# CVEs published 2018-10-05

134 CVEs were published on October 5, 2018: 2 critical, 5 high. Days are UTC.

- [CVE-2018-11064](https://cve.now/CVE-2018-11064.md): Dell EMC Unity OE versions 4.3.0.x and 4.3.1.x and UnityVSA OE versions 4.3.0.x and 4.3.1.x contains an Incorrect File Permissions vulnerabi (CVSS 7.8, Dell EMC Unity · Dell EMC UnityVSA)
- [CVE-2018-11081](https://cve.now/CVE-2018-11081.md): Pivotal Operations Manager UAA config - temp Ram Disk (CVSS 7.9, pivotal-ops-manager)
- [CVE-2018-11082](https://cve.now/CVE-2018-11082.md): Cloud Foundry UAA MFA does not prevent brute force of MFA code (CVSS 6.6, Cloud Foundry UAA Release · Cloud Foundry UAA)
- [CVE-2018-11083](https://cve.now/CVE-2018-11083.md): Bosh accepts refresh tokens in place of an access token (CVSS 8.4, Cloud Foundry BOSH)
- [CVE-2018-1264](https://cve.now/CVE-2018-1264.md): Log Cache logs UAA client secret on startup (CVSS 9.1, Cloud Foundry log-cache-release)
- [CVE-2018-13042](https://cve.now/CVE-2018-13042.md): The 1Password application 6.8 for Android is affected by a Denial Of Service vulnerability. (no CVSS)
- [CVE-2018-15763](https://cve.now/CVE-2018-15763.md): PKS leaks IaaS Credentials to Application Logs (CVSS 9.0, Pivotal Container Service)
- [CVE-2018-11797](https://cve.now/CVE-2018-11797.md): In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when (no CVSS, Apache Software Foundation Apache PDFBox · org.apache.pdfbo…)
- [CVE-2018-11778](https://cve.now/CVE-2018-11778.md): UnixAuthenticationService in Apache Ranger 1.2.0 was updated to correctly handle user input to avoid Stack-based buffer overflow. (no CVSS, Apache Software Foundation Apache Ranger · org.apache.range…)
- [CVE-2018-0405](https://cve.now/CVE-2018-0405.md): Cisco RV180W Wireless-N Multifunction VPN Router Directory Path Traversal Vulnerability (no CVSS, Cisco RV180W Wireless-N Multifunction VPN Router)
- [CVE-2018-18016](https://cve.now/CVE-2018-18016.md): ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c. (no CVSS)
- [CVE-2018-0404](https://cve.now/CVE-2018-0404.md): Cisco RV180W Wireless-N Multifunction VPN Router SQL Injection Vulnerability (no CVSS, Cisco RV180W Wireless-N Multifunction VPN Router)
- [CVE-2018-0464](https://cve.now/CVE-2018-0464.md): Cisco Data Center Network Manager Path Traversal Vulnerability (no CVSS, Cisco Data Center Network Manager)
- [CVE-2018-0197](https://cve.now/CVE-2018-0197.md): Cisco IOS and IOS XE Software VLAN Trunking Protocol Denial of Service Vulnerability (no CVSS, Cisco IOS and IOS XE Software)
- [CVE-2018-0414](https://cve.now/CVE-2018-0414.md): Cisco Secure Access Control Server XML External Entity Injection Vulnerability (no CVSS, Cisco Secure Access Control Server Solution Engine)
- [CVE-2018-0421](https://cve.now/CVE-2018-0421.md): Cisco Prime Access Registrar Denial of Service Vulnerability (no CVSS, Cisco Prime Access Registrar)
- [CVE-2018-0422](https://cve.now/CVE-2018-0422.md): A vulnerability in the folder permissions of Cisco Webex Meetings client for Windows could allow an authenticated, local attacker to modify (no CVSS)
- [CVE-2018-0423](https://cve.now/CVE-2018-0423.md): Cisco RV110W, RV130W, and RV215W Routers Management Interface Buffer Overflow Vulnerability (no CVSS, Cisco RV130W Wireless-N Multifunction VPN Router Firmware)
- [CVE-2018-0424](https://cve.now/CVE-2018-0424.md): Cisco RV110W, RV130W, and RV215W Routers Management Interface Command Injection Vulnerability (no CVSS, Cisco RV130W Wireless-N Multifunction VPN Router Firmware)
- [CVE-2018-0425](https://cve.now/CVE-2018-0425.md): Cisco RV110W, RV130W, and RV215W Routers Management Interface Information Disclosure Vulnerability (no CVSS, Cisco RV130W Wireless-N Multifunction VPN Router Firmware)
- [CVE-2018-0426](https://cve.now/CVE-2018-0426.md): Cisco RV110W, RV130W, and RV215W Routers Management Interface Directory Traversal Vulnerability (no CVSS, Cisco RV130W Wireless-N Multifunction VPN Router Firmware)
- [CVE-2018-0430](https://cve.now/CVE-2018-0430.md): Cisco Integrated Management Controller Command Injection Vulnerability (no CVSS, Cisco Unified Computing System E-Series Software)
- [CVE-2018-0431](https://cve.now/CVE-2018-0431.md): Cisco Integrated Management Controller Command Injection Vulnerability (no CVSS, Cisco Unified Computing System E-Series Software)
- [CVE-2018-0432](https://cve.now/CVE-2018-0432.md): Cisco SD-WAN Solution Privilege Escalation Vulnerability (no CVSS, Cisco SD-WAN Solution)
- [CVE-2018-0433](https://cve.now/CVE-2018-0433.md): Cisco SD-WAN Solution Command Injection Vulnerability (no CVSS, Cisco SD-WAN Solution)
- [CVE-2018-0434](https://cve.now/CVE-2018-0434.md): Cisco SD-WAN Solution Certificate Validation Vulnerability (no CVSS, Cisco SD-WAN Solution)
- [CVE-2018-0435](https://cve.now/CVE-2018-0435.md): Cisco Umbrella API Unauthorized Access Vulnerability (no CVSS, Cisco Umbrella)
- [CVE-2018-0436](https://cve.now/CVE-2018-0436.md): Cisco Webex Teams Information Disclosure and Modification Vulnerability (no CVSS, Cisco Webex Teams)
- [CVE-2018-0437](https://cve.now/CVE-2018-0437.md): Cisco Umbrella Enterprise Roaming Client and Enterprise Roaming Module Privilege Escalation Vulnerability (no CVSS, Cisco Umbrella)
- [CVE-2018-0438](https://cve.now/CVE-2018-0438.md): Cisco Umbrella Enterprise Roaming Client Privilege Escalation Vulnerability (no CVSS, Cisco Umbrella)
- [CVE-2018-0439](https://cve.now/CVE-2018-0439.md): Cisco Meeting Server Cross-Site Request Forgery Vulnerability (no CVSS, Cisco Meeting Server)
- [CVE-2018-0440](https://cve.now/CVE-2018-0440.md): Cisco Data Center Network Manager Privilege Escalation to Underlying Operating System Vulnerability (no CVSS, Cisco Data Center Network Manager)
- [CVE-2018-0444](https://cve.now/CVE-2018-0444.md): Cisco Packaged Contact Center Enterprise Cross-Site Scripting Vulnerability (no CVSS, Cisco Packaged Contact Center Enterprise)
- [CVE-2018-0445](https://cve.now/CVE-2018-0445.md): Cisco Packaged Contact Center Enterprise Cross-Site Request Forgery Vulnerability (no CVSS, Cisco Packaged Contact Center Enterprise)
- [CVE-2018-0446](https://cve.now/CVE-2018-0446.md): Cisco Industrial Network Director Cross-Site Request Forgery Vulnerability (no CVSS, Cisco Industrial Network Director)
- [CVE-2018-0447](https://cve.now/CVE-2018-0447.md): Cisco Email Security Appliance URL Filtering Bypass Vulnerability (no CVSS, Cisco Email Security Appliance)
- [CVE-2018-0448](https://cve.now/CVE-2018-0448.md): Cisco Digital Network Architecture Center Authentication Bypass Vulnerability (no CVSS, Cisco Digital Network Architecture Center)
- [CVE-2018-0450](https://cve.now/CVE-2018-0450.md): Cisco Data Center Network Manager Cross-Site Scripting Vulnerability (no CVSS, Cisco Data Center Network Manager)
- [CVE-2018-0451](https://cve.now/CVE-2018-0451.md): Cisco Tetration Analytics Cross-Site Request Forgery Vulnerability (no CVSS, Cisco Tetration Analytics)
- [CVE-2018-0452](https://cve.now/CVE-2018-0452.md): Cisco Tetration Analytics Cross-Site Scripting Vulnerability (no CVSS, Cisco Tetration Analytics)
- [CVE-2018-0453](https://cve.now/CVE-2018-0453.md): Cisco Firepower Management Center and Firepower System Software Sourcefire Tunnel Control Channel Command Execution Vulnerability (no CVSS, Cisco FireSIGHT System Software)
- [CVE-2018-0454](https://cve.now/CVE-2018-0454.md): Cisco Cloud Services Platform 2100 Command Injection Vulnerability (no CVSS, Cisco Cloud Services Platform)
- [CVE-2018-0455](https://cve.now/CVE-2018-0455.md): Cisco Firepower System Software Detection Engine Denial of Service Vulnerability (no CVSS, Cisco FireSIGHT System Software)
- [CVE-2018-0457](https://cve.now/CVE-2018-0457.md): Cisco Webex Player WRF Files Denial of Service Vulnerability (no CVSS, Cisco WebEx WRF Player)
- [CVE-2018-0458](https://cve.now/CVE-2018-0458.md): Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability (no CVSS, Cisco Prime Collaboration Assurance)
- [CVE-2018-0459](https://cve.now/CVE-2018-0459.md): Cisco Enterprise NFV Infrastructure Software Denial of Service Vulnerability (no CVSS, Cisco Enterprise NFV Infrastructure Software)
- [CVE-2018-0460](https://cve.now/CVE-2018-0460.md): Cisco Enterprise NFV Infrastructure Software Information Disclosure Vulnerability (no CVSS, Cisco Enterprise NFV Infrastructure Software)
- [CVE-2018-0462](https://cve.now/CVE-2018-0462.md): Cisco Enterprise NFV Infrastructure Software Denial of Service Vulnerability (no CVSS, Cisco Enterprise NFV Infrastructure Software)
- [CVE-2018-0463](https://cve.now/CVE-2018-0463.md): Cisco Network Services Orchestrator Network Plug and Play Information Disclosure Vulnerability (no CVSS, Cisco Network Services Orchestrator)
- [CVE-2018-0465](https://cve.now/CVE-2018-0465.md): Cisco Small Business 300 Series Managed Switches Cross-Site Scripting Vulnerability (no CVSS, Cisco Small Business 300 Series Managed Switches)
- [CVE-2018-0466](https://cve.now/CVE-2018-0466.md): Cisco IOS and IOS XE Software OSPFv3 Denial of Service Vulnerability (no CVSS, Cisco IOS Software)
- [CVE-2018-0467](https://cve.now/CVE-2018-0467.md): Cisco IOS and IOS XE Software IPv6 Hop-by-Hop Options Denial of Service Vulnerability (no CVSS, Cisco IOS Software)
- [CVE-2018-0469](https://cve.now/CVE-2018-0469.md): Cisco IOS XE Software Web UI Denial of Service Vulnerability (no CVSS, Cisco IOS XE Software)
- [CVE-2018-0470](https://cve.now/CVE-2018-0470.md): Cisco IOS XE Software HTTP Denial of Service Vulnerability (no CVSS, Cisco IOS XE Software)
- [CVE-2018-0471](https://cve.now/CVE-2018-0471.md): Cisco IOS XE Software Cisco Discovery Protocol Memory Leak Vulnerability (no CVSS, Cisco IOS XE Software)
- [CVE-2018-0472](https://cve.now/CVE-2018-0472.md): Cisco IOS XE Software and Cisco ASA 5500-X Series Adaptive Security Appliance IPsec Denial of Service Vulnerability (no CVSS, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2018-0473](https://cve.now/CVE-2018-0473.md): Cisco IOS Software Precision Time Protocol Denial of Service Vulnerability (no CVSS, Cisco IOS Software)
- [CVE-2018-0475](https://cve.now/CVE-2018-0475.md): Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability (no CVSS, Cisco IOS Software)
- [CVE-2018-0476](https://cve.now/CVE-2018-0476.md): Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service Vulnerability (no CVSS, Cisco IOS XE Software)
- [CVE-2018-0477](https://cve.now/CVE-2018-0477.md): Cisco IOS XE Software Command Injection Vulnerabilities (no CVSS, Cisco IOS XE Software)
- [CVE-2018-0480](https://cve.now/CVE-2018-0480.md): Cisco IOS XE Software Errdisable Denial of Service Vulnerability (no CVSS, Cisco IOS XE Software)
- [CVE-2018-0481](https://cve.now/CVE-2018-0481.md): Cisco IOS XE Software Command Injection Vulnerabilities (no CVSS, Cisco IOS XE Software)
- [CVE-2018-0485](https://cve.now/CVE-2018-0485.md): Cisco IOS and IOS XE Software SM-1T3/E3 Service Module Denial of Service Vulnerability (no CVSS, Cisco IOS Software)
- [CVE-2018-15368](https://cve.now/CVE-2018-15368.md): Cisco IOS XE Software Privileged EXEC Mode Root Shell Access Vulnerability (no CVSS, Cisco IOS XE Software)
- [CVE-2018-15369](https://cve.now/CVE-2018-15369.md): Cisco IOS and IOS XE Software TACACS+ Client Denial of Service Vulnerability (no CVSS, Cisco IOS Software)
- [CVE-2018-15370](https://cve.now/CVE-2018-15370.md): Cisco Catalyst 6800 Series Switches ROM Monitor Software Secure Boot Bypass Vulnerability (no CVSS, Cisco Catalyst 6800 Series Switches)
- [CVE-2018-15371](https://cve.now/CVE-2018-15371.md): Cisco IOS XE Software Shell Access Authentication Bypass Vulnerability (no CVSS, Cisco IOS XE Software)
- [CVE-2018-15372](https://cve.now/CVE-2018-15372.md): Cisco IOS XE Software MACsec MKA Using EAP-TLS Authentication Bypass Vulnerability (no CVSS, Cisco IOS XE Software)
- [CVE-2018-15373](https://cve.now/CVE-2018-15373.md): Cisco IOS and IOS XE Software Cisco Discovery Protocol Denial of Service Vulnerability (no CVSS, Cisco IOS Software)
- [CVE-2018-15374](https://cve.now/CVE-2018-15374.md): Cisco IOS XE Software Digital Signature Verification Bypass Vulnerability (no CVSS, Cisco IOS XE Software)
- [CVE-2018-15375](https://cve.now/CVE-2018-15375.md): Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary Memory Write Vulnerabilities (no CVSS, Cisco IOS Software)
- [CVE-2018-15376](https://cve.now/CVE-2018-15376.md): Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary Memory Write Vulnerabilities (no CVSS, Cisco IOS Software)
- [CVE-2018-15377](https://cve.now/CVE-2018-15377.md): Cisco IOS and IOS XE Software Plug and Play Agent Memory Leak Vulnerability (no CVSS, Cisco IOS Software)
- [CVE-2018-15379](https://cve.now/CVE-2018-15379.md): Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerability (no CVSS, Cisco Prime Infrastructure)
- [CVE-2018-15382](https://cve.now/CVE-2018-15382.md): Cisco HyperFlex Software Static Signing Key Vulnerability (no CVSS, Cisco HyperFlex HX-Series)
- [CVE-2018-15383](https://cve.now/CVE-2018-15383.md): Cisco Adaptive Security Appliance Direct Memory Access Denial of Service Vulnerability (no CVSS, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2018-15386](https://cve.now/CVE-2018-15386.md): Cisco Digital Network Architecture Center Unauthenticated Access Vulnerability (no CVSS, Cisco Digital Network Architecture Center)
- [CVE-2018-15387](https://cve.now/CVE-2018-15387.md): Cisco SD-WAN Solution Certificate Validation Bypass Vulnerability (no CVSS, Cisco SD-WAN Solution)
- [CVE-2018-15389](https://cve.now/CVE-2018-15389.md): Cisco Prime Collaboration Provisioning Intermittent Hard-Coded Password Vulnerability (no CVSS, Cisco Prime Collaboration Provisioning)
- [CVE-2018-15390](https://cve.now/CVE-2018-15390.md): Cisco Firepower Threat Defense Software FTP Inspection Denial of Service Vulnerability (no CVSS, Cisco Firepower Threat Defense Software)
- [CVE-2018-15391](https://cve.now/CVE-2018-15391.md): Cisco Remote PHY IPv4 Fragment Denial of Service Vulnerability (no CVSS, Cisco Remote PHY)
- [CVE-2018-15392](https://cve.now/CVE-2018-15392.md): Cisco Industrial Network Director DHCP Request Processing Denial of Service Vulnerability (no CVSS, Cisco Industrial Network Director)
- [CVE-2018-15396](https://cve.now/CVE-2018-15396.md): Cisco Unity Connection File Upload Denial of Service Vulnerability (no CVSS, Cisco Unity Connection)
- [CVE-2018-15397](https://cve.now/CVE-2018-15397.md): Cisco Adaptive Security Appliance IPsec VPN Denial of Service Vulnerability (no CVSS, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2018-15398](https://cve.now/CVE-2018-15398.md): Cisco Adaptive Security Appliance Access Control List Bypass Vulnerability (no CVSS, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2018-15399](https://cve.now/CVE-2018-15399.md): Cisco Adaptive Security Appliance TCP Syslog Denial of Service Vulnerability (no CVSS, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2018-15400](https://cve.now/CVE-2018-15400.md): Cisco Cloud Services Platform 2100 Cross-Site Scripting Vulnerability (no CVSS, Cisco Cloud Services Platform)
- [CVE-2018-15401](https://cve.now/CVE-2018-15401.md): Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability (no CVSS, Cisco Hosted Collaboration Mediation Fulfillment)
- [CVE-2018-15403](https://cve.now/CVE-2018-15403.md): Multiple Cisco Unified Communications Products Open Redirect Vulnerability (no CVSS, Cisco Emergency Responder)
- [CVE-2018-15404](https://cve.now/CVE-2018-15404.md): Cisco Integrated Management Controller Supervisor and Cisco UCS Director System Resources Denial of Service Vulnerability (no CVSS, Cisco Unified Computing System Director)
- [CVE-2018-15405](https://cve.now/CVE-2018-15405.md): Cisco Integrated Management Controller Supervisor and Cisco UCS Director Authenticated Web Interface Information Disclosure Vulnerability (no CVSS, Cisco Unified Computing System Director)
- [CVE-2018-15406](https://cve.now/CVE-2018-15406.md): Cisco UCS Director Stored Cross-Site Scripting Vulnerability (no CVSS, Cisco Unified Computing System Director)
- [CVE-2018-15407](https://cve.now/CVE-2018-15407.md): Cisco HyperFlex World-Readable Sensitive Information Vulnerability (no CVSS, Cisco HyperFlex HX-Series)
- [CVE-2018-15408](https://cve.now/CVE-2018-15408.md): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (no CVSS, Cisco WebEx WRF Player)
- [CVE-2018-15409](https://cve.now/CVE-2018-15409.md): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (no CVSS, Cisco WebEx WRF Player)
- [CVE-2018-15410](https://cve.now/CVE-2018-15410.md): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (no CVSS, Cisco WebEx WRF Player)
- [CVE-2018-15411](https://cve.now/CVE-2018-15411.md): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (no CVSS, Cisco WebEx WRF Player)
- [CVE-2018-15412](https://cve.now/CVE-2018-15412.md): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (no CVSS, Cisco WebEx WRF Player)
- [CVE-2018-15413](https://cve.now/CVE-2018-15413.md): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (no CVSS, Cisco WebEx WRF Player)
- [CVE-2018-15414](https://cve.now/CVE-2018-15414.md): Cisco Webex Network Recording Player Remote Code Execution Vulnerabilities (no CVSS, Cisco WebEx ARF Player)
- [CVE-2018-15415](https://cve.now/CVE-2018-15415.md): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (no CVSS, Cisco WebEx WRF Player)
- [CVE-2018-15416](https://cve.now/CVE-2018-15416.md): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (no CVSS, Cisco WebEx WRF Player)
- [CVE-2018-15417](https://cve.now/CVE-2018-15417.md): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (no CVSS, Cisco WebEx WRF Player)
- [CVE-2018-15418](https://cve.now/CVE-2018-15418.md): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (no CVSS, Cisco WebEx WRF Player)
- [CVE-2018-15419](https://cve.now/CVE-2018-15419.md): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (no CVSS, Cisco WebEx WRF Player)
- [CVE-2018-15420](https://cve.now/CVE-2018-15420.md): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (no CVSS, Cisco WebEx WRF Player)
- [CVE-2018-15421](https://cve.now/CVE-2018-15421.md): Cisco Webex Network Recording Player Remote Code Execution Vulnerabilities (no CVSS, Cisco WebEx ARF Player)
- [CVE-2018-15422](https://cve.now/CVE-2018-15422.md): Cisco Webex Network Recording Player Remote Code Execution Vulnerabilities (no CVSS, Cisco WebEx ARF Player)
- [CVE-2018-15423](https://cve.now/CVE-2018-15423.md): Cisco HyperFlex UI Clickjacking Vulnerability (no CVSS, Cisco HyperFlex HX-Series)
- [CVE-2018-15424](https://cve.now/CVE-2018-15424.md): Multiple Vulnerabilities in Cisco Identity Services Engine (no CVSS, Cisco Identity Services Engine Software)
- [CVE-2018-15425](https://cve.now/CVE-2018-15425.md): Multiple Vulnerabilities in Cisco Identity Services Engine (no CVSS, Cisco Identity Services Engine Software)
- [CVE-2018-15426](https://cve.now/CVE-2018-15426.md): Cisco Unity Connection Stored Cross-Site Scripting Vulnerability (no CVSS, Cisco Unity Connection)
- [CVE-2018-15427](https://cve.now/CVE-2018-15427.md): Cisco Video Surveillance Manager Appliance Default Password Vulnerability (no CVSS, Cisco Video Surveillance Manager)
- [CVE-2018-15428](https://cve.now/CVE-2018-15428.md): Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability (no CVSS, Cisco IOS XR Software)
- [CVE-2018-15429](https://cve.now/CVE-2018-15429.md): Cisco HyperFlex HX Data Platform Software Unauthorized Directory Access Vulnerability (no CVSS, Cisco HyperFlex HX Data Platform)
- [CVE-2018-15430](https://cve.now/CVE-2018-15430.md): Cisco Expressway Series and Cisco TelePresence Video Communication Server Remote Code Execution Vulnerability (no CVSS, Cisco TelePresence Video Communication Server)
- [CVE-2018-15431](https://cve.now/CVE-2018-15431.md): Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities (no CVSS, Cisco WebEx WRF Player)
- [CVE-2018-15432](https://cve.now/CVE-2018-15432.md): Cisco Prime Infrastructure Information Disclosure Vulnerability (no CVSS, Cisco Prime Infrastructure)
- [CVE-2018-15433](https://cve.now/CVE-2018-15433.md): Cisco Prime Infrastructure Information Disclosure Vulnerability (no CVSS, Cisco Prime Infrastructure)
- [CVE-2018-15434](https://cve.now/CVE-2018-15434.md): Cisco Unified IP Phone 7900 Series Cross-Site Scripting Vulnerability (no CVSS, Cisco Unified IP Phone 7900 Series)
- [CVE-2018-15436](https://cve.now/CVE-2018-15436.md): Cisco Webex Centers Cross-Site Scripting Vulnerability (no CVSS, Cisco WebEx Event Center)
- [CVE-2018-1647](https://cve.now/CVE-2018-1647.md): IBM QRadar Incident Forensics 7.2 and 7.3 does not properly restrict the size or amount of resources requested which could allow an unauthen (CVSS 7.5, IBM QRadar Incident Forensics)
- [CVE-2018-1649](https://cve.now/CVE-2018-1649.md): IBM QRadar Incident Forensics 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. (CVSS 7.7, IBM QRadar Incident Forensics)
- [CVE-2018-1686](https://cve.now/CVE-2018-1686.md): IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Maximo Asset Management)
- [CVE-2018-1723](https://cve.now/CVE-2018-1723.md): IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2 could allow an unprivileged, authenticated user with access to a (CVSS 6.2, IBM Spectrum Scale)
- [CVE-2018-1783](https://cve.now/CVE-2018-1783.md): IBM GPFS (IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2) command line utility allows an unprivileged, authentic (no CVSS)
- [CVE-2018-1795](https://cve.now/CVE-2018-1795.md): IBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to cross-site scripting. (CVSS 6.1, IBM Robotic Process Automation with Automation Anywhere)
- [CVE-2018-1812](https://cve.now/CVE-2018-1812.md): IBM Robotic Process Automation with Automation Anywhere Enterprise 10 is vulnerable to persistent cross-site scripting, caused by missing es (CVSS 5.4, IBM Robotic Process Automation with Automation Anywhere)
- [CVE-2018-6979](https://cve.now/CVE-2018-6979.md): The VMware Workspace ONE Unified Endpoint Management Console (A/W Console) 9.7.x prior to 9.7.0.3, 9.6.x prior to 9.6.0.7, 9.5.x prior to 9. (no CVSS, VMware Workspace ONE Unified Endpoint Management Console)
- [CVE-2013-7465](https://cve.now/CVE-2013-7465.md): Ice Cold Apps Servers Ultimate 6.0.2(12) does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute a (no CVSS)
- [CVE-2014-10075](https://cve.now/CVE-2014-10075.md): The karo gem 2.3.8 for Ruby allows Remote command injection via the host field. (no CVSS, karo)
- [CVE-2014-10076](https://cve.now/CVE-2014-10076.md): The wp-db-backup plugin 2.2.4 for WordPress relies on a five-character string for access control, which makes it easier for remote attackers (no CVSS)
- [CVE-2015-9272](https://cve.now/CVE-2015-9272.md): The videowhisper-video-presentation plugin 3.31.17 for WordPress allows remote attackers to execute arbitrary code because vp/vw\_upload.php (no CVSS)
- [CVE-2018-17986](https://cve.now/CVE-2018-17986.md): rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-10-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.