CVEs published August 9, 2018
14 CVEs were published on August 9, 2018: 1 critical, 3 high. 1 is now in CISA KEV.
- Published
- 14
- Critical
- 1
- High
- 3
- Medium
- 1
- Low
- 0
- Unrated
- 9
- Now in CISA KEV
- 1
- Fix available
- 2
Most affected products
- PostgreSQL Global Development Group postgresql
- 2
- [UNKNOWN] vdsm
- 1
- FreeBSD
- 1
- laravel/framework
- 1
- Micro Focus eDirectory
- 1
- Micro Focus NetIQ eDirectory Versions prior to 9.1.1 HF1
- 1
- The Cobbler Project cobbler · cobbler
- 1
Critical 1
High 3
- CVE-2018-10925It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certainPostgreSQL Global Development Group postgresql
- CVE-2018-10915A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between coPostgreSQL Global Development Group postgresql
- CVE-2018-15133In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potelaravel/framework
Medium, low and unrated 10
- CVE-2018-7686Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage.Micro Focus eDirectory
- CVE-2018-7692Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1.Micro Focus NetIQ eDirectory Versions prior to 9.1.1 HF1
- CVE-2018-0429Stack-based buffer overflow in the Cisco Thor decoder before commit 18de8f9f0762c3a542b1122589edb8af859d9813 allows local users to cause a d
- CVE-2018-14735An Information Exposure issue was discovered in Hitachi Command Suite 8.5.3.
- CVE-2018-10908It was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without limiting resources.[UNKNOWN] vdsm
- CVE-2018-15181JioFi 4G Hotspot M2S devices allow attackers to cause a denial of service (secure configuration outage) via an XSS payload in the SSID name
- CVE-2018-15182PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields.
- CVE-2018-15183PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the Full Name and Title fields.
- CVE-2018-15184PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795.
- CVE-2018-6922One of the data structures that holds TCP segments in all versions of FreeBSD prior to 11.2-RELEASE-p1, 11.1-RELEASE-p12, and 10.4-RELEASE-pFreeBSD