CVEs published August 22, 2018
25 CVEs were published on August 22, 2018: 0 critical, 4 high. 1 is now in CISA KEV.
- Published
- 25
- Critical
- 0
- High
- 4
- Medium
- 13
- Low
- 0
- Unrated
- 8
- Now in CISA KEV
- 1
- Fix available
- 3
Most affected products
- The Samba Team samba
- 5
- [UNKNOWN] gnutls
- 3
- Philips IntelliSpace Cardiovascular (ISCV) products
- 2
- Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs
- 2
- Apache Software Foundation Apache Cayenne · org.apache.caye…
- 1
- Apache Software Foundation Apache Struts · org.apache.strut…
- 1
- Fabrice Bellard libbpg
- 1
- IBM API Connect
- 1
- Red Hat Ansible Tower
- 1
- Red Hat ansible-tower
- 1
High 4
- CVE-2017-2635A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives.The libvirt Project libvirt
- CVE-2017-2627A flaw was found in openstack-tripleo-common as shipped with Red Hat Openstack Enterprise 10 and 11.Red Hat openstack-tripleo-common
- CVE-2018-10884Ansible Tower before versions 3.1.8 and 3.2.6 is vulnerable to cross-site request forgery (CSRF) in awx/api/authentication.py.Red Hat ansible-tower
- CVE-2018-11776Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (eiApache Software Foundation Apache Struts · org.apache.strut…
Medium, low and unrated 21
- CVE-2016-9605A flaw was found in cobbler software component version 2.6.11-1.The cobbler Project cobbler · cobbler
- CVE-2017-2575A vulnerability was found while fuzzing libbpg 0.9.7.Fabrice Bellard libbpg
- CVE-2018-11758This affects Apache Cayenne 4.1.M1, 3.2.M1, 4.0.M2 to 4.0.M5, 4.0.B1, 4.0.B2, 4.0.RC1, 3.1, 3.1.1, 3.1.2.Apache Software Foundation Apache Cayenne · org.apache.caye…
- CVE-2018-14787In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 2.x or prior and Xcelera Version 4.1 or prior), an attacker with escalPhilips IntelliSpace Cardiovascular (ISCV) products
- CVE-2018-14789In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 3.1 or prior and Xcelera Version 4.1 or prior), an unquoted search patPhilips IntelliSpace Cardiovascular (ISCV) products
- CVE-2018-14799In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, the PageWriter device does not sanitize datPhilips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs
- CVE-2018-14801In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser passworPhilips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs
- CVE-2018-10858A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing.The Samba Team samba
- CVE-2018-10918A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer.The Samba Team samba
- CVE-2018-10919The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks.The Samba Team samba
- CVE-2018-5235Norton Utilities (prior to 16.0.3.44) may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an Symantec Norton Utilities
- CVE-2018-5238Norton Power Eraser (prior to 5.3.0.24) and SymDiag (prior to 2.1.242) may be susceptible to a DLL Preloading vulnerability, which is a typeSymantec Norton Power Eraser · Symantec SymDiag
- CVE-2017-2662A flaw was found in Foreman's katello plugin version 3.4.5.The Foreman Project foreman katello plugin · katello
- CVE-2017-7528Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection.Red Hat Ansible Tower
- CVE-2017-7513It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host Red Hat Satellite
- CVE-2018-1139A flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabThe Samba Team samba
- CVE-2018-1140A missing input sanitization flaw was found in the implementation of LDP database used for the LDAP server.The Samba Team samba
- CVE-2018-10844It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack.[UNKNOWN] gnutls
- CVE-2018-10845It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack.[UNKNOWN] gnutls
- CVE-2018-10846A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found.[UNKNOWN] gnutls
- CVE-2018-1599IBM API Connect 5.0.0.0 through 5.0.8.3 could allow a remote attacker to hijack the clicking action of the victim.IBM API Connect