CVEs published September 24, 2018
27 CVEs were published on September 24, 2018: 0 critical, 2 high.
- Published
- 27
- Critical
- 0
- High
- 2
- Medium
- 1
- Low
- 0
- Unrated
- 24
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Samsung Galaxy Apps
- 3
- McAfee True Key
- 2
- Samsung Email
- 2
- Avaya Call Management System Supervisor
- 1
- Honeywell Mobile Computers
- 1
- Samsung Internet Browser
- 1
- Samsung Members
- 1
- Samsung Notes
- 1
- TGServiceInterface
- 1
High 2
Medium, low and unrated 25
- CVE-2018-10496This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Internet Browser Fixed in versioSamsung Internet Browser
- CVE-2018-10497This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Email Fixed in version 5.0.02.16.Samsung Email
- CVE-2018-10498This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Samsung Email Fixed in version 5.Samsung Email
- CVE-2018-10499This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy Apps Fixed in version 6.4.Samsung Galaxy Apps
- CVE-2018-10500This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Galaxy Apps Fixed in version 6.4.0.1Samsung Galaxy Apps
- CVE-2018-10501This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Notes Fixed in version 2.0.02.31.Samsung Notes
- CVE-2018-10502This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Galaxy Apps Fixed in version 4.2.18.Samsung Galaxy Apps
- CVE-2018-11614This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Samsung Members Fixed in version 2.4.25.Samsung Members
- CVE-2018-12975The random() function of the smart contract implementation for CryptoSaga, an Ethereum game, generates a random value with publicly readable
- CVE-2018-13140Druide Antidote through 9.5.1 on Windows and Linux allows remote code execution through the update mechanism by leveraging use of HTTP to do
- CVE-2018-16283The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter.
- CVE-2018-16299The Localize My Post plugin 1.0 for WordPress allows Directory Traversal via the ajax/include.php file parameter.
- CVE-2018-17107In Tgstation tgstation-server 3.2.4.0 through 3.2.1.0 (fixed in 3.2.5.0), active logins would be cached, allowing subsequent logins to succeTGServiceInterface
- CVE-2018-17281There is a stack consumption vulnerability in the res_http_websocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x
- CVE-2018-14825On Honeywell Mobile Computers (CT60 running Android OS 7.1, CN80 running Android OS 7.1, CT40 running Android OS 7.1, CK75 running Android OHoneywell Mobile Computers
- CVE-2015-8298Multiple SQL injection vulnerabilities in the login page in RXTEC RXAdmin UPDATE 06 / 2012 allow remote attackers to execute arbitrary SQL c
- CVE-2018-17432A NULL pointer dereference in H5O_sdspace_encode() in H5Osdspace.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial
- CVE-2018-17433A heap-based buffer overflow in ReadGifImageDesc() in gifread.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of
- CVE-2018-17435A heap-based buffer over-read in H5O_attr_decode() in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of
- CVE-2018-17436ReadCode() in decompress.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (invalid write access) via a
- CVE-2018-17438A SIGFPE signal is raised in the function H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3 library during an attempted parse o
- CVE-2018-17439An issue was discovered in the HDF HDF5 1.10.3 library.
- CVE-2018-6682True Key (TK) - Cross Site Scripting ExposureMcAfee True Key
- CVE-2018-17434A SIGFPE signal is raised in the function apply_filters() of h5repack_filters.c in the HDF HDF5 through 1.10.3 library during an attempted p
- CVE-2018-17437Memory leak in the H5O_dtype_decode_helper() function in H5Odtype.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denia