CVEs published October 28, 2018
40 CVEs were published on October 28, 2018: 0 critical, 0 high.
- Published
- 40
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 40
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 40
- CVE-2018-18764An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13.
- CVE-2018-18765An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13.
- CVE-2018-18751An issue was discovered in GNU gettext 0.19.8.
- CVE-2018-18752Webiness Inventory 2.3 suffers from an Arbitrary File upload vulnerability via PHP code in the protected/library/ajax/WsSaveToModel.php logo
- CVE-2018-18753Typecho V1.1 allows remote attackers to send shell commands via base64-encoded serialized data, as demonstrated by SSRF.
- CVE-2018-18754ZyXEL VMG3312-B10B 1.00(AAPP.7) devices have a backdoor root account with the tTn3+Z@!Sr0O+ password hash in the etc/default.cfg file.
- CVE-2016-10731ProjectSend (formerly cFTP) r582 allows SQL injection via manage-files.php with the request parameter status, manage-files.php with the requ
- CVE-2016-10732ProjectSend (formerly cFTP) r582 allows authentication bypass via a direct request for users.php, home.php, edit-file.php?file_id=1, or proc
- CVE-2016-10733ProjectSend (formerly cFTP) r582 allows directory traversal via file=../ in the process-zip-download.php query string.
- CVE-2016-10734ProjectSend (formerly cFTP) r582 allows Insecure Direct Object Reference via includes/actions.log.export.php.
- CVE-2018-18733An XSS issue was discovered in Catfish CMS 4.8.30, related to "write source code," a similar issue to CVE-2018-13999.
- CVE-2018-18734A CSRF issue was discovered in admin/Index/addmanageuser.html in Catfish CMS 4.8.30.
- CVE-2018-18735A CSRF issue was discovered in admin/Index/tiquan in catfish blog 2.0.33.
- CVE-2018-18736An XSS issue was discovered in catfish blog 2.0.33, related to "write source code."
- CVE-2018-18737An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexml_load_string.
- CVE-2018-18738An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_Categories.php?pid=1&lgid=1 category_key parameter.
- CVE-2018-18739An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_Products.php?lgid=1 Keywords field.
- CVE-2018-18740An XSS issue was discovered in SEMCMS 3.4 via the first input field to the admin/SEMCMS_Link.php?lgid=1 URI.
- CVE-2018-18741An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMS_Download.php?lgid=1 during editing.
- CVE-2018-18742A CSRF issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_User.php?Class=add&CF=user URI.
- CVE-2018-18743An XSS issue was discovered in SEMCMS 3.4 via the second text field to the admin/SEMCMS_Categories.php?pid=1&lgid=1 URI.
- CVE-2018-18744An XSS issue was discovered in SEMCMS 3.4 via the fifth text box to the admin/SEMCMS_Main.php URI.
- CVE-2018-18745An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMS_Menu.php?lgid=1 during editing.
- CVE-2018-18748Sandboxie 5.26 allows a Sandbox Escape via an "import os" statement, followed by os.system("cmd") or os.system("powershell"), within a .py f
- CVE-2018-18749data-tools through 2017-07-26 has an Integer Overflow leading to an incorrect end value for the write_wchars function.
- CVE-2018-18717An issue was discovered in Eleanor CMS through 2015-03-19.
- CVE-2018-18718An issue was discovered in gThumb through 3.6.2.
- CVE-2018-18720An XSS issue was discovered in index.php/admin/system/basic in YUNUCMS 1.1.5.
- CVE-2018-18721An XSS issue was discovered in admin/link/editlink?id=5 in YUNUCMS 1.1.5.
- CVE-2018-18722An XSS issue was discovered in admin/content/editcontent?id=29&gopage=1 in YUNUCMS 1.1.5.
- CVE-2018-18723An XSS issue was discovered in index.php/admin/area/editarea/id/110000 in YUNUCMS 1.1.5.
- CVE-2018-18724An XSS issue was discovered in index.php/admin/category/editcategory?id=73 in YUNUCMS 1.1.5.
- CVE-2018-18725An XSS issue was discovered in admin/banner/editbanner?id=20 in YUNUCMS 1.1.5.
- CVE-2018-18726An XSS issue was discovered in admin/sitelink/editsitelink?id=16 in YUNUCMS 1.1.5.
- CVE-2018-18727An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03
- CVE-2018-18728An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices.
- CVE-2018-18729An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03
- CVE-2018-18730An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03
- CVE-2018-18731An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03
- CVE-2018-18732An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03