# CVEs published 2019-01-10

48 CVEs were published on January 10, 2019: 0 critical, 16 high. Days are UTC.

- [CVE-2018-15461](https://cve.now/CVE-2018-15461.md): Cisco Webex Business Suite Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco WebEx Meeting Center)
- [CVE-2018-15460](https://cve.now/CVE-2018-15460.md): Cisco Email Security Appliance URL Filtering Denial of Service Vulnerability (CVSS 8.6, Cisco Email Security Appliance)
- [CVE-2018-5403](https://cve.now/CVE-2018-5403.md): Imperva SecureSphere gateway (GW) running v13, for both pre-First Time Login or post-First Time Login (FTL), if the attacker knows the basic (no CVSS, Imperva SecureSphere)
- [CVE-2018-5412](https://cve.now/CVE-2018-5412.md): Imperva SecureSphere running v12.0.0.50 is vulnerable to local arbitrary code execution, escaping sealed-mode. (no CVSS, Imperva SecureSphere)
- [CVE-2018-5413](https://cve.now/CVE-2018-5413.md): Imperva SecureSphere running v13.0, v12.0, or v11.5 allows low privileged users to add SSH login keys to the admin user, resulting in privil (no CVSS, Imperva SecureSphere)
- [CVE-2017-1002152](https://cve.now/CVE-2017-1002152.md): Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles. (no CVSS, Fedora Project Infrastructure Bodhi · bodhi)
- [CVE-2017-1002157](https://cve.now/CVE-2017-1002157.md): modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution. (no CVSS, Fedora Modularity modulemd · modulemd)
- [CVE-2018-20684](https://cve.now/CVE-2018-20684.md): In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept arbitrary files sent by the server, potentially o (no CVSS)
- [CVE-2017-3718](https://cve.now/CVE-2017-3718.md): Improper setting of device configuration in system firmware for Intel(R) NUC kits may allow a privileged user to potentially enable escalati (no CVSS, Intel(R) NUC)
- [CVE-2018-12166](https://cve.now/CVE-2018-12166.md): Insufficient write protection in firmware for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to poten (no CVSS, Intel(R) Optane(TM) SSD DC P4800X)
- [CVE-2018-12167](https://cve.now/CVE-2018-12167.md): Firmware update routine in bootloader for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to potential (no CVSS, Intel(R) Optane(TM) SSD DC P4800X)
- [CVE-2018-12177](https://cve.now/CVE-2018-12177.md): Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.0.7 may allow an aut (no CVSS, Intel(R) PROSet/Wireless WiFi Software)
- [CVE-2018-18098](https://cve.now/CVE-2018-18098.md): Improper file verification in install routine for Intel(R) SGX SDK and Platform Software for Windows before 2.2.100 may allow an escalation (no CVSS, Intel(R) SGX SDK and Platform Software for Windows)
- [CVE-2018-3703](https://cve.now/CVE-2018-3703.md): Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may allow authenticated use (no CVSS, Intel(R) SSD Data Center Tool for Windows)
- [CVE-2019-0088](https://cve.now/CVE-2019-0088.md): Insufficient path checking in Intel(R) System Support Utility for Windows before 2.5.0.15 may allow an authenticated user to potentially ena (no CVSS, Intel(R) System Support Utility for Windows)
- [CVE-2018-15457](https://cve.now/CVE-2018-15457.md): Cisco Prime Infrastructure Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Prime Infrastructure)
- [CVE-2018-15458](https://cve.now/CVE-2018-15458.md): Cisco Firepower Management Center Disk Utilization Denial of Service Vulnerability (CVSS 5.3, Cisco Firepower Management Center)
- [CVE-2018-0484](https://cve.now/CVE-2018-0484.md): Cisco IOS and IOS XE Software Secure Shell Connection on VRF Vulnerability (CVSS 5.3, Cisco IOS)
- [CVE-2018-15453](https://cve.now/CVE-2018-15453.md): Cisco Email Security Appliance Memory Corruption Denial of Service Vulnerability (CVSS 8.6, Cisco Email Security Appliance)
- [CVE-2018-15456](https://cve.now/CVE-2018-15456.md): Cisco Identity Services Engine Password Recovery Vulnerability (CVSS 4.3, Cisco Identity Services Engine Software)
- [CVE-2018-16803](https://cve.now/CVE-2018-16803.md): In CIMTechniques CIMScan 6.x through 6.2, the SOAP WSDL parser allows attackers to execute SQL code. (no CVSS)
- [CVE-2018-0482](https://cve.now/CVE-2018-0482.md): Cisco Prime Network Control System Stored Cross-Site Scripting Vulnerability (CVSS 5.4, Cisco Prime Network Control System)
- [CVE-2018-0483](https://cve.now/CVE-2018-0483.md): Cisco Jabber Client Framework Instant Message Cross-Site Scripting Vulnerability (CVSS 4.6, Cisco Jabber IM for Android)
- [CVE-2019-5892](https://cve.now/CVE-2019-5892.md): bgpd in FRRouting FRR (aka Free Range Routing) 2.x and 3.x before 3.0.4, 4.x before 4.0.1, 5.x before 5.0.2, and 6.x before 6.0.2 (not affec (no CVSS)
- [CVE-2019-5893](https://cve.now/CVE-2019-5893.md): Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter. (no CVSS)
- [CVE-2018-0449](https://cve.now/CVE-2018-0449.md): Cisco Jabber Client Framework Insecure Directory Permissions Vulnerability (CVSS 5.1, Cisco Jabber for Mac)
- [CVE-2018-0461](https://cve.now/CVE-2018-0461.md): Cisco IP Phone 8800 Series Arbitrary Script Injection Vulnerability (CVSS 6.5, Cisco IP Phone 8800 Series Software)
- [CVE-2018-0474](https://cve.now/CVE-2018-0474.md): Cisco Unified Communications Manager Digest Credentials Disclosure Vulnerability (CVSS 4.3, Cisco Unified Communications Manager)
- [CVE-2018-4032](https://cve.now/CVE-2018-4032.md): An exploitable privilege escalation vulnerability exists in the way the CleanMyMac X software improperly validates inputs. (CVSS 7.1, Clean My Mac)
- [CVE-2018-4033](https://cve.now/CVE-2018-4033.md): The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. (CVSS 7.1, Clean My Mac)
- [CVE-2018-4034](https://cve.now/CVE-2018-4034.md): The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation. (CVSS 7.1, Clean My Mac)
- [CVE-2018-4035](https://cve.now/CVE-2018-4035.md): The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation. (CVSS 7.1, Clean My Mac)
- [CVE-2018-4036](https://cve.now/CVE-2018-4036.md): The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. (CVSS 7.1, Clean My Mac)
- [CVE-2018-4037](https://cve.now/CVE-2018-4037.md): The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. (CVSS 7.1, Clean My Mac)
- [CVE-2018-4041](https://cve.now/CVE-2018-4041.md): An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input valida (CVSS 7.1, Clean My Mac)
- [CVE-2018-4042](https://cve.now/CVE-2018-4042.md): An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input valida (CVSS 7.1, Clean My Mac)
- [CVE-2018-4043](https://cve.now/CVE-2018-4043.md): An exploitable privilege escalation vulnerability exists in the Clean My Mac X, version 4.04, helper service due to improper input validatio (CVSS 7.1, Clean My Mac)
- [CVE-2018-4044](https://cve.now/CVE-2018-4044.md): An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input valida (CVSS 7.1, Clean My Mac)
- [CVE-2018-4045](https://cve.now/CVE-2018-4045.md): An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input valida (CVSS 7.1, Clean My Mac)
- [CVE-2018-4046](https://cve.now/CVE-2018-4046.md): An exploitable denial-of-service vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validatio (CVSS 7.1, Clean My Mac)
- [CVE-2018-4047](https://cve.now/CVE-2018-4047.md): An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input valida (CVSS 7.1, Clean My Mac)
- [CVE-2019-5886](https://cve.now/CVE-2019-5886.md): An issue was discovered in ShopXO 1.2.0. (no CVSS)
- [CVE-2019-5887](https://cve.now/CVE-2019-5887.md): An issue was discovered in ShopXO 1.2.0. (no CVSS)
- [CVE-2019-5884](https://cve.now/CVE-2019-5884.md): php/elFinder.class.php in elFinder before 2.1.45 leaks information if PHP's curl extension is enabled and safe\_mode or open\_basedir is not s (no CVSS, studio-42/elfinder)
- [CVE-2018-20683](https://cve.now/CVE-2018-20683.md): commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have a (no CVSS)
- [CVE-2018-0181](https://cve.now/CVE-2018-0181.md): Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent Software Redis Server Unauthenticated Access Vulnerability (CVSS 7.3, Cisco Policy Suite (CPS) Software)
- [CVE-2018-0282](https://cve.now/CVE-2018-0282.md): Cisco IOS and IOS XE Software TCP Denial of Service Vulnerability (CVSS 6.8, Cisco IOS)
- [CVE-2018-20685](https://cve.now/CVE-2018-20685.md): In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . (CVSS 5.3)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-01-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.