CVEs published October 11, 2018
16 CVEs were published on October 11, 2018: 0 critical, 2 high.
- Published
- 16
- Critical
- 0
- High
- 2
- Medium
- 3
- Low
- 0
- Unrated
- 11
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Delta Electronics Delta Industrial Automation TPEditor
- 2
- IBM Security Key Lifecycle Manager
- 2
- IBM Spectrum Symphony
- 2
- Blueimp jQuery-File-Upload · blueimp-file-upload
- 1
- Dell Encryption · Dell Endpoint Security Suite Enterprise
- 1
- IBM Spectrum LSF
- 1
- NAVER Whale Browser Installer
- 1
- ro.pippo:pippo-core · ro.pippo:pippo-session
- 1
High 2
- CVE-2018-1738IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0 could allow an authenticated user to obtain highly sensitive information or jeopardize systIBM Security Key Lifecycle Manager
- CVE-2018-1745IBM Security Key Lifecycle Manager 2.7 and 3.0 could allow an unauthenticated user to restart the SKLM server due to missing authentication.IBM Security Key Lifecycle Manager
Medium, low and unrated 14
- CVE-2018-17927In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple out-of-bounds write vulnerabilities may be exploited by Delta Electronics Delta Industrial Automation TPEditor
- CVE-2018-17929In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based buffer overflow vulnerabilities may be exploDelta Electronics Delta Industrial Automation TPEditor
- CVE-2018-12441The CorsairService Service in Corsair Utility Engine is installed with insecure default permissions, which allows unprivileged local users t
- CVE-2018-18257An issue was discovered in BageCMS 3.1.3.
- CVE-2018-18258An issue was discovered in BageCMS 3.1.3.
- CVE-2018-15766Dell Encryption and Dell Endpoint Security Suite Enterprise Security Policy Overwrite VulnerabilityDell Encryption · Dell Endpoint Security Suite Enterprise
- CVE-2018-18215In youke365 v1.1.5, admin/user.html has a CSRF vulnerability that can add an user account.
- CVE-2018-9206Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0Blueimp jQuery-File-Upload · blueimp-file-upload
- CVE-2018-18242youke365 v1.1.5 has SQL injection via admin/login.html, as demonstrated by username=admin&pass=123456&code=9823&act=login&submit=%E7%99%BB+%
- CVE-2018-12449The Whale browser installer 0.4.3.0 and earlier versions allows DLL hijacking.NAVER Whale Browser Installer
- CVE-2018-1706IBM Spectrum Symphony 7.2.0.2 is vulnerable to cross-site scripting.IBM Spectrum Symphony
- CVE-2018-1708IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as passwords through theIBM Spectrum Symphony
- CVE-2018-1724IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3, and 10.1 could allow a local user to change their job user at job submission time due to improper file IBM Spectrum LSF
- CVE-2018-18240Pippo through 1.11.0 allows remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine component does not usero.pippo:pippo-core · ro.pippo:pippo-session