CVEs published November 5, 2018
22 CVEs were published on November 5, 2018: 0 critical, 0 high.
- Published
- 22
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 22
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- Omron CX-Supervisor
- 4
- baserproject/basercms
- 2
- Atlassian Sourcetree for macOS
- 1
- Atlassian Sourcetree for Windows
- 1
- Tuyoshi Vinicius jQuery Picture Cut
- 1
Medium, low and unrated 22
- CVE-2018-17905When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with a specific byte, memory corruption may ocOmron CX-Supervisor
- CVE-2018-17907When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with the value of an offset, an attacker can fOmron CX-Supervisor
- CVE-2018-17909When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it is referencing freed mOmron CX-Supervisor
- CVE-2018-17913A type confusion vulnerability exists when processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, which may allow an atOmron CX-Supervisor
- CVE-2018-13396There was an argument injection vulnerability in Sourcetree for macOS from version 1.0b2 before version 3.0.0 via Git subrepositories in MerAtlassian Sourcetree for macOS
- CVE-2018-13397There was an argument injection vulnerability in Sourcetree for Windows from version 0.5.1.0 before version 3.0.0 via Git subrepositories inAtlassian Sourcetree for Windows
- CVE-2018-18957An issue has been found in libIEC61850 v1.3.
- CVE-2018-18956The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service (segf
- CVE-2018-18820A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4.
- CVE-2018-9208Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut <= v1.1BetaTuyoshi Vinicius jQuery Picture Cut
- CVE-2018-18949Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings.
- CVE-2018-18950KindEditor through 4.1.11 has a path traversal vulnerability in php/upload_json.php.
- CVE-2018-18952JEECMS 9.3 has XSS via an index.do#/content/update?type=update URI.
- CVE-2018-18933The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a de
- CVE-2018-18934An issue was discovered in PopojiCMS v2.0.1.
- CVE-2018-18935An issue was discovered in PopojiCMS v2.0.1.
- CVE-2018-18936An issue was discovered in PopojiCMS v2.0.1.
- CVE-2018-18937An issue has been found in libIEC61850 v1.3.
- CVE-2018-18938An issue was discovered in WUZHI CMS 4.1.0.
- CVE-2018-18939An issue was discovered in WUZHI CMS 4.1.0.
- CVE-2018-18942In baserCMS before 4.1.4, lib\Baser\Model\ThemeConfig.php allows remote attackers to execute arbitrary PHP code via the admin/theme_configs/baserproject/basercms
- CVE-2018-18943An issue was discovered in baserCMS before 4.1.4.baserproject/basercms