CVEs published October 22, 2018
14 CVEs were published on October 22, 2018: 0 critical, 1 high.
- Published
- 14
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 13
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Advantech WebAccess
- 2
- IBM Security Access Manager Appliance
- 1
- Symantec Web Isolation
- 1
High 1
Medium, low and unrated 13
- CVE-2018-18581An issue has been found in LuPng through 2017-03-10.
- CVE-2018-18582An issue has been found in LuPng through 2017-03-10.
- CVE-2018-18583An issue has been found in LuPng through 2017-03-10.
- CVE-2018-18578DedeCMS 5.7 SP2 allows XSS via the plus/qrcode.php type parameter.
- CVE-2018-18579Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/pm.php folder parameter.
- CVE-2018-13114Missing authentication and improper input validation in KERUI Wifi Endoscope Camera (YPC99) allow an attacker to execute arbitrary commands
- CVE-2018-13115Lack of an authentication mechanism in KERUI Wifi Endoscope Camera (YPC99) allows an attacker to watch or block the camera stream.
- CVE-2018-12246Symantec Web Isolation (WI) 1.11 prior to 1.11.21 is susceptible to a reflected cross-site scripting (XSS) vulnerability.Symantec Web Isolation
- CVE-2018-15703Advantech WebAccess 8.3.2 and below is vulnerable to multiple reflected cross site scripting vulnerabilities.Advantech WebAccess
- CVE-2018-15704Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability.Advantech WebAccess
- CVE-2018-18557LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta,
- CVE-2018-18559In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanout_add from setsockopt and bind on an AF_PA
- CVE-2018-18553Leanote 2.6.1 has XSS via the Blog Basic Setting title field, which is mishandled during rendering of the "likes" page.