# CVEs published 2019-01-10

48 CVEs were published on January 10, 2019: 0 critical, 16 high. Days are UTC.

- [CVE-2018-15461](https://cve.now/CVE-2018-15461.md): Cisco Webex Business Suite Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco WebEx Meeting Center)
- [CVE-2018-15460](https://cve.now/CVE-2018-15460.md): Cisco Email Security Appliance URL Filtering Denial of Service Vulnerability (CVSS 8.6, Cisco Email Security Appliance)
- [CVE-2018-5403](https://cve.now/CVE-2018-5403.md): Imperva SecureSphere gateway (GW) running v13, for both pre-First Time Login or post-First Time Login (FTL), if the attacker knows the… (no CVSS, Imperva SecureSphere)
- [CVE-2018-5412](https://cve.now/CVE-2018-5412.md): Imperva SecureSphere running v12.0.0.50 is vulnerable to local arbitrary code execution, escaping sealed-mode. (no CVSS, Imperva SecureSphere)
- [CVE-2018-5413](https://cve.now/CVE-2018-5413.md): Imperva SecureSphere running v13.0, v12.0, or v11.5 allows low privileged users to add SSH login keys to the admin user, resulting in… (no CVSS, Imperva SecureSphere)
- [CVE-2017-1002152](https://cve.now/CVE-2017-1002152.md): Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles. (no CVSS, Fedora Project Infrastructure Bodhi · bodhi)
- [CVE-2017-1002157](https://cve.now/CVE-2017-1002157.md): modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution. (no CVSS, Fedora Modularity modulemd · modulemd)
- [CVE-2018-20684](https://cve.now/CVE-2018-20684.md): In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept arbitrary files sent by the server, potentially… (no CVSS)
- [CVE-2017-3718](https://cve.now/CVE-2017-3718.md): Improper setting of device configuration in system firmware for Intel(R) NUC kits may allow a privileged user to potentially enable… (no CVSS, Intel(R) NUC)
- [CVE-2018-12166](https://cve.now/CVE-2018-12166.md): Insufficient write protection in firmware for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to… (no CVSS, Intel(R) Optane(TM) SSD DC P4800X)
- [CVE-2018-12167](https://cve.now/CVE-2018-12167.md): Firmware update routine in bootloader for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to… (no CVSS, Intel(R) Optane(TM) SSD DC P4800X)
- [CVE-2018-12177](https://cve.now/CVE-2018-12177.md): Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.0.7 may allow an… (no CVSS, Intel(R) PROSet/Wireless WiFi Software)
- [CVE-2018-18098](https://cve.now/CVE-2018-18098.md): Improper file verification in install routine for Intel(R) SGX SDK and Platform Software for Windows before 2.2.100 may allow an… (no CVSS, Intel(R) SGX SDK and Platform Software for Windows)
- [CVE-2018-3703](https://cve.now/CVE-2018-3703.md): Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may allow authenticated… (no CVSS, Intel(R) SSD Data Center Tool for Windows)
- [CVE-2019-0088](https://cve.now/CVE-2019-0088.md): Insufficient path checking in Intel(R) System Support Utility for Windows before 2.5.0.15 may allow an authenticated user to potentially… (no CVSS, Intel(R) System Support Utility for Windows)
- [CVE-2018-15457](https://cve.now/CVE-2018-15457.md): Cisco Prime Infrastructure Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Prime Infrastructure)
- [CVE-2018-15458](https://cve.now/CVE-2018-15458.md): Cisco Firepower Management Center Disk Utilization Denial of Service Vulnerability (CVSS 5.3, Cisco Firepower Management Center)
- [CVE-2018-0484](https://cve.now/CVE-2018-0484.md): Cisco IOS and IOS XE Software Secure Shell Connection on VRF Vulnerability (CVSS 5.3, Cisco IOS)
- [CVE-2018-15453](https://cve.now/CVE-2018-15453.md): Cisco Email Security Appliance Memory Corruption Denial of Service Vulnerability (CVSS 8.6, Cisco Email Security Appliance)
- [CVE-2018-15456](https://cve.now/CVE-2018-15456.md): Cisco Identity Services Engine Password Recovery Vulnerability (CVSS 4.3, Cisco Identity Services Engine Software)
- [CVE-2018-16803](https://cve.now/CVE-2018-16803.md): In CIMTechniques CIMScan 6.x through 6.2, the SOAP WSDL parser allows attackers to execute SQL code. (no CVSS)
- [CVE-2018-0482](https://cve.now/CVE-2018-0482.md): Cisco Prime Network Control System Stored Cross-Site Scripting Vulnerability (CVSS 5.4, Cisco Prime Network Control System)
- [CVE-2018-0483](https://cve.now/CVE-2018-0483.md): Cisco Jabber Client Framework Instant Message Cross-Site Scripting Vulnerability (CVSS 4.6, Cisco Jabber IM for Android)
- [CVE-2019-5892](https://cve.now/CVE-2019-5892.md): bgpd in FRRouting FRR (aka Free Range Routing) 2.x and 3.x before 3.0.4, 4.x before 4.0.1, 5.x before 5.0.2, and 6.x before 6.0.2 (not… (no CVSS)
- [CVE-2019-5893](https://cve.now/CVE-2019-5893.md): Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter. (no CVSS)
- [CVE-2018-0449](https://cve.now/CVE-2018-0449.md): Cisco Jabber Client Framework Insecure Directory Permissions Vulnerability (CVSS 5.1, Cisco Jabber for Mac)
- [CVE-2018-0461](https://cve.now/CVE-2018-0461.md): Cisco IP Phone 8800 Series Arbitrary Script Injection Vulnerability (CVSS 6.5, Cisco IP Phone 8800 Series Software)
- [CVE-2018-0474](https://cve.now/CVE-2018-0474.md): Cisco Unified Communications Manager Digest Credentials Disclosure Vulnerability (CVSS 4.3, Cisco Unified Communications Manager)
- [CVE-2018-4032](https://cve.now/CVE-2018-4032.md): An exploitable privilege escalation vulnerability exists in the way the CleanMyMac X software improperly validates inputs. (CVSS 7.1, Clean My Mac)
- [CVE-2018-4033](https://cve.now/CVE-2018-4033.md): The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. (CVSS 7.1, Clean My Mac)
- [CVE-2018-4034](https://cve.now/CVE-2018-4034.md): The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation. (CVSS 7.1, Clean My Mac)
- [CVE-2018-4035](https://cve.now/CVE-2018-4035.md): The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation. (CVSS 7.1, Clean My Mac)
- [CVE-2018-4036](https://cve.now/CVE-2018-4036.md): The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. (CVSS 7.1, Clean My Mac)
- [CVE-2018-4037](https://cve.now/CVE-2018-4037.md): The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. (CVSS 7.1, Clean My Mac)
- [CVE-2018-4041](https://cve.now/CVE-2018-4041.md): An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input… (CVSS 7.1, Clean My Mac)
- [CVE-2018-4042](https://cve.now/CVE-2018-4042.md): An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input… (CVSS 7.1, Clean My Mac)
- [CVE-2018-4043](https://cve.now/CVE-2018-4043.md): An exploitable privilege escalation vulnerability exists in the Clean My Mac X, version 4.04, helper service due to improper input… (CVSS 7.1, Clean My Mac)
- [CVE-2018-4044](https://cve.now/CVE-2018-4044.md): An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input… (CVSS 7.1, Clean My Mac)
- [CVE-2018-4045](https://cve.now/CVE-2018-4045.md): An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input… (CVSS 7.1, Clean My Mac)
- [CVE-2018-4046](https://cve.now/CVE-2018-4046.md): An exploitable denial-of-service vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input… (CVSS 7.1, Clean My Mac)
- [CVE-2018-4047](https://cve.now/CVE-2018-4047.md): An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input… (CVSS 7.1, Clean My Mac)
- [CVE-2019-5886](https://cve.now/CVE-2019-5886.md): An issue was discovered in ShopXO 1.2.0. (no CVSS)
- [CVE-2019-5887](https://cve.now/CVE-2019-5887.md): An issue was discovered in ShopXO 1.2.0. (no CVSS)
- [CVE-2019-5884](https://cve.now/CVE-2019-5884.md): php/elFinder.class.php in elFinder before 2.1.45 leaks information if PHP's curl extension is enabled and safe\_mode or open\_basedir is not… (no CVSS, studio-42/elfinder)
- [CVE-2018-20683](https://cve.now/CVE-2018-20683.md): commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have… (no CVSS)
- [CVE-2018-0181](https://cve.now/CVE-2018-0181.md): Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent Software Redis Server Unauthenticated Access Vulnerability (CVSS 7.3, Cisco Policy Suite (CPS) Software)
- [CVE-2018-0282](https://cve.now/CVE-2018-0282.md): Cisco IOS and IOS XE Software TCP Denial of Service Vulnerability (CVSS 6.8, Cisco IOS)
- [CVE-2018-20685](https://cve.now/CVE-2018-20685.md): In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . (CVSS 5.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2019-01-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.