CVEs published August 29, 2018
45 CVEs were published on August 29, 2018: 2 critical, 1 high.
- Published
- 45
- Critical
- 2
- High
- 1
- Medium
- 2
- Low
- 0
- Unrated
- 40
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Adobe Flash Player 30.0.0.134 and earlier
- 5
- Apache Software Foundation Apache Traffic Server
- 5
- Schneider Electric SE Modicon M221, all references, all ver…
- 4
- Adobe Acrobat and Reader versions 2018.011.20055 and earlie…
- 2
- Adobe Creative Cloud Desktop Application before
- 2
- Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and
- 2
- Adobe Photoshop CC 2018 before 19.1.6 and Photoshop CC 2017…
- 2
- Auth0-ASPNET-Owin · auth0-aspnet
- 1
- com.typesafe.akka:akka-actor_2.11 · com.typesafe.akka:akka-…
- 1
- github.com/grafana/grafana
- 1
Critical 2
- CVE-2018-7790An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firSchneider Electric SE Modicon M221, all references, all ver…
- CVE-2018-7791A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versionSchneider Electric SE Modicon M221, all references, all ver…
High 1
Medium, low and unrated 42
- CVE-2018-16115Lightbend Akka 2.5.x before 2.5.16 allows message disclosure and modification because of an RNG error.com.typesafe.akka:akka-actor_2.11 · com.typesafe.akka:akka-…
- CVE-2018-16132The image rendering component (createGenericPreview) of the Open Whisper Signal app through 2.29.0 for iOS fails to check for unreasonably l
- CVE-2018-16133Cybrotech CyBroHttpServer 1.0.3 allows Directory Traversal via a ../ in the URI.
- CVE-2018-16134Cybrotech CyBroHttpServer 1.0.3 allows XSS via a URI.
- CVE-2018-12240The Norton Identity Safe product prior to 5.3.0.976 may be susceptible to a privilege escalation issue via a hard coded IV, which is a type Symantec Norton Identity Safe for Android
- CVE-2018-7789An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 product (all references, aSchneider Electric SE Modicon M221, all references, all ver…
- CVE-2018-7795A Cross Protocol Injection vulnerability exists in Schneider Electric's PowerLogic (PM5560 prior to FW version 2.5.4) product.Schneider Electric SE PowerLogic - PM5560 prior to FW
- CVE-2017-17762XML external entity (XXE) vulnerability in Episerver 7 patch 4 and earlier allows remote attackers to read arbitrary files via a crafted DTD
- CVE-2018-12710An issue was discovered on D-Link DIR-601 2.02NA devices.
- CVE-2018-14768Various VIVOTEK FD8*, FD9*, FE9*, IB8*, IB9*, IP9*, IZ9*, MS9*, SD9*, and other devices before XXXXXX-VVTK-xx06a allow remote attackers to e
- CVE-2018-15562CMS ISWEB 3.5.3 has XSS via the ordineRis, sezioneRicerca, or oggettiRicerca parameter to index.php.
- CVE-2018-15746qemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service (guest crash) by leveraging mishandling of the seccomp
- CVE-2018-15907Technicolor (formerly RCA) TC8305C devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC
- CVE-2018-15912An issue was discovered in manjaro-update-system.sh in manjaro-system 20180716-1 on Manjaro Linux.
- CVE-2018-6597The Alcatel A30 device with a build fingerprint of TCL/5046G/MICKEY6US:7.0/NRD90M/J63:user/release-keys contains a hidden privilege escalati
- CVE-2018-6598An issue was discovered on Orbic Wonder Orbic/RC555L/RC555L:7.1.2/N2G47H/329100b:user/release-keys devices.
- CVE-2018-6599An issue was discovered on Orbic Wonder Orbic/RC555L/RC555L:7.1.2/N2G47H/329100b:user/release-keys devices, allowing attackers to obtain sen
- CVE-2018-14805ABB eSOMS version 6.0.2 may allow unauthorized access to the system when LDAP is set to allow anonymous authentication, and specific key valICS-CERT ABB eSOMS
- CVE-2018-15727Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember github.com/grafana/grafana
- CVE-2018-12799Adobe Acrobat and Reader versions 2018.011.20055 and earlier, 2017.011.30096 and earlier, and 2015.006.30434 and earlier have an untrusted pAdobe Acrobat and Reader versions 2018.011.20055 and earlie…
- CVE-2018-12806Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability.Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and
- CVE-2018-12807Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have an input validation bypass vulnerability.Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and
- CVE-2018-12808Adobe Acrobat and Reader versions 2018.011.20055 and earlier, 2017.011.30096 and earlier, and 2015.006.30434 and earlier have an out-of-bounAdobe Acrobat and Reader versions 2018.011.20055 and earlie…
- CVE-2018-12810Adobe Photoshop CC 2018 before 19.1.6 and Photoshop CC 2017 before 18.1.6 have a memory corruption vulnerability.Adobe Photoshop CC 2018 before 19.1.6 and Photoshop CC 2017…
- CVE-2018-12811Adobe Photoshop CC 2018 before 19.1.6 and Photoshop CC 2017 before 18.1.6 have a memory corruption vulnerability.Adobe Photoshop CC 2018 before 19.1.6 and Photoshop CC 2017…
- CVE-2018-12824Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability.Adobe Flash Player 30.0.0.134 and earlier
- CVE-2018-12825Adobe Flash Player 30.0.0.134 and earlier have a security bypass vulnerability.Adobe Flash Player 30.0.0.134 and earlier
- CVE-2018-12826Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability.Adobe Flash Player 30.0.0.134 and earlier
- CVE-2018-12827Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability.Adobe Flash Player 30.0.0.134 and earlier
- CVE-2018-12828Adobe Flash Player 30.0.0.134 and earlier have a "use of a component with a known vulnerability" vulnerability.Adobe Flash Player 30.0.0.134 and earlier
- CVE-2018-12829Adobe Creative Cloud Desktop Application before 4.6.1 has an improper certificate validation vulnerability.Adobe Creative Cloud Desktop Application before
- CVE-2018-1318Adding method ACLs in remap.config can cause a segfault when the user makes a carefully crafted request.Apache Software Foundation Apache Traffic Server
- CVE-2018-5003Adobe Creative Cloud Desktop Application before 4.5.5.342 (installer) has an insecure library loading (dll hijacking) vulnerability.Adobe Creative Cloud Desktop Application before
- CVE-2018-8004There are multiple HTTP smuggling and cache poisoning issues when clients making malicious requests interact with Apache Traffic Server (ATSApache Software Foundation Apache Traffic Server
- CVE-2018-8005When there are multiple ranges in a range request, Apache Traffic Server (ATS) will read the entire object from cache.Apache Software Foundation Apache Traffic Server
- CVE-2018-8022A carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault.Apache Software Foundation Apache Traffic Server
- CVE-2018-8040Pages that are rendered using the ESI plugin can have access to the cookie header when the plugin is configured not to allow access.Apache Software Foundation Apache Traffic Server
- CVE-2018-15121An issue was discovered in Auth0 auth0-aspnet and auth0-aspnet-owin.Auth0-ASPNET-Owin · auth0-aspnet
- CVE-2018-15880An issue was discovered in Joomla! before 3.8.12.
- CVE-2018-15881An issue was discovered in Joomla! before 3.8.12.
- CVE-2018-15882An issue was discovered in Joomla! before 3.8.12.
- CVE-2018-16062dwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial of service (heap-bas