CVEs published October 16, 2018
23 CVEs were published on October 16, 2018: 0 critical, 0 high.
- Published
- 23
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 0
- Unrated
- 21
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- asciidoctor
- 1
- Atlassian Fisheye and Crucible
- 1
- IBM WebSphere Application Server
- 1
- org.neo4j:neo4j-enterprise
- 1
- The QEMU Project Qemu-kvm
- 1
- VMware ESXi · VMware Workstation +1
- 1
Medium, low and unrated 23
- CVE-2018-11019kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject
- CVE-2018-11020kernel/omap/drivers/rpmsg/rpmsg_omx.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a cra
- CVE-2018-11021kernel/omap/drivers/video/omap2/dsscomp/device.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to i
- CVE-2018-11022kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject
- CVE-2018-11023kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd) Fire OS 4.5.5.3 allows attackers to injec
- CVE-2018-11024kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd) Fire OS 4.5.5.3 allows attackers to injec
- CVE-2018-11025kernel/omap/drivers/mfd/twl6030-gpadc.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a c
- CVE-2018-14772Pydio 4.2.1 through 8.2.1 has an authenticated remote code execution vulnerability in which an attacker with administrator access to the web
- CVE-2018-18308In the 4.2.23 version of BigTree, a Stored XSS vulnerability has been discovered in /admin/ajax/file-browser/upload/ (aka the image upload a
- CVE-2018-6974VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x beforVMware ESXi · VMware Workstation +1
- CVE-2018-1777IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.IBM WebSphere Application Server
- CVE-2018-18389Due to incorrect access control in Neo4j Enterprise Database Server 3.4.x before 3.4.9, the setting of LDAP for authentication with STARTTLSorg.neo4j:neo4j-enterprise
- CVE-2018-18384Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the
- CVE-2018-18385Asciidoctor in versions < 1.5.8 allows remote attackers to cause a denial of service (infinite loop).asciidoctor
- CVE-2018-10839Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflowThe QEMU Project Qemu-kvm
- CVE-2018-13399The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges becausAtlassian Fisheye and Crucible
- CVE-2018-18381Z-BlogPHP 1.5.2.1935 (Zero) has a stored XSS Vulnerability in zb_system/function/c_system_admin.php via the Content-Type header during the u
- CVE-2018-18382Advanced HRM 1.6 allows Remote Code Execution via PHP code in a .php file to the user/update-user-avatar URI, which can be accessed through
- CVE-2018-18374XSS exists in the MetInfo 6.1.2 admin/index.php page via the anyid parameter.
- CVE-2018-18375goform/getProfileList in Orange AirBox Y858_FL_01.16_04 allows attackers to extract APN data (name, number, username, and password) via the
- CVE-2018-18376goform/getWlanClientInfo in Orange AirBox Y858_FL_01.16_04 allows remote attackers to discover information about currently connected devices
- CVE-2018-18377goform/setReset on Orange AirBox Y858_FL_01.16_04 devices allows attackers to reset a router to factory settings, which can be used to login
- CVE-2018-18307A Stored XSS vulnerability has been discovered in version 4.1.0 of AlchemyCMS via the /admin/pictures image field.