CVEs published August 21, 2018
28 CVEs were published on August 21, 2018: 0 critical, 1 high.
- Published
- 28
- Critical
- 0
- High
- 1
- Medium
- 2
- Low
- 0
- Unrated
- 25
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Huawei Technologies Co. USG2205BSR; USG2220BSR; USG5120BSR;…
- 3
- ICS-CERT DeltaV
- 2
- The Node.js Project Node.js
- 2
- APT 1.6.x before 1.6.4 and 1.7.x before 1.7.0~alpha3
- 1
- Belkin Wemo Insight Smart Plug
- 1
- elefant/cms
- 1
- github.com/traefik/traefik
- 1
- Intel lldptool
- 1
- Linux
- 1
- Ubuntu base-files
- 1
High 1
Medium, low and unrated 27
- CVE-2018-15667An issue was discovered in Bloop Airmail 3 3.5.9 for macOS.
- CVE-2018-15668An issue was discovered in Bloop Airmail 3 3.5.9 for macOS.
- CVE-2018-15669An issue was discovered in Bloop Airmail 3 3.5.9 for macOS.
- CVE-2018-15670An issue was discovered in Bloop Airmail 3 3.5.9 for macOS.
- CVE-2018-15671An issue was discovered in the HDF HDF5 1.10.2 library.
- CVE-2018-10932lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed.Intel lldptool
- CVE-2018-15660An issue was discovered in the Ola Money (aka com.olacabs.olamoney) application 1.9.0 for Android.
- CVE-2018-15661An issue was discovered in the Ola Money (aka com.olacabs.olamoney) application 1.9.0 for Android.
- CVE-2018-15481Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices using firmware version 5.1.x bef
- CVE-2018-15528Reflected Cross-Site Scripting exists in the Java System Solutions SSO plugin 4.0.13.1 for BMC MyIT.
- CVE-2018-15533A reflected cross-site scripting vulnerability exists in Geutebrueck re_porter 16 before 7.8.974.20 by appending a query string to /modifych
- CVE-2018-15534Geutebrueck re_porter 16 before 7.8.974.20 has a possibility of unauthenticated access to sensitive information including usernames and hash
- CVE-2018-6557Insecure temporary file use in base-filesUbuntu base-files
- CVE-2018-15607In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can
- CVE-2018-14793DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable to a buffer overflow exploit through an open communication port to alloICS-CERT DeltaV
- CVE-2018-14795DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable due to improper path validation which may allow an attacker to replace ICS-CERT DeltaV
- CVE-2018-6692Wemo Insight Smart Plug - Remote Code Execution vulnerabilityBelkin Wemo Insight Smart Plug
- CVE-2017-17305Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a BlHuawei Technologies Co. USG2205BSR; USG2220BSR; USG5120BSR;…
- CVE-2017-17311Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a DoHuawei Technologies Co. USG2205BSR; USG2220BSR; USG5120BSR;…
- CVE-2017-17312Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a DoHuawei Technologies Co. USG2205BSR; USG2220BSR; USG5120BSR;…
- CVE-2018-12115In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding (recognized by Node.js under the names `'ucs2'`,The Node.js Project Node.js
- CVE-2018-7166In all versions of Node.js 10 prior to 10.9.0, an argument processing flaw can cause `Buffer.alloc()` to return uninitialized memory.The Node.js Project Node.js
- CVE-2018-15601apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" prelefant/cms
- CVE-2018-15603An issue was discovered in Victor CMS through 2018-05-10.
- CVE-2018-15598Containous Traefik 1.6.x before 1.6.6, when --api is used, exposes the configuration and secret if authentication is missing and the API's pgithub.com/traefik/traefik
- CVE-2018-15599The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because userna
- CVE-2018-0501The mirror:// method implementation in Advanced Package Tool (APT) 1.6.x before 1.6.4 and 1.7.x before 1.7.0~alpha3 mishandles gpg signatureAPT 1.6.x before 1.6.4 and 1.7.x before 1.7.0~alpha3