerability in the secryptocfg export command of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local…Brocade Communications Systems Brocade Fabric OS
- CVE-2018-6434A vulnerability in the web management interface of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow attackers…Brocade Communications Systems Brocade Fabric OS
Show all 35 entriesShow fewer entries
- CVE-2018-6435A Vulnerability in the secryptocfg command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d…Brocade Communications Systems Brocade Fabric OS
- CVE-2018-6441A vulnerability in Secure Shell implementation of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local…Brocade Communications Systems Brocade Fabric OS
- CVE-2018-6442A vulnerability in the Brocade Webtools firmware update section of Brocade Fabric OS before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow…Brocade Communications Systems Brocade Fabric OS
- CVE-2018-19104In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can be used to upload arbitrary files and get server privileges.
- CVE-2018-19105LibreCAD 2.1.3 allows remote attackers to cause a denial of service (0x89C04589 write access violation and application crash) or possibly…
- CVE-2018-19109tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/cms/column/list…
- CVE-2018-19110The skin-management feature in tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting…
- CVE-2018-19111The Google Cardboard application 1.8 for Android and 1.2 for iOS sends potentially private cleartext information to the Unity 3D Stats web…
- CVE-2018-19107In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image reader) may suffer from a denial of…
- CVE-2018-19108In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service (infinite loop)…