CVEs published January 10, 2019
48 CVEs were published on January 10, 2019: 0 critical, 16 high.
- Published
- 48
- Critical
- 0
- High
- 16
- Medium
- 12
- Low
- 0
- Unrated
- 20
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Clean My Mac
- 13
- Imperva SecureSphere
- 3
- Cisco Email Security Appliance
- 2
- Cisco IOS
- 2
- Intel(R) Optane(TM) SSD DC P4800X
- 2
- Cisco Firepower Management Center
- 1
- Cisco Identity Services Engine Software
- 1
- Cisco IP Phone 8800 Series Software
- 1
- Cisco Jabber for Mac
- 1
- Cisco Jabber IM for Android
- 1
High 16
- CVE-2018-15460Cisco Email Security Appliance URL Filtering Denial of Service VulnerabilityCisco Email Security Appliance
- CVE-2018-15453Cisco Email Security Appliance Memory Corruption Denial of Service VulnerabilityCisco Email Security Appliance
- CVE-2018-4032An exploitable privilege escalation vulnerability exists in the way the CleanMyMac X software improperly validates inputs.Clean My Mac
- CVE-2018-4033The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation.Clean My Mac
- CVE-2018-4034The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation.Clean My Mac
- CVE-2018-4035The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation.Clean My Mac
- CVE-2018-4036The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation.Clean My Mac
- CVE-2018-4037The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation.Clean My Mac
- CVE-2018-4041An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validaClean My Mac
- CVE-2018-4042An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validaClean My Mac
- CVE-2018-4043An exploitable privilege escalation vulnerability exists in the Clean My Mac X, version 4.04, helper service due to improper input validatioClean My Mac
- CVE-2018-4044An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validaClean My Mac
- CVE-2018-4045An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validaClean My Mac
- CVE-2018-4046An exploitable denial-of-service vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validatioClean My Mac
- CVE-2018-4047An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validaClean My Mac
- CVE-2018-0181Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent Software Redis Server Unauthenticated Access VulnerabilityCisco Policy Suite (CPS) Software
Medium, low and unrated 32
- CVE-2018-15461Cisco Webex Business Suite Cross-Site Scripting VulnerabilityCisco WebEx Meeting Center
- CVE-2018-5403Imperva SecureSphere gateway (GW) running v13, for both pre-First Time Login or post-First Time Login (FTL), if the attacker knows the basicImperva SecureSphere
- CVE-2018-5412Imperva SecureSphere running v12.0.0.50 is vulnerable to local arbitrary code execution, escaping sealed-mode.Imperva SecureSphere
- CVE-2018-5413Imperva SecureSphere running v13.0, v12.0, or v11.5 allows low privileged users to add SSH login keys to the admin user, resulting in privilImperva SecureSphere
- CVE-2017-1002152Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles.Fedora Project Infrastructure Bodhi · bodhi
- CVE-2017-1002157modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.Fedora Modularity modulemd · modulemd
- CVE-2018-20684In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept arbitrary files sent by the server, potentially o
- CVE-2017-3718Improper setting of device configuration in system firmware for Intel(R) NUC kits may allow a privileged user to potentially enable escalatiIntel(R) NUC
- CVE-2018-12166Insufficient write protection in firmware for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to potenIntel(R) Optane(TM) SSD DC P4800X
- CVE-2018-12167Firmware update routine in bootloader for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to potentialIntel(R) Optane(TM) SSD DC P4800X
- CVE-2018-12177Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.0.7 may allow an autIntel(R) PROSet/Wireless WiFi Software
- CVE-2018-18098Improper file verification in install routine for Intel(R) SGX SDK and Platform Software for Windows before 2.2.100 may allow an escalation Intel(R) SGX SDK and Platform Software for Windows
- CVE-2018-3703Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may allow authenticated useIntel(R) SSD Data Center Tool for Windows
- CVE-2019-0088Insufficient path checking in Intel(R) System Support Utility for Windows before 2.5.0.15 may allow an authenticated user to potentially enaIntel(R) System Support Utility for Windows
- CVE-2018-15457Cisco Prime Infrastructure Cross-Site Scripting VulnerabilityCisco Prime Infrastructure
- CVE-2018-15458Cisco Firepower Management Center Disk Utilization Denial of Service VulnerabilityCisco Firepower Management Center
- CVE-2018-0484Cisco IOS and IOS XE Software Secure Shell Connection on VRF VulnerabilityCisco IOS
- CVE-2018-15456Cisco Identity Services Engine Password Recovery VulnerabilityCisco Identity Services Engine Software
- CVE-2018-16803In CIMTechniques CIMScan 6.x through 6.2, the SOAP WSDL parser allows attackers to execute SQL code.
- CVE-2018-0482Cisco Prime Network Control System Stored Cross-Site Scripting VulnerabilityCisco Prime Network Control System
- CVE-2018-0483Cisco Jabber Client Framework Instant Message Cross-Site Scripting VulnerabilityCisco Jabber IM for Android
- CVE-2019-5892bgpd in FRRouting FRR (aka Free Range Routing) 2.x and 3.x before 3.0.4, 4.x before 4.0.1, 5.x before 5.0.2, and 6.x before 6.0.2 (not affec
- CVE-2019-5893Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter.
- CVE-2018-0449Cisco Jabber Client Framework Insecure Directory Permissions VulnerabilityCisco Jabber for Mac
- CVE-2018-0461Cisco IP Phone 8800 Series Arbitrary Script Injection VulnerabilityCisco IP Phone 8800 Series Software
- CVE-2018-0474Cisco Unified Communications Manager Digest Credentials Disclosure VulnerabilityCisco Unified Communications Manager
- CVE-2019-5886An issue was discovered in ShopXO 1.2.0.
- CVE-2019-5887An issue was discovered in ShopXO 1.2.0.
- CVE-2019-5884php/elFinder.class.php in elFinder before 2.1.45 leaks information if PHP's curl extension is enabled and safe_mode or open_basedir is not sstudio-42/elfinder
- CVE-2018-20683commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have a
- CVE-2018-0282Cisco IOS and IOS XE Software TCP Denial of Service VulnerabilityCisco IOS
- CVE-2018-20685In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of .