CVEs published October 9, 2018
58 CVEs were published on October 9, 2018: 1 critical, 1 high.
- Published
- 58
- Critical
- 1
- High
- 1
- Medium
- 3
- Low
- 1
- Unrated
- 52
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- openSUSE Open Build Service
- 4
- SAP Adaptive Server Enterprise
- 2
- SAP BusinessObjects Business Intelligence Platform
- 2
- WECON Technology Co. LeviStudioU
- 2
- [UNKNOWN] ceph-iscsi-cli
- 1
- Apache Software Foundation Apache Tika · org.apache.tika:ti…
- 1
- Huawei Technologies Co. MyCloud
- 1
- joomla/framework
- 1
- requests
- 1
- SAP BusinessObjects BI Platform Servers
- 1
Critical 1
High 1
Medium, low and unrated 56
- CVE-2018-18201qibosoft V7.0 allows CSRF via admin/index.php?lfj=member&action=addmember to add a user account.
- CVE-2018-11796In Apache Tika 1.19 (CVE-2018-11761), we added an entity expansion limit for XML parsing.Apache Software Foundation Apache Tika · org.apache.tika:ti…
- CVE-2018-17866Multiple cross-site scripting (XSS) vulnerabilities in includes/core/um-actions-login.php in the "Ultimate Member - User Profile & Membershi
- CVE-2018-17962Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used.
- CVE-2018-17963qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service
- CVE-2018-18198The $opener_input_field variable in addons/mediapool/pages/index.php in REDAXO 5.6.3 is not effectively filtered and is output directly to t
- CVE-2018-18199Mediamanager in REDAXO before 5.6.4 has XSS.
- CVE-2018-18200There is a SQL injection in Benutzerverwaltung in REDAXO before 5.6.4.
- CVE-2018-7631Buffer Overflow in httpd in EpiCentro E_7.3.2+ allows attackers to execute code remotely via a specially crafted GET request without a leadi
- CVE-2018-7632Buffer Overflow in httpd in EpiCentro E_7.3.2+ allows attackers to cause a denial of service attack remotely via a specially crafted GET req
- CVE-2018-7633Code injection in the /ui/login form Language parameter in Epicentro E_7.3.2+ allows attackers to execute JavaScript code by making a user i
- CVE-2018-10610An out-of-bounds vulnerability in LeviStudioU, Versions 1.8.29 and 1.8.44 can be exploited when the application processes specially crafted WECON Technology Co. LeviStudioU
- CVE-2018-10614An XXE vulnerability in LeviStudioU, Versions 1.8.29 and 1.8.44 can be exploited when the application processes specially crafted project XMWECON Technology Co. LeviStudioU
- CVE-2018-17855An issue was discovered in Joomla! before 3.8.13.
- CVE-2018-17856An issue was discovered in Joomla! before 3.8.13.joomla/framework
- CVE-2018-17857An issue was discovered in Joomla! before 3.8.13.
- CVE-2018-17858An issue was discovered in Joomla! before 3.8.13.
- CVE-2018-17859An issue was discovered in Joomla! before 3.8.13.
- CVE-2018-18086EmpireCMS v7.5 has an arbitrary file upload vulnerability in the LoadInMod function in e/class/moddofun.php, exploitable by logged-in users.
- CVE-2018-18087The Bixie Portfolio plugin 1.2.0 for Pagekit has XSS: a logged-in user who has the "Manage portfolio" privilege can inject arbitrary web scr
- CVE-2018-18088OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c
- CVE-2018-18190An issue was discovered in GoPro gpmf-parser before 1.2.1.
- CVE-2018-18191Cross-site request forgery (CSRF) vulnerability in /admin.php?c=member&m=edit&uid=1 in dayrui FineCms 5.4 allows remote attackers to change
- CVE-2018-18192An issue was discovered in libgig 4.1.0.
- CVE-2018-18193An issue was discovered in libgig 4.1.0.
- CVE-2018-18194An issue was discovered in libgig 4.1.0.
- CVE-2018-18195An issue was discovered in libgig 4.1.0.
- CVE-2018-18196An issue was discovered in libgig 4.1.0.
- CVE-2018-18197An issue was discovered in libgig 4.1.0.
- CVE-2018-6977VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerability due to an infiVMware ESXi · VMware Workstation +1
- CVE-2018-18082XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI.
- CVE-2018-18083An issue was discovered in DuomiCMS 3.0.
- CVE-2018-18084An issue was discovered in DuomiCMS 3.0.
- CVE-2018-18075WikidForum 2.20 has SQL Injection via the rpc.php parent_post_id or num_records parameter, or the index.php?action=search select_sort parame
- CVE-2018-14080An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices.
- CVE-2018-14081An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices.
- CVE-2018-15542An issue was discovered in the org.telegram.messenger application 4.8.11 for Android.
- CVE-2018-15543An issue was discovered in the org.telegram.messenger application 4.8.11 for Android.
- CVE-2018-18029Navigate CMS has Stored XSS via the navigate.php Title field in an edit action.
- CVE-2018-18074The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-httprequests
- CVE-2018-7928There is a security vulnerability which could lead to Factory Reset Protection (FRP) bypass in the MyCloud APP with the versions before 8.1.Huawei Technologies Co. MyCloud
- CVE-2018-12474Crafted service parameters allows to induce unexpected behaviour in obs-service-tar_scmopenSUSE Open Build Service
- CVE-2018-12477obs-service-refresh_patches can be tricked into deleting '..' or other unrelated directoriesopenSUSE Open Build Service
- CVE-2018-12478obs-service-replace_using_package_version allows to specify arbitrary input filesopenSUSE Open Build Service
- CVE-2018-12479Request controller allows to create requests with arbitrary request IDsopenSUSE Open Build Service
- CVE-2018-2466In Impact and Lineage Analysis in SAP Data Services, version 4.2, the management console does not sufficiently validate user-controlled inpuSAP Data Services
- CVE-2018-2467In the Software Development Kit in SAP BusinessObjects BI Platform Servers, versions 4.1 and 4.2, using the specially crafted URL in a Web BSAP BusinessObjects BI Platform Servers
- CVE-2018-2468Under certain conditions the backup server in SAP Adaptive Server Enterprise (ASE), versions 15.7 and 16.0, allows an attacker to access infSAP Adaptive Server Enterprise
- CVE-2018-2469Under certain conditions SAP Adaptive Server Enterprise (ASE), versions 15.7 and 16.0, allows an attacker to access information which would SAP Adaptive Server Enterprise
- CVE-2018-2470In SAP NetWeaver Application Server for ABAP, from 7.0 to 7.02, 7.30, 7.31, 7.40 and from 7.50 to 7.53, applications do not sufficiently encSAP NetWeaver Application Server for ABAP
- CVE-2018-2471Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an attacker to access information which wouSAP BusinessObjects Business Intelligence Platform
- CVE-2018-2472SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 (Web Intelligence DHTML client) does not sufficiently encode user-controlleSAP BusinessObjects Business Intelligence Platform
- CVE-2018-2474SAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2) application allows an attacker to trick an authenticated user to send unintSAP Fiori 1.0 for SAP ERP HCM
- CVE-2018-2475Following the Gardener architecture, the Kubernetes apiserver of a Gardener managed shoot cluster resides in the corresponding seed cluster.SAP project “Gardener”
- CVE-2018-18070An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles.
- CVE-2018-18071An issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS.