CVEs published September 12, 2018
69 CVEs were published on September 12, 2018: 0 critical, 1 high.
- Published
- 69
- Critical
- 0
- High
- 1
- Medium
- 5
- Low
- 0
- Unrated
- 63
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- FreeBSD
- 5
- Intel(R) Active Management Technology
- 3
- Intel(R) Extreme Tuning Utility
- 3
- Talos ERPNext
- 3
- elefant/cms
- 2
- Huawei Technologies Co. ALP-L09
- 2
- Avaya IP Office
- 1
- Huawei Technologies Co. B315s-22
- 1
- Huawei Technologies Co. G9 Lite, Honor 5A, Honor 6X, Honor
- 1
- Huawei Technologies Co. Leland-AL00, Leland-AL00A
- 1
High 1
Medium, low and unrated 68
- CVE-2018-16977Monstra CMS V3.0.4 has an information leakage risk (e.g., PATH, DOCUMENT_ROOT, and SERVER_ADMIN) in libraries/Gelato/ErrorHandler/Resources/
- CVE-2018-16978Monstra CMS V3.0.4 has XSS when ones tries to register an account with a crafted password parameter to users/registration, a different vulne
- CVE-2018-16979Monstra CMS V3.0.4 allows HTTP header injection in the plugins/captcha/crypt/cryptographp.php cfg parameter, a related issue to CVE-2012-294
- CVE-2018-16980dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image_tools/index.jsp fieldName and inode parameters.
- CVE-2018-16981stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__out_gif_code function
- CVE-2018-16976Gitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly restrict access to a Git repository that is in
- CVE-2018-16974An issue was discovered in Elefant CMS before 2.0.7.elefant/cms
- CVE-2018-16975An issue was discovered in Elefant CMS before 2.0.7.elefant/cms
- CVE-2018-16962Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges.
- CVE-2018-16970Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to download non-purchased course fil
- CVE-2018-16971Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to access non-purchased course conte
- CVE-2018-12148Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated user to potentiallyIntel(R) Driver & Support Assistant
- CVE-2018-12149Buffer overflow in input handling in Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially deny servicIntel(R) Extreme Tuning Utility
- CVE-2018-12150Escalation of privilege in Installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially executeIntel(R) Extreme Tuning Utility
- CVE-2018-12151Buffer overflow in installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially cause a buffer Intel(R) Extreme Tuning Utility
- CVE-2018-12160DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticatedIntel(R) Data Migration Software
- CVE-2018-12162Directory permissions in the Intel OpenVINO Toolkit for Windows before version 2018.1.265 may allow an authenticated user to potentially exeIntel(R) OpenVINO(TM) Toolkit for Windows
- CVE-2018-12163A DLL injection vulnerability in the Intel IoT Developers Kit 4.0 installer may allow an authenticated user to potentially escalate privilegIntel IoT Developers Kit
- CVE-2018-12168Privilege escalation in file permissions in Intel Computing Improvement Program before version 2.2.0.03942 may allow an authenticated user tIntel(R) Computing Improvement Program
- CVE-2018-12171Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to Intel(R) Baseboard Management Controller (BMC) firmware
- CVE-2018-12175Default install directory permissions in Intel Distribution for Python (IDP) version 2018 may allow an unprivileged user to escalate privileIntel(R) Distribution for Python
- CVE-2018-12176Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in infoIntel(R) NUC Kits and Intel(R) Compute Cards
- CVE-2018-3616Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unautIntel(R) Active Management Technology
- CVE-2018-3643A vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) bIntel(R) Converged Security and Management Engine (CSME) an…
- CVE-2018-3655A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted ExIntel(R) CSME before
- CVE-2018-3657Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execIntel(R) Active Management Technology
- CVE-2018-3658Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioneIntel(R) Active Management Technology
- CVE-2018-3659A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauIntel(R) Platform Trust Technology
- CVE-2018-3669A STOP error (BSoD) in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters may allow an unauthentIntel(R) Centrino(R) Wireless-N and Intel(R) Centrino(R) Ad…
- CVE-2018-3679Escalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow an unauthorized remote unauthenticated useIntel(R) Data Center Manager SDK
- CVE-2018-3686Code injection vulnerability in INTEL-SA-00086 Detection Tool before version 1.2.7.0 may allow a privileged user to potentially execute arbiINTEL-SA-00086 Detection Tool
- CVE-2018-13411An issue was discovered in Zoho ManageEngine Desktop Central before 10.0.282.
- CVE-2018-13412An issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10.0.282.
- CVE-2018-15502Insecure permissions in Lone Wolf Technologies loadingDOCS 2018-08-13 allow remote attackers to download any confidential files via https re
- CVE-2018-15834In radare2 before 2.9.0, a heap overflow vulnerability exists in the read_module_referenced_functions function in libr/anal/flirt.c via a cr
- CVE-2018-16388e107_web/js/plupload/upload.php in e107 2.1.8 allows remote attackers to execute arbitrary PHP code by uploading a .php filename with the im
- CVE-2018-16389e107_admin/banlist.php in e107 2.1.8 allows SQL injection via the old_ip parameter.
- CVE-2018-16605D-Link DIR-600M devices allow XSS via the Hostname and Username fields in the Dynamic DNS Configuration page.
- CVE-2018-16726razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component.
- CVE-2018-16727razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component.
- CVE-2018-16728feindura 2.0.7 allows XSS via the tags field of a new page created at index.php?category=0&page=new.
- CVE-2018-16729Pluck 4.7.7 allows XSS via an SVG file that contains Javascript in a SCRIPT element, and is uploaded via pages->manage under admin.php?actio
- CVE-2018-7572Pulse Secure Client 9.0R1 and 5.3RX before 5.3R5, when configured to authenticate VPN users during Windows Logon, can allow attackers to byp
- CVE-2017-18347Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the devi
- CVE-2018-6924In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p3, 11.1-RELEASE-p14, 10.4-STABLE, and 10.4-RELEASE-p12, insufficient validation in the ELF headFreeBSD
- CVE-2018-7906Some Huawei smart phones with software of Leland-AL00 8.0.0.114(C636), Leland-AL00A 8.0.0.171(C00) have a denial of service (DoS) vulnerabilHuawei Technologies Co. Leland-AL00, Leland-AL00A
- CVE-2018-7921Huawei B315s-22 products with software of 21.318.01.00.26 have an information leak vulnerability.Huawei Technologies Co. B315s-22
- CVE-2018-7922Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to laHuawei Technologies Co. ALP-L09
- CVE-2018-7923Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to laHuawei Technologies Co. ALP-L09
- CVE-2018-7939Huawei smart phones G9 Lite, Honor 5A, Honor 6X, Honor 8 with the versions before VNS-L53C605B120CUSTC605D103, the versions before CAM-L03C6Huawei Technologies Co. G9 Lite, Honor 5A, Honor 6X, Honor
- CVE-2017-1082In FreeBSD 11.x before 11.1-RELEASE and 10.x before 10.4-RELEASE, the qsort algorithm has a deterministic recursion pattern.FreeBSD
- CVE-2017-1083In FreeBSD before 11.2-RELEASE, a stack guard-page is available but is disabled by default.FreeBSD
- CVE-2017-1084In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections afforded by the guardFreeBSD
- CVE-2017-1085In FreeBSD before 11.2-RELEASE, an application which calls setrlimit() to increase RLIMIT_STACK may turn a read-only memory region below theFreeBSD
- CVE-2018-13799A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior (All versions < V3.14-P021).Siemens AG SIMATIC WinCC OA V3.14 and prior
- CVE-2018-13806A vulnerability has been identified in SIEMENS TD Keypad Designer (All versions).Siemens AG SIEMENS TD Keypad Designer
- CVE-2018-13807A vulnerability has been identified in SCALANCE X300 (All versions < V4.0.0), SCALANCE X408 (All versions < V4.0.0), SCALANCE X414 (All versSiemens AG SCALANCE X300, SCALANCE X408, SCALANCE X414
- CVE-2018-1773IBM Datacap Fastdoc Capture 9.1.1, 9.1.3, and 9.1.4 could allow an authenticated user to bypass future authentication mechanisms once the inIBM Datacap
- CVE-2018-3882An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6.
- CVE-2018-3883An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6.Talos ERPNext
- CVE-2018-3884An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6.Talos ERPNext
- CVE-2018-3885An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6.Talos ERPNext
- CVE-2018-16950Inteno DG400 WU7U_ELION3.11.6-170614_1328 devices allow remote attackers to cause a denial of service (connectivity loss) via a series of pa
- CVE-2018-16946LG LNB*, LND*, LNU*, and LNV* smart network camera devices have broken access control.
- CVE-2018-16947An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2.
- CVE-2018-16948An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2.
- CVE-2018-16949An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2.
- CVE-2018-16951xunfeng 0.2.0 allows command execution via CSRF because masscan.py mishandles backquote characters, a related issue to CVE-2018-16832.