CVEs published July 30, 2018
14 CVEs were published on July 30, 2018: 0 critical, 4 high.
- Published
- 14
- Critical
- 0
- High
- 4
- Medium
- 4
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Lenovo Group Lenovo xClarity Administrator
- 3
- [UNKNOWN] kernel
- 1
- [UNKNOWN] kernel:
- 1
- [UNKNOWN] Kernel:
- 1
- [UNKNOWN] openstack-tripleo-heat-templates · tripleo-heat-t…
- 1
- [UNKNOWN] prosody
- 1
- [UNKNOWN] python-cryptography · cryptography
- 1
- https://github.com/microlinkhq metascraper · metascraper
- 1
- https://github.com/vvo whereis · whereis
- 1
- Red Hat libxml2
- 1
High 4
- CVE-2018-10898A vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40.[UNKNOWN] openstack-tripleo-heat-templates · tripleo-heat-t…
- CVE-2018-10903A flaw was found in python-cryptography versions between >=1.9.0 and <2.3.[UNKNOWN] python-cryptography · cryptography
- CVE-2017-7482In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field.[UNKNOWN] kernel:
- CVE-2018-13280Use of insufficiently random values vulnerability in SYNO.Encryption.GenRandomKey in Synology DiskStation Manager (DSM) before 6.2-23739 allSynology DiskStation Manager
Medium, low and unrated 10
- CVE-2018-3772Concatenating unsanitized user input in the `whereis` npm module < 0.4.1 allowed an attacker to execute arbitrary commands.https://github.com/vvo whereis · whereis
- CVE-2018-3773There is a stored Cross-Site Scripting vulnerability in Open Graph meta properties read by the `metascrape` npm module <= 3.9.2.https://github.com/microlinkhq metascraper · metascraper
- CVE-2018-10847prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass.[UNKNOWN] prosody
- CVE-2018-10883A flaw was found in the Linux kernel's ext4 filesystem.[UNKNOWN] kernel
- CVE-2018-9064In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user may abuse a web API debug call to retrieve the credLenovo Group Lenovo xClarity Administrator
- CVE-2018-9065In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be aLenovo Group Lenovo xClarity Administrator
- CVE-2018-9066In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user can, under specific circumstances, inject additionaLenovo Group Lenovo xClarity Administrator
- CVE-2016-9597It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found Red Hat libxml2
- CVE-2017-7514A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0.Red Hat Satellite
- CVE-2017-7518A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in EFLAGS during emulatio[UNKNOWN] Kernel: