CVEs published September 20, 2018
43 CVEs were published on September 20, 2018: 2 critical, 3 high.
- Published
- 43
- Critical
- 2
- High
- 3
- Medium
- 4
- Low
- 0
- Unrated
- 34
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- 12
- Micro Focus ArcSight Management Center
- 5
- Rockwell Automation RSLinx Classic
- 3
- Samsung SmartThings Hub STH-ETH-250
- 2
- IBM Business Process Manager
- 1
- IBM Sterling B2B Integrator
- 1
- Qualcomm Snapdragon Automobile, Snapdragon Mobile
- 1
- Qualcomm Snapdragon Mobile, Snapdragon Wear
- 1
- Qualcomm SSnapdragon Automobile, Snapdragon Mobile, Snapdra…
- 1
- Tec4Data SmartCooler
- 1
Critical 2
- CVE-2018-3864An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub SSamsung SmartThings Hub STH-ETH-250
- CVE-2018-3865An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub SSamsung SmartThings Hub STH-ETH-250
High 3
- CVE-2018-6504MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal VulnerabilityMicro Focus ArcSight Management Center
- CVE-2018-6505MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal VulnerabilityMicro Focus ArcSight Management Center
- CVE-2018-6500MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal VulnerabilityMicro Focus ArcSight Management Center
Medium, low and unrated 38
- CVE-2018-14592The CWJoomla CW Article Attachments PRO extension before 2.0.7 and CW Article Attachments FREE extension before 1.0.6 for Joomla! allow SQL
- CVE-2018-14821Rockwell Automation RSLinx Classic Versions 4.00.01 and prior.Rockwell Automation RSLinx Classic
- CVE-2018-14827Rockwell Automation RSLinx Classic Versions 4.00.01 and prior.Rockwell Automation RSLinx Classic
- CVE-2018-14829Rockwell Automation RSLinx Classic Versions 4.00.01 and prior.Rockwell Automation RSLinx Classic
- CVE-2018-15832upc.exe in Ubisoft Uplay Desktop Client versions 63.0.5699.0 allows remote attackers to execute arbitrary code.
- CVE-2018-16282A command injection vulnerability in the web server functionality of Moxa EDR-810 V4.2 build 18041013 allows remote attackers to execute arb
- CVE-2018-16752LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feat
- CVE-2018-17282An issue was discovered in Exiv2 v0.26.
- CVE-2018-14796Tec4Data SmartCooler, all versions prior to firmware 180806, the device responds to a remote unauthenticated reboot command that may be usedTec4Data SmartCooler
- CVE-2018-6502MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal VulnerabilityMicro Focus ArcSight Management Center
- CVE-2018-6503MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal VulnerabilityMicro Focus ArcSight Management Center
- CVE-2018-6501Potential security vulnerability of Insufficient Access Controls has been identified in ArcSight Management Center (ArcMC) for versions prio
- CVE-2018-1674IBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 through 18.0.0.1 are vulnerable to SQL injection.IBM Business Process Manager
- CVE-2018-1800IBM Sterling B2B Integrator Standard Edition 5.2.6.0 and 6.2.6.1 could allow a local user to obtain highly sensitive information during a shIBM Sterling B2B Integrator
- CVE-2018-17254The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter.
- CVE-2017-18280In Snapdragon (Automobile, Mobile, Wear) in version MDM9607, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 4Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2017-18301In Small Cell SoC and Snapdragon (Automobile, Mobile, Wear) in version FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8909W, SD 425, SD 427
- CVE-2017-18302In Snapdragon (Automobile ,Mobile) in version MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835,Qualcomm Snapdragon Automobile, Snapdragon Mobile
- CVE-2017-18314In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-11267In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SQualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-11268In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-11269In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD Qualcomm SSnapdragon Automobile, Snapdragon Mobile, Snapdra…
- CVE-2018-11277In Snapdragon (Automobile, Mobile, Wear) in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-11285In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SDQualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-11287In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SDQualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-11290In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205,Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-11291In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6564, QCA6Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-11292In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 2Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-11982In Snapdragon (Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SDQualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2018-5837In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205,Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-5871In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdrag…
- CVE-2018-17243Global Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection.
- CVE-2018-17232SQL injection vulnerability in archivebot.py in docmarionum1 Slack ArchiveBot (aka slack-archive-bot) before 2018-09-19 allows remote attack
- CVE-2018-17233A SIGFPE signal is raised in the function H5D__create_chunk_file_map_hyper() of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an
- CVE-2018-17234Memory leak in the H5O__chunk_deserialize() function in H5Ocache.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial
- CVE-2018-17235The function mp4v2::impl::MP4Track::FinishSdtp() in mp4track.cpp in libmp4v2 2.1.0 mishandles compatibleBrand while processing a crafted mp4
- CVE-2018-17236The function MP4Free() in mp4property.cpp in libmp4v2 2.1.0 internally calls free() on a invalid pointer, raising a SIGABRT signal.
- CVE-2018-17237A SIGFPE signal is raised in the function H5D__chunk_set_info_real() of H5Dchunk.c in the HDF HDF5 1.10.3 library during an attempted parse