CVEs published November 8, 2018
38 CVEs were published on November 8, 2018: 3 critical, 0 high.
- Published
- 38
- Critical
- 3
- High
- 0
- Medium
- 11
- Low
- 0
- Unrated
- 24
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Brocade Communications Systems Brocade Fabric OS
- 8
- Apache Software Foundation Apache Hive · org.apache.hive:hi…
- 2
- Cisco Energy Management Suite
- 2
- Cisco AMP for Endpoints
- 1
- Cisco Content Security Management Appliance
- 1
- Cisco Firepower Management Center
- 1
- Cisco Integrated Management Controller (IMC) Supervisor
- 1
- Cisco Meeting Server
- 1
- Cisco Meraki MR · Cisco Meraki M5 +3
- 1
- Cisco Prime Collaboration Assurance
- 1
Critical 3
- CVE-2018-15381Cisco Unity Express Arbitrary Command Execution VulnerabilityCisco Unity Express
- CVE-2018-15394Cisco Stealthwatch Management Console Authentication Bypass VulnerabilityCisco Stealthwatch Enterprise
- CVE-2018-15439Cisco Small Business Switches Privileged Access VulnerabilityCisco Small Business 300 Series Managed Switches
Medium, low and unrated 35
- CVE-2018-7718An issue was discovered in Telexy QPath 5.4.462.
- CVE-2018-15450Cisco Prime Collaboration Assurance File Overwrite VulnerabilityCisco Prime Collaboration Assurance
- CVE-2018-15451Cisco Prime Service Catalog Cross-Site Scripting VulnerabilityCisco Prime Service Catalog
- CVE-2018-19044keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats.
- CVE-2018-19045keepalived 2.0.8 used mode 0666 when creating new temporary files upon a call to PrintData or PrintStats, potentially leaking sensitive info
- CVE-2018-19046keepalived 2.0.8 didn't check for existing plain files when writing data to a temporary file upon a call to PrintData or PrintStats.
- CVE-2018-19115keepalived before 2.0.7 has a heap-based buffer overflow when parsing HTTP status codes resulting in DoS or possibly unspecified other impac
- CVE-2018-15447Cisco Integrated Management Controller Supervisor SQL Injection VulnerabilityCisco Integrated Management Controller (IMC) Supervisor
- CVE-2018-15448Cisco Registered Envelope Service Information Disclosure VulnerabilityCisco Registered Envelope Service
- CVE-2018-15449Cisco Video Surveillance Media Server Denial of Service VulnerabilityCisco Video Surveillance Media Server Software
- CVE-2018-6436A Vulnerability in the firmwaredownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4Brocade Communications Systems Brocade Fabric OS
- CVE-2018-6437A Vulnerability in the help command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could alBrocade Communications Systems Brocade Fabric OS
- CVE-2018-6438A Vulnerability in the supportsave command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d cBrocade Communications Systems Brocade Fabric OS
- CVE-2018-15444Cisco Energy Management Suite XML External Entity VulnerabilityCisco Energy Management Suite
- CVE-2018-15445Cisco Energy Management Suite Cross-Site Request Forgery VulnerabilityCisco Energy Management Suite
- CVE-2018-15446Cisco Meeting Server Information Disclosure VulnerabilityCisco Meeting Server
- CVE-2018-19114An issue was discovered in MinDoc through v1.0.2.
- CVE-2018-15393Cisco Content Security Management Appliance (SMA) Cross-Site Scripting VulnerabilityCisco Content Security Management Appliance
- CVE-2018-15437Cisco Immunet and Cisco AMP for Endpoints System Scan Denial of Service VulnerabilityCisco AMP for Endpoints
- CVE-2018-15443Cisco Firepower Detection Engine TCP Intrusion Prevention System Rule Bypass VulnerabilityCisco Firepower Management Center
- CVE-2018-0284Cisco Meraki Local Status Page Privilege Escalation VulnerabilityCisco Meraki MR · Cisco Meraki M5 +3
- CVE-2018-11777In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against malicious user if rangerApache Software Foundation Apache Hive · org.apache.hive:hi…
- CVE-2018-1314In Apache Hive 2.3.3, 3.1.0 and earlier, Hive "EXPLAIN" operation does not check for necessary authorization of involved entities in a queryApache Software Foundation Apache Hive · org.apache.hive:hi…
- CVE-2018-6433A vulnerability in the secryptocfg export command of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attBrocade Communications Systems Brocade Fabric OS
- CVE-2018-6434A vulnerability in the web management interface of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow attackers to Brocade Communications Systems Brocade Fabric OS
- CVE-2018-6435A Vulnerability in the secryptocfg command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d cBrocade Communications Systems Brocade Fabric OS
- CVE-2018-6441A vulnerability in Secure Shell implementation of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attackBrocade Communications Systems Brocade Fabric OS
- CVE-2018-6442A vulnerability in the Brocade Webtools firmware update section of Brocade Fabric OS before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remoteBrocade Communications Systems Brocade Fabric OS
- CVE-2018-19104In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can be used to upload arbitrary files and get server privileges.
- CVE-2018-19105LibreCAD 2.1.3 allows remote attackers to cause a denial of service (0x89C04589 write access violation and application crash) or possibly ha
- CVE-2018-19109tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/cms/column/list dire
- CVE-2018-19110The skin-management feature in tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-mo
- CVE-2018-19111The Google Cardboard application 1.8 for Android and 1.2 for iOS sends potentially private cleartext information to the Unity 3D Stats web s
- CVE-2018-19107In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image reader) may suffer from a denial of service
- CVE-2018-19108In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service (infinite loop) cau