CVEs published August 14, 2018
34 CVEs were published on August 14, 2018: 2 critical, 1 high.
- Published
- 34
- Critical
- 2
- High
- 1
- Medium
- 2
- Low
- 0
- Unrated
- 29
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Hewlett Packard Enterprise HPE 3PAR Service Processors
- 6
- Intel Multiple
- 3
- SAP BusinessObjects Business Intelligence
- 3
- Talos Sony
- 2
- Apache Software Foundation Apache HTTP Server
- 1
- Cisco Systems IOS and IOS XE
- 1
- Hewlett Packard Enterprise HP 1810-24G, HP 1810-48G, HP 181…
- 1
- Hewlett Packard Enterprise HPE XP P9000 Command View Advanc…
- 1
- Hewlett Packard Enterprise iLO 5 for HPE Gen10 Servers, iLO…
- 1
- mingw-w64
- 1
Critical 2
- CVE-2018-3937An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 fTalos Sony
- CVE-2018-3938An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5Talos Sony
High 1
Medium, low and unrated 31
- CVE-2018-12537In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and linThe Eclipse Foundation Eclipse Vert.x · io.vertx:vertx-core
- CVE-2018-12539In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM The Eclipse Foundation Eclipse OpenJ9
- CVE-2018-3620Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residIntel Multiple
- CVE-2018-3646Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residIntel Multiple
- CVE-2018-0131A vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticatedCisco Systems IOS and IOS XE
- CVE-2018-14348libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of inform
- CVE-2018-14424The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a
- CVE-2018-14429man-cgi before 1.16 allows Local File Inclusion via absolute path traversal, as demonstrated by a cgi-bin/man-cgi?/etc/passwd URI.
- CVE-2018-14888inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or thread subject.
- CVE-2018-14922Multiple cross-site scripting (XSS) vulnerabilities in Monstra CMS 3.0.4 allow remote attackers to inject arbitrary web script or HTML via t
- CVE-2018-2441Under certain conditions the SAP Change and Transport System (ABAP), SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNELSAP Change and Transport System
- CVE-2018-2442In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelligence report from BI Launchpad, the userSAP BusinessObjects Business Intelligence
- CVE-2018-2444SAP BusinessObjects Financial Consolidation, versions 10.0, 10.1, does not sufficiently encode user-controlled inputs, resulting in Cross-SiSAP BusinessObjects Financial Consolidation
- CVE-2018-2445AdminTools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allows an attacker to manipulate the vulnerable application to sSAP BusinessObjects Business Intelligence Platform
- CVE-2018-2446Admin tools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allow an unauthenticated user to read sensitive information (seSAP BusinessObjects Business Intelligence
- CVE-2018-2447SAP BusinessObjects Business Intelligence (Launchpad Web Intelligence), version 4.2, allows an attacker to execute crafted InfoObject querieSAP BusinessObjects Business Intelligence
- CVE-2018-2448Under certain conditions SAP SRM-MDM (CATALOG versions 3.0, 7.01, 7.02) utilities functionality allows an attacker to access information of SAP SRM-MDM CATALOG
- CVE-2018-2449SAP SRM MDM Catalog versions 3.73, 7.31, 7.32 in (SAP NetWeaver 7.3) - import functionality does not perform authentication checks for validSAP Supplier Relationship Management Master Data Management…
- CVE-2018-2450SAP MaxDB (liveCache), versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges to execute crafted database queries and theSAP MaxDB
- CVE-2018-2451XS Command-Line Interface (CLI) user sessions with the SAP HANA Extended Application Services (XS), version 1, advanced server may have an uSAP HANA Extended Application Services
- CVE-2018-5392mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLRmingw-w64
- CVE-2018-7077A security vulnerability in HPE XP P9000 Command View Advanced Edition (CVAE) Device Manager (DevMgr 8.5.0-00 and prior to 8.6.0-00), ConfigHewlett Packard Enterprise HPE XP P9000 Command View Advanc…
- CVE-2018-7093A security vulnerability in HPE Integrated Lights-Out 3 prior to v1.90, iLO 4 prior to v2.60, iLO 5 prior to v1.30, Moonshot Chassis ManagerHewlett Packard Enterprise iLO 5 for HPE Gen10 Servers, iLO…
- CVE-2018-7094A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-5.0.0.0-22913(GA).Hewlett Packard Enterprise HPE 3PAR Service Processors
- CVE-2018-7095A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7).Hewlett Packard Enterprise HPE 3PAR Service Processors
- CVE-2018-7096A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7).Hewlett Packard Enterprise HPE 3PAR Service Processors
- CVE-2018-7097A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7).Hewlett Packard Enterprise HPE 3PAR Service Processors
- CVE-2018-7098A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7).Hewlett Packard Enterprise HPE 3PAR Service Processors
- CVE-2018-7099A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7).Hewlett Packard Enterprise HPE 3PAR Service Processors
- CVE-2018-7100A potential security vulnerability has been identified in HPE OfficeConnect 1810 Switch Series (HP 1810-24G - P.2.22 and previous versions, Hewlett Packard Enterprise HP 1810-24G, HP 1810-48G, HP 181…
- CVE-2016-4975mod_userdir CRLF injectionApache Software Foundation Apache HTTP Server