Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: July 2018

159 records · 5 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 1 of 2

  • CVE-2018-13050
    51Plan

    A SQL Injection vulnerability exists in Zoho ManageEngine Applications Manager 13.x before build 13800 via the j_username parameter in a /j_

    CriticalCVSS 9.8No exploitEPSS 39%

    zohocorp · manageengine applications managerJul 2, 2018

  • CVE-2018-9276
    84Now

    An issue was discovered in PRTG Network Monitor before 18.2.39.

    HighCVSS 7.2KEVWeaponizedEPSS 86%

    paessler · prtg network monitorJul 2, 2018

  • CVE-2018-7777
    45Plan

    The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Electric U.motion Build

    HighCVSS 8.8Proof of conceptEPSS 31%

    schneider-electric · u.motion builderJul 3, 2018

  • CVE-2017-0929
    34Monitor

    DNN (aka DotNetNuke) before 9.2.0 suffers from a Server-Side Request Forgery (SSRF) vulnerability in the DnnImageHandler class.

    HighCVSS 7.5Proof of conceptEPSS 12%

    dnnsoftware · dotnetnukeJul 3, 2018

  • CVE-2018-8038
    33Monitor

    Versions of Apache CXF Fediz prior to 1.4.4 do not fully disable Document Type Declarations (DTDs) when either parsing the Identity Provider

    HighCVSS 7.5Proof of conceptEPSS 10%

    apache · cxf fedizJul 5, 2018

  • CVE-2018-12520
    35Monitor

    An issue was discovered in ntopng 3.4 before 3.4.180617.

    HighCVSS 8.1Proof of conceptEPSS 10%

    ntop · ntopngJul 5, 2018

  • CVE-2018-12571
    48Plan

    uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS q

    CriticalCVSS 9.8No exploitEPSS 30%

    microsoft · forefront unified access gatewayJul 5, 2018

  • CVE-2018-8046
    44Plan

    The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data.

    MediumCVSS 6.1No exploitEPSS 66%

    sencha · ext jsJul 5, 2018

  • CVE-2018-13109
    41Plan

    All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers a

    HighCVSS 7.5Proof of conceptEPSS 35%

    adbglobal · dv2210 firmwareJul 6, 2018

  • CVE-2018-13784
    41Plan

    PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfish.php.

    CriticalCVSS 9.1Proof of conceptEPSS 16%

    prestashop · prestashopJul 9, 2018

  • CVE-2018-4947
    44Plan

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap Overflo

    CriticalCVSS 9.8No exploitEPSS 15%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4948
    44Plan

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap Overflo

    CriticalCVSS 9.8No exploitEPSS 15%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4949
    40Plan

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    HighCVSS 7.5No exploitEPSS 32%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4950
    42Plan

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    CriticalCVSS 9.8No exploitEPSS 10%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4955
    33Monitor

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    HighCVSS 7.5No exploitEPSS 10%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4956
    40Plan

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    HighCVSS 7.5No exploitEPSS 32%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4957
    33Monitor

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    HighCVSS 7.5No exploitEPSS 10%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4958
    42Plan

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-fr

    CriticalCVSS 9.8No exploitEPSS 11%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4959
    42Plan

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-fr

    CriticalCVSS 9.8No exploitEPSS 11%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4960
    33Monitor

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    HighCVSS 7.5No exploitEPSS 10%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4961
    42Plan

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-fr

    CriticalCVSS 9.8No exploitEPSS 11%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4962
    33Monitor

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    HighCVSS 7.5No exploitEPSS 10%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4963
    33Monitor

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    HighCVSS 7.5No exploitEPSS 10%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4964
    33Monitor

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    HighCVSS 7.5No exploitEPSS 10%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4966
    44Plan

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap Overflo

    CriticalCVSS 9.8No exploitEPSS 15%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4967
    33Monitor

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    HighCVSS 7.5No exploitEPSS 10%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4968
    44Plan

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap Overflo

    CriticalCVSS 9.8No exploitEPSS 15%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4969
    33Monitor

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    HighCVSS 7.5No exploitEPSS 10%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4970
    33Monitor

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    HighCVSS 7.5No exploitEPSS 10%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4973
    33Monitor

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    HighCVSS 7.5No exploitEPSS 10%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4975
    33Monitor

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    HighCVSS 7.5No exploitEPSS 10%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4976
    33Monitor

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    HighCVSS 7.5No exploitEPSS 10%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4977
    42Plan

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-fr

    CriticalCVSS 9.8No exploitEPSS 11%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4978
    44Plan

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap Overflo

    CriticalCVSS 9.8No exploitEPSS 15%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4981
    33Monitor

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    HighCVSS 7.5No exploitEPSS 10%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4982
    42Plan

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap Overflo

    HighCVSS 8.8No exploitEPSS 24%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4983
    42Plan

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-fr

    CriticalCVSS 9.8No exploitEPSS 11%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4984
    44Plan

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap Overflo

    CriticalCVSS 9.8No exploitEPSS 15%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4985
    41Plan

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    HighCVSS 7.5No exploitEPSS 36%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4986
    33Monitor

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    HighCVSS 7.5No exploitEPSS 10%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4987
    43Plan

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Untrusted p

    CriticalCVSS 9.8No exploitEPSS 13%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4988
    42Plan

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-fr

    CriticalCVSS 9.8No exploitEPSS 11%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4989
    42Plan

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-fr

    CriticalCVSS 9.8No exploitEPSS 11%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4990
    76This week

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free

    HighCVSS 8.8KEVWeaponizedEPSS 36%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-4993
    60This week

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an NTLM SSO ha

    HighCVSS 7.5WeaponizedEPSS 86%

    adobe · acrobat dcJul 9, 2018

  • CVE-2018-5000
    30Monitor

    Adobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability.

    MediumCVSS 6.5No exploitEPSS 13%

    adobe · flash player desktop runtimeJul 9, 2018

  • CVE-2018-5001
    30Monitor

    Adobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read vulnerability.

    MediumCVSS 6.5No exploitEPSS 13%

    adobe · flash player desktop runtimeJul 9, 2018

  • CVE-2018-5002
    69This week

    Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability.

    HighCVSS 7.8KEVWeaponizedEPSS 25%

    adobe · flash player desktop runtimeJul 9, 2018

  • CVE-2018-1000613
    40Plan

    Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of

    CriticalCVSS 9.8No exploitEPSS 4%

    bouncycastle · bc-javaJul 9, 2018

  • CVE-2018-0949
    30Monitor

    A security feature bypass vulnerability exists when Microsoft Internet Explorer improperly handles requests involving UNC resources, aka "In

    MediumCVSS 6.5No exploitEPSS 12%

    microsoft · internet explorerJul 10, 2018

  • CVE-2018-8125
    36Monitor

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptio

    HighCVSS 7.5No exploitEPSS 20%

    microsoft · edgeJul 10, 2018

  • CVE-2018-8171
    33Monitor

    A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Securit

    HighCVSS 7.5No exploitEPSS 10%

    microsoft · asp.net coreJul 10, 2018

  • CVE-2018-8172
    41Plan

    A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an u

    HighCVSS 7.8Proof of conceptEPSS 33%

    microsoft · expression blendJul 10, 2018

  • CVE-2018-8206
    34Monitor

    A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections, aka "Windows FTP Server D

    HighCVSS 7.5No exploitEPSS 11%

    microsoft · windows 10Jul 10, 2018

  • CVE-2018-8242
    36Monitor

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip

    HighCVSS 7.5No exploitEPSS 19%

    microsoft · internet explorerJul 10, 2018

  • CVE-2018-8260
    40Plan

    A Remote Code Execution vulnerability exists in .NET software when the software fails to check the source markup of a file, aka ".NET Framew

    HighCVSS 8.8No exploitEPSS 15%

    microsoft · .net frameworkJul 10, 2018

  • CVE-2018-8262
    36Monitor

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptio

    HighCVSS 7.5No exploitEPSS 20%

    microsoft · edgeJul 10, 2018

  • CVE-2018-8274
    36Monitor

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptio

    HighCVSS 7.5No exploitEPSS 20%

    microsoft · edgeJul 10, 2018

  • CVE-2018-8275
    36Monitor

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptio

    HighCVSS 7.5No exploitEPSS 20%

    microsoft · edgeJul 10, 2018

  • CVE-2018-8279
    51Plan

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptio

    HighCVSS 7.5Proof of conceptEPSS 70%

    microsoft · edgeJul 10, 2018

  • CVE-2018-8280
    36Monitor

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5No exploitEPSS 20%

    microsoft · edgeJul 10, 2018

  • CVE-2018-8281
    37Monitor

    A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka

    HighCVSS 7.8No exploitEPSS 21%

    microsoft · officeJul 10, 2018

  • CVE-2018-8283
    35Monitor

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engin

    HighCVSS 7.5No exploitEPSS 15%

    microsoft · chakracoreJul 10, 2018

  • CVE-2018-8284
    46Plan

    A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote

    HighCVSS 8.1Proof of conceptEPSS 45%

    microsoft · .net frameworkJul 10, 2018

  • CVE-2018-8286
    36Monitor

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5No exploitEPSS 20%

    microsoft · edgeJul 10, 2018

  • CVE-2018-8287
    35Monitor

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting

    HighCVSS 7.5No exploitEPSS 16%

    microsoft · internet explorerJul 10, 2018

  • CVE-2018-8288
    51Plan

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting

    HighCVSS 7.5Proof of conceptEPSS 69%

    microsoft · internet explorerJul 10, 2018

  • CVE-2018-8289
    20Monitor

    An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Dis

    MediumCVSS 4.3No exploitEPSS 10%

    microsoft · edgeJul 10, 2018

  • CVE-2018-8290
    36Monitor

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5No exploitEPSS 20%

    microsoft · edgeJul 10, 2018

  • CVE-2018-8291
    51Plan

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting

    HighCVSS 7.5Proof of conceptEPSS 69%

    microsoft · internet explorerJul 10, 2018

  • CVE-2018-8294
    36Monitor

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5No exploitEPSS 21%

    microsoft · edgeJul 10, 2018

  • CVE-2018-8296
    35Monitor

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip

    HighCVSS 7.5No exploitEPSS 17%

    microsoft · internet explorerJul 10, 2018

  • CVE-2018-8297
    20Monitor

    An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Dis

    MediumCVSS 4.3No exploitEPSS 10%

    microsoft · edgeJul 10, 2018

  • CVE-2018-8298
    82Now

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engin

    HighCVSS 7.5KEVWeaponizedEPSS 74%

    microsoft · chakracoreJul 10, 2018

  • CVE-2018-8300
    39Monitor

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa

    HighCVSS 8.8No exploitEPSS 13%

    microsoft · sharepoint enterprise serverJul 10, 2018

  • CVE-2018-8301
    34Monitor

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptio

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · edgeJul 10, 2018

  • CVE-2018-8304
    27Monitor

    A denial of service vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka

    MediumCVSS 5.9No exploitEPSS 12%

    microsoft · windows 10Jul 10, 2018

  • CVE-2018-8311
    40Plan

    A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted

    HighCVSS 8.8No exploitEPSS 16%

    microsoft · lyncJul 10, 2018

  • CVE-2018-8312
    37Monitor

    A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory, aka "Microsoft Access Remote

    HighCVSS 7.8No exploitEPSS 21%

    microsoft · accessJul 10, 2018

  • CVE-2018-8324
    20Monitor

    An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Dis

    MediumCVSS 4.3No exploitEPSS 10%

    microsoft · edgeJul 10, 2018

  • CVE-2018-8327
    46Plan

    A remote code execution vulnerability exists in PowerShell Editor Services, aka "PowerShell Editor Services Remote Code Execution Vulnerabil

    CriticalCVSS 9.8No exploitEPSS 23%

    microsoft · powershellJul 10, 2018

  • CVE-2018-8007
    32Monitor

    Apache CouchDB administrative users can configure the database server via HTTP(S).

    HighCVSS 7.2No exploitEPSS 12%

    apache · couchdbJul 11, 2018

  • CVE-2017-16709
    50Plan

    Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated admini

    HighCVSS 7.2WeaponizedEPSS 71%

    crestron · airmedia am-100 firmwareJul 11, 2018

  • CVE-2018-11529
    43Plan

    VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via craf

    HighCVSS 8.0WeaponizedEPSS 36%

    videolan · vlc media playerJul 11, 2018

  • CVE-2018-12463
    43Plan

    MFSBGN03811 rev.1 - Fortify Software Security Center (SSC), Multiple vulnerabilities

    CriticalCVSS 9.8Proof of conceptEPSS 13%

    hp · fortify software security centerJul 12, 2018

  • CVE-2018-14009
    50Plan

    Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.

    CriticalCVSS 9.8Proof of conceptEPSS 38%

    codiad · codiadJul 12, 2018

  • CVE-2018-12980
    44Plan

    An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02.

    HighCVSS 8.8Proof of conceptEPSS 29%

    wago · 762-3000 firmwareJul 12, 2018

  • CVE-2018-1000207
    47Plan

    MODX Revolution version <=2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpt

    HighCVSS 7.2No exploitEPSS 64%

    modx · modx revolutionJul 13, 2018

  • CVE-2016-6563
    63This week

    D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action

    CriticalCVSS 9.8WeaponizedEPSS 79%

    dlink · dir-823 firmwareJul 13, 2018

  • CVE-2016-6566
    42Plan

    The Sungard eTRAKiT3 software version 3.2.1.17 may be vulnerable to SQL injection which may allow a remote unauthenticated attacker to run a subset of SQL comma

    CriticalCVSS 9.8Proof of conceptEPSS 11%

    sungardas · etrakit3Jul 13, 2018

  • CVE-2016-9498
    45Plan

    ManageEngine Applications Manager 12 and 13, allows unserialization of unsafe Java objects

    CriticalCVSS 9.8No exploitEPSS 21%

    zohocorp · manageengine applications managerJul 13, 2018

  • CVE-2018-14064
    50Plan

    The uc-http service 1.0.0 on VelotiSmart WiFi B-380 camera devices allows Directory Traversal, as demonstrated by /../../etc/passwd on TCP p

    CriticalCVSS 9.8Proof of conceptEPSS 37%

    velotismart project · velotismart wifi firmwareJul 15, 2018

  • CVE-2018-11716
    43Plan

    An issue was discovered in Zoho ManageEngine Desktop Central before 100230.

    CriticalCVSS 9.8No exploitEPSS 14%

    zohocorp · manageengine desktop centralJul 16, 2018

  • CVE-2018-13981
    44Plan

    The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated remote code execution due to a d

    CriticalCVSS 9.8Proof of conceptEPSS 17%

    zeta-producer · zeta producer desktop cmsJul 16, 2018

  • CVE-2018-12584
    46Plan

    The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cau

    CriticalCVSS 9.8Proof of conceptEPSS 23%

    resiprocate · resiprocateJul 16, 2018

  • CVE-2018-0706
    49Plan

    Exposure of Private Information in QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to access se

    HighCVSS 8.8WeaponizedEPSS 48%

    qnap · q\'centerJul 16, 2018

  • CVE-2018-0707
    46Plan

    Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated

    HighCVSS 7.2WeaponizedEPSS 58%

    qnap · q\'centerJul 16, 2018

  • CVE-2018-0708
    43Plan

    Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated user

    HighCVSS 8.8Proof of conceptEPSS 26%

    qnap · q\'centerJul 16, 2018

  • CVE-2018-0709
    39Monitor

    Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to r

    HighCVSS 8.8Proof of conceptEPSS 13%

    qnap · q\'centerJul 16, 2018

  • CVE-2018-0710
    39Monitor

    Command injection vulnerability in SSH of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to ru

    HighCVSS 8.8Proof of conceptEPSS 14%

    qnap · q\'centerJul 16, 2018