CVEs published August 7, 2018
12 CVEs were published on August 7, 2018: 0 critical, 1 high.
- Published
- 12
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 0
- Unrated
- 10
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Siemens AG SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Porta…
- 2
- Apple macOS · Apple iOS +1
- 1
- IBM Rhapsody Model Manager
- 1
- Siemens AG Automation License Manager
- 1
- Siemens AG Automation License Manager 5, Automation License…
- 1
High 1
Medium, low and unrated 11
- CVE-2018-5953The swiotlb_print_info function in lib/swiotlb.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address informat
- CVE-2018-5995The pcpu_embed_first_chunk function in mm/percpu.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address inform
- CVE-2018-11453A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions), SIMATIC STEP 7 (TIA Siemens AG SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Porta…
- CVE-2018-11454A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions), SIMATIC STEP 7 (TIA Siemens AG SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Porta…
- CVE-2018-11455A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4), Automation License Manager 6 (All versions < 6Siemens AG Automation License Manager 5, Automation License…
- CVE-2018-11456A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4).Siemens AG Automation License Manager
- CVE-2018-12885The randMod() function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random value with publicly read
- CVE-2018-15132An issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8.
- CVE-2018-15130ThinkSAAS through 2018-07-25 has XSS via the index.php?app=group&ac=create&ts=do groupdesc parameter.
- CVE-2018-1690IBM Rhapsody Model Manager 6.0.6 is vulnerable to cross-site scripting.IBM Rhapsody Model Manager
- CVE-2018-15129ThinkSAAS through 2018-07-25 has XSS via the index.php?app=article&ac=comment&ts=do content parameter.