CVEs published October 5, 2018
134 CVEs were published on October 5, 2018: 2 critical, 5 high.
- Published
- 134
- Critical
- 2
- High
- 5
- Medium
- 5
- Low
- 0
- Unrated
- 122
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- Cisco WebEx WRF Player
- 14
- Cisco IOS XE Software
- 11
- Cisco IOS Software
- 10
- Cisco Adaptive Security Appliance (ASA) Software
- 5
- Cisco RV130W Wireless-N Multifunction VPN Router Firmware
- 4
- Cisco SD-WAN Solution
- 4
- Cisco Data Center Network Manager
- 3
- Cisco Enterprise NFV Infrastructure Software
- 3
- Cisco HyperFlex HX-Series
- 3
- Cisco Prime Infrastructure
- 3
Critical 2
High 5
- CVE-2018-11064Dell EMC Unity OE versions 4.3.0.x and 4.3.1.x and UnityVSA OE versions 4.3.0.x and 4.3.1.x contains an Incorrect File Permissions vulnerabiDell EMC Unity · Dell EMC UnityVSA
- CVE-2018-11081Pivotal Operations Manager UAA config - temp Ram Diskpivotal-ops-manager
- CVE-2018-11083Bosh accepts refresh tokens in place of an access tokenCloud Foundry BOSH
- CVE-2018-1647IBM QRadar Incident Forensics 7.2 and 7.3 does not properly restrict the size or amount of resources requested which could allow an unauthenIBM QRadar Incident Forensics
- CVE-2018-1649IBM QRadar Incident Forensics 7.2 and 7.3 could allow a remote attacker to traverse directories on the system.IBM QRadar Incident Forensics
Medium, low and unrated 127
- CVE-2018-11082Cloud Foundry UAA MFA does not prevent brute force of MFA codeCloud Foundry UAA Release · Cloud Foundry UAA
- CVE-2018-13042The 1Password application 6.8 for Android is affected by a Denial Of Service vulnerability.
- CVE-2018-11797In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation whenApache Software Foundation Apache PDFBox · org.apache.pdfbo…
- CVE-2018-11778UnixAuthenticationService in Apache Ranger 1.2.0 was updated to correctly handle user input to avoid Stack-based buffer overflow.Apache Software Foundation Apache Ranger · org.apache.range…
- CVE-2018-0405Cisco RV180W Wireless-N Multifunction VPN Router Directory Path Traversal VulnerabilityCisco RV180W Wireless-N Multifunction VPN Router
- CVE-2018-18016ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c.
- CVE-2018-0404Cisco RV180W Wireless-N Multifunction VPN Router SQL Injection VulnerabilityCisco RV180W Wireless-N Multifunction VPN Router
- CVE-2018-0464Cisco Data Center Network Manager Path Traversal VulnerabilityCisco Data Center Network Manager
- CVE-2018-0197Cisco IOS and IOS XE Software VLAN Trunking Protocol Denial of Service VulnerabilityCisco IOS and IOS XE Software
- CVE-2018-0414Cisco Secure Access Control Server XML External Entity Injection VulnerabilityCisco Secure Access Control Server Solution Engine
- CVE-2018-0421Cisco Prime Access Registrar Denial of Service VulnerabilityCisco Prime Access Registrar
- CVE-2018-0422A vulnerability in the folder permissions of Cisco Webex Meetings client for Windows could allow an authenticated, local attacker to modify
- CVE-2018-0423Cisco RV110W, RV130W, and RV215W Routers Management Interface Buffer Overflow VulnerabilityCisco RV130W Wireless-N Multifunction VPN Router Firmware
- CVE-2018-0424Cisco RV110W, RV130W, and RV215W Routers Management Interface Command Injection VulnerabilityCisco RV130W Wireless-N Multifunction VPN Router Firmware
- CVE-2018-0425Cisco RV110W, RV130W, and RV215W Routers Management Interface Information Disclosure VulnerabilityCisco RV130W Wireless-N Multifunction VPN Router Firmware
- CVE-2018-0426Cisco RV110W, RV130W, and RV215W Routers Management Interface Directory Traversal VulnerabilityCisco RV130W Wireless-N Multifunction VPN Router Firmware
- CVE-2018-0430Cisco Integrated Management Controller Command Injection VulnerabilityCisco Unified Computing System E-Series Software
- CVE-2018-0431Cisco Integrated Management Controller Command Injection VulnerabilityCisco Unified Computing System E-Series Software
- CVE-2018-0432Cisco SD-WAN Solution Privilege Escalation VulnerabilityCisco SD-WAN Solution
- CVE-2018-0433Cisco SD-WAN Solution Command Injection VulnerabilityCisco SD-WAN Solution
- CVE-2018-0434Cisco SD-WAN Solution Certificate Validation VulnerabilityCisco SD-WAN Solution
- CVE-2018-0435Cisco Umbrella API Unauthorized Access VulnerabilityCisco Umbrella
- CVE-2018-0436Cisco Webex Teams Information Disclosure and Modification VulnerabilityCisco Webex Teams
- CVE-2018-0437Cisco Umbrella Enterprise Roaming Client and Enterprise Roaming Module Privilege Escalation VulnerabilityCisco Umbrella
- CVE-2018-0438Cisco Umbrella Enterprise Roaming Client Privilege Escalation VulnerabilityCisco Umbrella
- CVE-2018-0439Cisco Meeting Server Cross-Site Request Forgery VulnerabilityCisco Meeting Server
- CVE-2018-0440Cisco Data Center Network Manager Privilege Escalation to Underlying Operating System VulnerabilityCisco Data Center Network Manager
- CVE-2018-0444Cisco Packaged Contact Center Enterprise Cross-Site Scripting VulnerabilityCisco Packaged Contact Center Enterprise
- CVE-2018-0445Cisco Packaged Contact Center Enterprise Cross-Site Request Forgery VulnerabilityCisco Packaged Contact Center Enterprise
- CVE-2018-0446Cisco Industrial Network Director Cross-Site Request Forgery VulnerabilityCisco Industrial Network Director
- CVE-2018-0447Cisco Email Security Appliance URL Filtering Bypass VulnerabilityCisco Email Security Appliance
- CVE-2018-0448Cisco Digital Network Architecture Center Authentication Bypass VulnerabilityCisco Digital Network Architecture Center
- CVE-2018-0450Cisco Data Center Network Manager Cross-Site Scripting VulnerabilityCisco Data Center Network Manager
- CVE-2018-0451Cisco Tetration Analytics Cross-Site Request Forgery VulnerabilityCisco Tetration Analytics
- CVE-2018-0452Cisco Tetration Analytics Cross-Site Scripting VulnerabilityCisco Tetration Analytics
- CVE-2018-0453Cisco Firepower Management Center and Firepower System Software Sourcefire Tunnel Control Channel Command Execution VulnerabilityCisco FireSIGHT System Software
- CVE-2018-0454Cisco Cloud Services Platform 2100 Command Injection VulnerabilityCisco Cloud Services Platform
- CVE-2018-0455Cisco Firepower System Software Detection Engine Denial of Service VulnerabilityCisco FireSIGHT System Software
- CVE-2018-0457Cisco Webex Player WRF Files Denial of Service VulnerabilityCisco WebEx WRF Player
- CVE-2018-0458Cisco Prime Collaboration Assurance Cross-Site Scripting VulnerabilityCisco Prime Collaboration Assurance
- CVE-2018-0459Cisco Enterprise NFV Infrastructure Software Denial of Service VulnerabilityCisco Enterprise NFV Infrastructure Software
- CVE-2018-0460Cisco Enterprise NFV Infrastructure Software Information Disclosure VulnerabilityCisco Enterprise NFV Infrastructure Software
- CVE-2018-0462Cisco Enterprise NFV Infrastructure Software Denial of Service VulnerabilityCisco Enterprise NFV Infrastructure Software
- CVE-2018-0463Cisco Network Services Orchestrator Network Plug and Play Information Disclosure VulnerabilityCisco Network Services Orchestrator
- CVE-2018-0465Cisco Small Business 300 Series Managed Switches Cross-Site Scripting VulnerabilityCisco Small Business 300 Series Managed Switches
- CVE-2018-0466Cisco IOS and IOS XE Software OSPFv3 Denial of Service VulnerabilityCisco IOS Software
- CVE-2018-0467Cisco IOS and IOS XE Software IPv6 Hop-by-Hop Options Denial of Service VulnerabilityCisco IOS Software
- CVE-2018-0469Cisco IOS XE Software Web UI Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2018-0470Cisco IOS XE Software HTTP Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2018-0471Cisco IOS XE Software Cisco Discovery Protocol Memory Leak VulnerabilityCisco IOS XE Software
- CVE-2018-0472Cisco IOS XE Software and Cisco ASA 5500-X Series Adaptive Security Appliance IPsec Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2018-0473Cisco IOS Software Precision Time Protocol Denial of Service VulnerabilityCisco IOS Software
- CVE-2018-0475Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service VulnerabilityCisco IOS Software
- CVE-2018-0476Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2018-0477Cisco IOS XE Software Command Injection VulnerabilitiesCisco IOS XE Software
- CVE-2018-0480Cisco IOS XE Software Errdisable Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2018-0481Cisco IOS XE Software Command Injection VulnerabilitiesCisco IOS XE Software
- CVE-2018-0485Cisco IOS and IOS XE Software SM-1T3/E3 Service Module Denial of Service VulnerabilityCisco IOS Software
- CVE-2018-15368Cisco IOS XE Software Privileged EXEC Mode Root Shell Access VulnerabilityCisco IOS XE Software
- CVE-2018-15369Cisco IOS and IOS XE Software TACACS+ Client Denial of Service VulnerabilityCisco IOS Software
- CVE-2018-15370Cisco Catalyst 6800 Series Switches ROM Monitor Software Secure Boot Bypass VulnerabilityCisco Catalyst 6800 Series Switches
- CVE-2018-15371Cisco IOS XE Software Shell Access Authentication Bypass VulnerabilityCisco IOS XE Software
- CVE-2018-15372Cisco IOS XE Software MACsec MKA Using EAP-TLS Authentication Bypass VulnerabilityCisco IOS XE Software
- CVE-2018-15373Cisco IOS and IOS XE Software Cisco Discovery Protocol Denial of Service VulnerabilityCisco IOS Software
- CVE-2018-15374Cisco IOS XE Software Digital Signature Verification Bypass VulnerabilityCisco IOS XE Software
- CVE-2018-15375Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary Memory Write VulnerabilitiesCisco IOS Software
- CVE-2018-15376Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary Memory Write VulnerabilitiesCisco IOS Software
- CVE-2018-15377Cisco IOS and IOS XE Software Plug and Play Agent Memory Leak VulnerabilityCisco IOS Software
- CVE-2018-15379Cisco Prime Infrastructure Arbitrary File Upload and Command Execution VulnerabilityCisco Prime Infrastructure
- CVE-2018-15382Cisco HyperFlex Software Static Signing Key VulnerabilityCisco HyperFlex HX-Series
- CVE-2018-15383Cisco Adaptive Security Appliance Direct Memory Access Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2018-15386Cisco Digital Network Architecture Center Unauthenticated Access VulnerabilityCisco Digital Network Architecture Center
- CVE-2018-15387Cisco SD-WAN Solution Certificate Validation Bypass VulnerabilityCisco SD-WAN Solution
- CVE-2018-15389Cisco Prime Collaboration Provisioning Intermittent Hard-Coded Password VulnerabilityCisco Prime Collaboration Provisioning
- CVE-2018-15390Cisco Firepower Threat Defense Software FTP Inspection Denial of Service VulnerabilityCisco Firepower Threat Defense Software
- CVE-2018-15391Cisco Remote PHY IPv4 Fragment Denial of Service VulnerabilityCisco Remote PHY
- CVE-2018-15392Cisco Industrial Network Director DHCP Request Processing Denial of Service VulnerabilityCisco Industrial Network Director
- CVE-2018-15396Cisco Unity Connection File Upload Denial of Service VulnerabilityCisco Unity Connection
- CVE-2018-15397Cisco Adaptive Security Appliance IPsec VPN Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2018-15398Cisco Adaptive Security Appliance Access Control List Bypass VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2018-15399Cisco Adaptive Security Appliance TCP Syslog Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2018-15400Cisco Cloud Services Platform 2100 Cross-Site Scripting VulnerabilityCisco Cloud Services Platform
- CVE-2018-15401Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery VulnerabilityCisco Hosted Collaboration Mediation Fulfillment
- CVE-2018-15403Multiple Cisco Unified Communications Products Open Redirect VulnerabilityCisco Emergency Responder
- CVE-2018-15404Cisco Integrated Management Controller Supervisor and Cisco UCS Director System Resources Denial of Service VulnerabilityCisco Unified Computing System Director
- CVE-2018-15405Cisco Integrated Management Controller Supervisor and Cisco UCS Director Authenticated Web Interface Information Disclosure VulnerabilityCisco Unified Computing System Director
- CVE-2018-15406Cisco UCS Director Stored Cross-Site Scripting VulnerabilityCisco Unified Computing System Director
- CVE-2018-15407Cisco HyperFlex World-Readable Sensitive Information VulnerabilityCisco HyperFlex HX-Series
- CVE-2018-15408Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution VulnerabilitiesCisco WebEx WRF Player
- CVE-2018-15409Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution VulnerabilitiesCisco WebEx WRF Player
- CVE-2018-15410Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution VulnerabilitiesCisco WebEx WRF Player
- CVE-2018-15411Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution VulnerabilitiesCisco WebEx WRF Player
- CVE-2018-15412Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution VulnerabilitiesCisco WebEx WRF Player
- CVE-2018-15413Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution VulnerabilitiesCisco WebEx WRF Player
- CVE-2018-15414Cisco Webex Network Recording Player Remote Code Execution VulnerabilitiesCisco WebEx ARF Player
- CVE-2018-15415Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution VulnerabilitiesCisco WebEx WRF Player
- CVE-2018-15416Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution VulnerabilitiesCisco WebEx WRF Player
- CVE-2018-15417Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution VulnerabilitiesCisco WebEx WRF Player
- CVE-2018-15418Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution VulnerabilitiesCisco WebEx WRF Player
- CVE-2018-15419Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution VulnerabilitiesCisco WebEx WRF Player
- CVE-2018-15420Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution VulnerabilitiesCisco WebEx WRF Player
- CVE-2018-15421Cisco Webex Network Recording Player Remote Code Execution VulnerabilitiesCisco WebEx ARF Player
- CVE-2018-15422Cisco Webex Network Recording Player Remote Code Execution VulnerabilitiesCisco WebEx ARF Player
- CVE-2018-15423Cisco HyperFlex UI Clickjacking VulnerabilityCisco HyperFlex HX-Series
- CVE-2018-15424Multiple Vulnerabilities in Cisco Identity Services EngineCisco Identity Services Engine Software
- CVE-2018-15425Multiple Vulnerabilities in Cisco Identity Services EngineCisco Identity Services Engine Software
- CVE-2018-15426Cisco Unity Connection Stored Cross-Site Scripting VulnerabilityCisco Unity Connection
- CVE-2018-15427Cisco Video Surveillance Manager Appliance Default Password VulnerabilityCisco Video Surveillance Manager
- CVE-2018-15428Cisco IOS XR Software Border Gateway Protocol Denial of Service VulnerabilityCisco IOS XR Software
- CVE-2018-15429Cisco HyperFlex HX Data Platform Software Unauthorized Directory Access VulnerabilityCisco HyperFlex HX Data Platform
- CVE-2018-15430Cisco Expressway Series and Cisco TelePresence Video Communication Server Remote Code Execution VulnerabilityCisco TelePresence Video Communication Server
- CVE-2018-15431Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution VulnerabilitiesCisco WebEx WRF Player
- CVE-2018-15432Cisco Prime Infrastructure Information Disclosure VulnerabilityCisco Prime Infrastructure
- CVE-2018-15433Cisco Prime Infrastructure Information Disclosure VulnerabilityCisco Prime Infrastructure
- CVE-2018-15434Cisco Unified IP Phone 7900 Series Cross-Site Scripting VulnerabilityCisco Unified IP Phone 7900 Series
- CVE-2018-15436Cisco Webex Centers Cross-Site Scripting VulnerabilityCisco WebEx Event Center
- CVE-2018-1686IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to cross-site scripting.IBM Maximo Asset Management
- CVE-2018-1723IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2 could allow an unprivileged, authenticated user with access to a IBM Spectrum Scale
- CVE-2018-1783IBM GPFS (IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2) command line utility allows an unprivileged, authentic
- CVE-2018-1795IBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to cross-site scripting.IBM Robotic Process Automation with Automation Anywhere
- CVE-2018-1812IBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to persistent cross-site scripting, caused by missing esIBM Robotic Process Automation with Automation Anywhere
- CVE-2018-6979The VMware Workspace ONE Unified Endpoint Management Console (A/W Console) 9.7.x prior to 9.7.0.3, 9.6.x prior to 9.6.0.7, 9.5.x prior to 9.VMware Workspace ONE Unified Endpoint Management Console
- CVE-2013-7465Ice Cold Apps Servers Ultimate 6.0.2(12) does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute a
- CVE-2014-10075The karo gem 2.3.8 for Ruby allows Remote command injection via the host field.karo
- CVE-2014-10076The wp-db-backup plugin 2.2.4 for WordPress relies on a five-character string for access control, which makes it easier for remote attackers
- CVE-2015-9272The videowhisper-video-presentation plugin 3.31.17 for WordPress allows remote attackers to execute arbitrary code because vp/vw_upload.php
- CVE-2018-17986rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user.