CVEs published September 21, 2018
63 CVEs were published on September 21, 2018: 6 critical, 9 high.
- Published
- 63
- Critical
- 6
- High
- 9
- Medium
- 0
- Low
- 0
- Unrated
- 48
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- Samsung SmartThings Hub STH-ETH-250
- 8
- Avaya Orchestration Designer
- 2
- IBM DB2 for Linux, UNIX and Windows
- 2
- [UNKNOWN] haproxy
- 1
- [UNKNOWN] smart_proxy_dynflow · smart_proxy_dynflow
- 1
- Apache Software Foundation Apache Mesos · org.apache.mesos:…
- 1
- browserify-hmr
- 1
- cn.hutool:hutool-parent · cn.hutool:hutool-all +1
- 1
- parcel-bundler
- 1
- wallabag/wallabag
- 1
Critical 6
- CVE-2018-3894An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings HuSamsung SmartThings Hub STH-ETH-250
- CVE-2018-3873An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETSamsung SmartThings Hub STH-ETH-250
- CVE-2018-3874An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETSamsung SmartThings Hub STH-ETH-250
- CVE-2018-3876An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETSamsung SmartThings Hub STH-ETH-250
- CVE-2018-3877An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETSamsung SmartThings Hub STH-ETH-250
- CVE-2018-14643An authentication bypass flaw was found in the smart_proxy_dynflow component used by Foreman.[UNKNOWN] smart_proxy_dynflow · smart_proxy_dynflow
High 9
- CVE-2018-15612Orchestration Designer Runtime Config CSRFAvaya Orchestration Designer
- CVE-2018-15613Orchestration Designer Runtime Config XSSAvaya Orchestration Designer
- CVE-2018-3906An exploitable stack-based buffer overflow vulnerability exists in the retrieval of a database field in video-core's HTTP server of Samsung Samsung SmartThings Hub STH-ETH-250
- CVE-2018-3913An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Sam
- CVE-2018-3914An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the SamSamsung SmartThings Hub STH-ETH-250
- CVE-2018-3915An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the SamSamsung SmartThings Hub STH-ETH-250
- CVE-2018-14645A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2.[UNKNOWN] haproxy
- CVE-2018-1710IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 tool db2licm is affected by buffer overflow vulnerabiIBM DB2 for Linux, UNIX and Windows
- CVE-2018-1711IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to to gain privileges dIBM DB2 for Linux, UNIX and Windows
Medium, low and unrated 48
- CVE-2018-14889CouchDB in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local code execution vulnerability.
- CVE-2018-14890Vectra Networks Cognito Brain and Sensor before 4.2 contains a cross-site scripting (XSS) vulnerability in the Web Management Console.
- CVE-2018-14891Management Console in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local privilege escalation vulnerability.
- CVE-2018-12169Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Process
- CVE-2018-17317FruityWifi (aka PatatasFritas/PatataWifi) 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the io_mode,
- CVE-2018-17320An issue was discovered in UCMS 1.4.6.
- CVE-2013-4451gitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via vectors involving world-writable permissions when
- CVE-2013-7203gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when ru
- CVE-2018-12511In the mintToken function of a smart contract implementation for Substratum (SUB), an Ethereum ERC20 token, the administrator can control mi
- CVE-2018-13111There exists a partial Denial of Service vulnerability in Wanscam HW0021 IP Cameras.
- CVE-2018-14730An issue was discovered in Browserify-HMR.browserify-hmr
- CVE-2018-14731An issue was discovered in HMRServer.js in Parcel parcel-bundler.parcel-bundler
- CVE-2018-14732An issue was discovered in lib/Server.js in webpack-dev-server before 3.1.6.webpack-dev-server
- CVE-2018-16821SeaCMS 6.64 allows arbitrary directory listing via upload/admin/admin_template.php?path=../templets/../../ requests.
- CVE-2018-16822SeaCMS 6.64 allows SQL Injection via the upload/admin/admin_video.php order parameter.
- CVE-2018-16833Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI.
- CVE-2018-16965In Zoho ManageEngine SupportCenter Plus before 8.1 Build 8109, there is HTML Injection and Stored XSS via the /ServiceContractDef.do contrac
- CVE-2018-17001On the RICOH SP 4510SF printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the e
- CVE-2018-17002On the RICOH MP 2001 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the ent
- CVE-2018-17003In LimeSurvey 3.14.7, HTML Injection and Stored XSS have been discovered in the appendix via the surveyls_title parameter to /index.php?r=ad
- CVE-2018-17050The mintToken function of a smart contract implementation for PolyAi (AI), an Ethereum token, has an integer overflow that allows the owner
- CVE-2018-17141HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JP
- CVE-2018-17173LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail.
- CVE-2018-17174A stack-based buffer overflow was discovered in the xtimor NMEA library (aka nmealib) 0.5.3.
- CVE-2018-11352The Wallabag application 2.2.3 to 2.3.2 is affected by one cross-site scripting (XSS) vulnerability that is stored within the configuration wallabag/wallabag
- CVE-2018-14688An issue was discovered in Subsonic 6.1.1.
- CVE-2018-14689An issue was discovered in Subsonic 6.1.1.
- CVE-2018-14690An issue was discovered in Subsonic 6.1.1.
- CVE-2018-14691An issue was discovered in Subsonic 6.1.1.
- CVE-2018-16281The DEISER "Profields - Project Custom Fields" app before 6.0.2 for Jira has Incorrect Access Control.
- CVE-2018-16597An issue was discovered in the Linux kernel before 4.8.
- CVE-2018-16793Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/log
- CVE-2018-9282An XSS issue was discovered in Subsonic Media Server 6.1.1.
- CVE-2018-11240An issue was discovered on SoftCase T-Router build 20112017 devices.
- CVE-2018-11241An issue was discovered on SoftCase T-Router build 20112017 devices.
- CVE-2018-16784DedeCMS 5.7 SP2 allows XML injection, and resultant remote code execution, via a "<file type='file' name='../" substring.
- CVE-2018-16786DedeCMS 5.7 SP2 allows XSS via an onhashchange attribute in the msg parameter to /plus/feedback_ajax.php.
- CVE-2018-1685IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability in db2cacpy that could
- CVE-2018-8023Apache Mesos can be configured to require authentication to call the Executor HTTP API using JSON Web Token (JWT).Apache Software Foundation Apache Mesos · org.apache.mesos:…
- CVE-2018-17292An issue was discovered in WAVM before 2018-09-16.
- CVE-2018-17293An issue was discovered in WAVM before 2018-09-16.
- CVE-2018-17294The matchCurrentInput function inside lou_translateString.c of Liblouis prior to 3.7 does not check the input string's length, allowing atta
- CVE-2018-17297The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequcn.hutool:hutool-parent · cn.hutool:hutool-all +1
- CVE-2018-17298An issue was discovered in Enalean Tuleap before 10.5.
- CVE-2018-17300Stored XSS exists in CuppaCMS through 2018-09-03 via an administrator/#/component/table_manager/view/cu_menus section name.
- CVE-2018-17301Reflected XSS exists in client/res/templates/global-search/name-field.tpl in EspoCRM 5.3.6 via /#Account in the search panel.
- CVE-2018-17302Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /#Email/view saved draft message.
- CVE-2018-17283Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /opu