CVEs published October 7, 2018
6 CVEs were published on October 7, 2018: 0 critical, 0 high.
- Published
- 6
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 6
- CVE-2012-6710ext_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a password[]= (aka an empty array) in an actio
- CVE-2018-18023In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the SVGStripString function of coders/svg.c, which allows attackers t
- CVE-2018-18024In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file.
- CVE-2018-18025In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to
- CVE-2015-9273The wp-slimstat (aka Slimstat Analytics) plugin before 4.1.6.1 for WordPress has XSS via an HTTP Referer header, or via a field associated w
- CVE-2018-18021arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVM_SET_ON_REG ioctl.