By publication date

Exploited and new serious CVEs: July 2018

159 records · 5 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 2 of 2

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
44Plan	CVE-2018-13859Proof of concept	MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34 build 13381 - 12.07.18, allow unauthorized remotrivum · c4 professional firmware Pre-auth	Critical9.8	—	17.2%	Jul 17, 2018
54Plan	CVE-2018-13862Proof of concept	Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allow unauthorized remote attackers to reset the authetrivum · webtouch setup v9 firmware Pre-auth	Critical9.8	—	49.2%	Jul 17, 2018
60This week	CVE-2018-1612Weaponized	IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive infibm · qradar security information and event manager · CWE-200 Pre-auth Auth bypass Info leak	Medium5.8	—	55.6%	Jul 17, 2018
60This week	CVE-2018-2893Proof of concept	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).oracle · weblogic server Pre-auth	Critical9.8	—	70.3%	Jul 18, 2018
54Plan	CVE-2018-2894Proof of concept	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services).oracle · weblogic server Pre-auth	Critical9.8	—	50.2%	Jul 18, 2018
39Monitor	CVE-2018-2992No exploit	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).oracle · outside in technology Pre-auth	High7.1	—	35.1%	Jul 18, 2018
47Plan	CVE-2018-8011Proof of concept	mod_md, DoS via Coredumps on specially crafted requestsapache · http server · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	55.6%	Jul 18, 2018
53Plan	CVE-2018-14364No exploit	GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write acgitlab · gitlab · CWE-22 pre-auth RCE Path traversal	Critical9.8	—	47.6%	Jul 18, 2018
39Monitor	CVE-2018-14392Proof of concept	The New Threads plugin before 1.2 for MyBB has XSS.mybb · new threads · CWE-79 Pre-auth XSS	Medium6.1	—	48.5%	Jul 18, 2018
99Now	CVE-2018-7602Weaponized	Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004drupal · drupal · CWE-94 pre-auth RCE	Critical9.8	KEV	99.1%	Jul 19, 2018
46Plan	CVE-2018-12754No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	24.9%	Jul 20, 2018
46Plan	CVE-2018-12755No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	24.9%	Jul 20, 2018
35Monitor	CVE-2018-12764No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-125 Pre-auth Memory safety	Medium6.5	—	30.6%	Jul 20, 2018
38Monitor	CVE-2018-12765No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-125 Pre-auth Memory safety	High7.5	—	27.4%	Jul 20, 2018
38Monitor	CVE-2018-12766No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-125 Pre-auth Memory safety	High7.5	—	27.4%	Jul 20, 2018
38Monitor	CVE-2018-12767No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-125 Pre-auth Memory safety	High7.5	—	27.4%	Jul 20, 2018
38Monitor	CVE-2018-12768No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-125 Pre-auth Memory safety	High7.5	—	27.4%	Jul 20, 2018
42Plan	CVE-2018-12782No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Double Free adobe · acrobat dc · CWE-415 pre-auth RCE Memory safety	Critical9.8	—	11.0%	Jul 20, 2018
38Monitor	CVE-2018-12788No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 pre-auth RCE Memory safety	High8.8	—	11.1%	Jul 20, 2018
40Plan	CVE-2018-12794No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Type Confusiadobe · acrobat dc · CWE-704 pre-auth RCE	High8.8	—	15.6%	Jul 20, 2018
43Plan	CVE-2018-12798Proof of concept	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	13.3%	Jul 20, 2018
42Plan	CVE-2018-12804No exploit	Adobe Connect versions 9.7.5 and earlier have an Authentication Bypass vulnerability.adobe · connect · CWE-287 Pre-auth Auth bypass	Critical9.8	—	11.0%	Jul 20, 2018
42Plan	CVE-2018-12815No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Use-after-fradobe · acrobat dc · CWE-416 pre-auth RCE Memory safety	Critical9.8	—	10.8%	Jul 20, 2018
46Plan	CVE-2018-5006No exploit	Adobe Experience Manager versions 6.4 and earlier have a Server-Side Request Forgery vulnerability.adobe · experience manager · CWE-918 Pre-auth SSRF	High7.5	—	53.3%	Jul 20, 2018
40Plan	CVE-2018-5007No exploit	Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability.adobe · flash player desktop runtime · CWE-704 pre-auth RCE	High8.8	—	17.7%	Jul 20, 2018
38Monitor	CVE-2018-5015No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 pre-auth RCE Memory safety	High8.8	—	11.1%	Jul 20, 2018
38Monitor	CVE-2018-5028No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 pre-auth RCE Memory safety	High8.8	—	11.1%	Jul 20, 2018
38Monitor	CVE-2018-5032No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 pre-auth RCE Memory safety	High8.8	—	10.6%	Jul 20, 2018
38Monitor	CVE-2018-5036No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 pre-auth RCE Memory safety	High8.8	—	11.1%	Jul 20, 2018
38Monitor	CVE-2018-5038No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 pre-auth RCE Memory safety	High8.8	—	11.1%	Jul 20, 2018
38Monitor	CVE-2018-5040No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 pre-auth RCE Memory safety	High8.8	—	11.1%	Jul 20, 2018
38Monitor	CVE-2018-5041No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 pre-auth RCE Memory safety	High8.8	—	11.1%	Jul 20, 2018
38Monitor	CVE-2018-5045No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 pre-auth RCE Memory safety	High8.8	—	11.1%	Jul 20, 2018
38Monitor	CVE-2018-5052No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 pre-auth RCE Memory safety	High8.8	—	11.1%	Jul 20, 2018
38Monitor	CVE-2018-5058No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 pre-auth RCE Memory safety	High8.8	—	11.1%	Jul 20, 2018
35Monitor	CVE-2018-5063No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-125 Pre-auth Memory safety	Medium6.5	—	30.6%	Jul 20, 2018
47Plan	CVE-2018-5064No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	25.1%	Jul 20, 2018
44Plan	CVE-2018-5065No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Use-after-fradobe · acrobat dc · CWE-416 pre-auth RCE Memory safety	High8.8	—	31.1%	Jul 20, 2018
38Monitor	CVE-2018-5067No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 pre-auth RCE Memory safety	High8.8	—	11.1%	Jul 20, 2018
38Monitor	CVE-2018-5068No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-125 Pre-auth Memory safety	High7.5	—	27.4%	Jul 20, 2018
47Plan	CVE-2018-5069No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	25.1%	Jul 20, 2018
47Plan	CVE-2018-5070No exploit	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	25.1%	Jul 20, 2018
40Plan	CVE-2018-1999001No exploit	A unauthorized modification of configuration vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in User.java that allowsjenkins · jenkins Pre-auth	High8.8	—	18.1%	Jul 23, 2018
56Plan	CVE-2018-1999002Proof of concept	A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framework's org/kohsuke/stapjenkins · jenkins Pre-auth	High7.5	—	86.4%	Jul 23, 2018
42Plan	CVE-2018-14328Proof of concept	Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via abrynamics · online trade · CWE-200 Pre-auth Info leak	Critical9.8	—	10.5%	Jul 23, 2018
30Monitor	CVE-2018-14335Proof of concept	An issue was discovered in H2 1.4.197.h2database · h2 · CWE-59	Medium6.5	—	13.2%	Jul 24, 2018
46Plan	CVE-2016-5649Proof of concept	Netgear DGN2200 and DGND3700 disclose the administrator passwordnetgear · dgn2200 firmware · CWE-319 Pre-auth Weak crypto	Critical9.8	—	23.5%	Jul 24, 2018
25Monitor	CVE-2018-1002200Proof of concept	plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) codehaus-plexus · plexus-archiver · CWE-22 Path traversal	Medium5.5	—	11.5%	Jul 25, 2018
25Monitor	CVE-2018-1002201Proof of concept	zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip ajrebel · zt-zip · CWE-22 Path traversal	Medium5.5	—	10.4%	Jul 25, 2018
30Monitor	CVE-2018-1002202Proof of concept	zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip azip4j project · zip4j · CWE-22 Pre-auth Path traversal	Medium6.5	—	12.6%	Jul 25, 2018
25Monitor	CVE-2018-1002203No exploit	unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot sunzipper project · unzipper · CWE-22 Path traversal	Medium5.5	—	10.5%	Jul 25, 2018
26Monitor	CVE-2018-1002204No exploit	adm-zip npm library before 0.4.9 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slaadm-zip project · adm-zip · CWE-22 Path traversal	Medium5.5	—	13.4%	Jul 25, 2018
25Monitor	CVE-2018-1002205No exploit	DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot sladotnetzip.semverd project · dotnetzip.semverd · CWE-22 Path traversal	Medium5.5	—	10.3%	Jul 25, 2018
36Monitor	CVE-2018-14493Proof of concept	Cross-site scripting (XSS) vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inject arbitrary web scopmantek · open-audit · CWE-79 Pre-auth XSS	Medium6.1	—	40.9%	Jul 25, 2018
40Plan	CVE-2018-10900Weaponized	Network Manager VPNC plugin (aka networkmanager-vpnc) before version 1.2.6 is vulnerable to a privilege escalation attack.gnome · network manager vpnc · CWE-78 RCE Local privilege escalation Command injection	High7.8	—	3.9%	Jul 26, 2018
33Monitor	CVE-2017-12150No exploit	It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration samba · samba · CWE-300 Pre-auth	High7.4	—	13.1%	Jul 26, 2018
45Plan	CVE-2017-15120Proof of concept	An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference whepowerdns · recursor · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	51.3%	Jul 27, 2018
43Plan	CVE-2017-15118Proof of concept	A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an exporqemu · qemu · CWE-121 Pre-auth Memory safety	Critical9.8	—	11.9%	Jul 27, 2018
48Plan	CVE-2018-14767No exploit	In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentationkamailio · kamailio · CWE-20 pre-auth RCE	Critical9.8	—	29.3%	Jul 31, 2018

CVE-2018-13859
44Plan
MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34 build 13381 - 12.07.18, allow unauthorized remo
CriticalCVSS 9.8Proof of conceptEPSS 17%
- Pre-auth
trivum · c4 professional firmwareJul 17, 2018
CVE-2018-13862
54Plan
Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allow unauthorized remote attackers to reset the authe
CriticalCVSS 9.8Proof of conceptEPSS 49%
- Pre-auth
trivum · webtouch setup v9 firmwareJul 17, 2018
CVE-2018-1612
60This week
IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive inf
MediumCVSS 5.8WeaponizedEPSS 55%
- Pre-auth
- Auth bypass
- Info leak
ibm · qradar security information and event managerJul 17, 2018
CVE-2018-2893
60This week
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).
CriticalCVSS 9.8Proof of conceptEPSS 70%
- Pre-auth
oracle · weblogic serverJul 18, 2018
CVE-2018-2894
54Plan
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services).
CriticalCVSS 9.8Proof of conceptEPSS 50%
- Pre-auth
oracle · weblogic serverJul 18, 2018
CVE-2018-2992
39Monitor
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).
HighCVSS 7.1No exploitEPSS 35%
- Pre-auth
oracle · outside in technologyJul 18, 2018
CVE-2018-8011
47Plan
mod_md, DoS via Coredumps on specially crafted requests
HighCVSS 7.5Proof of conceptEPSS 55%
- Pre-auth
- Memory safety
- Denial of service
apache · http serverJul 18, 2018
CVE-2018-14364
53Plan
GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write ac
CriticalCVSS 9.8No exploitEPSS 47%
- pre-auth RCE
- Path traversal
gitlab · gitlabJul 18, 2018
CVE-2018-14392
39Monitor
The New Threads plugin before 1.2 for MyBB has XSS.
MediumCVSS 6.1Proof of conceptEPSS 48%
- Pre-auth
- XSS
mybb · new threadsJul 18, 2018
CVE-2018-7602
99Now
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
CriticalCVSS 9.8KEVWeaponizedEPSS 99%
- pre-auth RCE
drupal · drupalJul 19, 2018
CVE-2018-12754
46Plan
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
CriticalCVSS 9.8No exploitEPSS 24%
- pre-auth RCE
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-12755
46Plan
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
CriticalCVSS 9.8No exploitEPSS 24%
- pre-auth RCE
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-12764
35Monitor
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
MediumCVSS 6.5No exploitEPSS 30%
- Pre-auth
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-12765
38Monitor
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
HighCVSS 7.5No exploitEPSS 27%
- Pre-auth
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-12766
38Monitor
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
HighCVSS 7.5No exploitEPSS 27%
- Pre-auth
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-12767
38Monitor
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
HighCVSS 7.5No exploitEPSS 27%
- Pre-auth
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-12768
38Monitor
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
HighCVSS 7.5No exploitEPSS 27%
- Pre-auth
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-12782
42Plan
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Double Free
CriticalCVSS 9.8No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-12788
38Monitor
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
HighCVSS 8.8No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-12794
40Plan
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Type Confusi
HighCVSS 8.8No exploitEPSS 15%
- pre-auth RCE
adobe · acrobat dcJul 20, 2018
CVE-2018-12798
43Plan
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
CriticalCVSS 9.8Proof of conceptEPSS 13%
- pre-auth RCE
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-12804
42Plan
Adobe Connect versions 9.7.5 and earlier have an Authentication Bypass vulnerability.
CriticalCVSS 9.8No exploitEPSS 11%
- Pre-auth
- Auth bypass
adobe · connectJul 20, 2018
CVE-2018-12815
42Plan
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Use-after-fr
CriticalCVSS 9.8No exploitEPSS 10%
- pre-auth RCE
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-5006
46Plan
Adobe Experience Manager versions 6.4 and earlier have a Server-Side Request Forgery vulnerability.
HighCVSS 7.5No exploitEPSS 53%
- Pre-auth
- SSRF
adobe · experience managerJul 20, 2018
CVE-2018-5007
40Plan
Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability.
HighCVSS 8.8No exploitEPSS 17%
- pre-auth RCE
adobe · flash player desktop runtimeJul 20, 2018
CVE-2018-5015
38Monitor
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
HighCVSS 8.8No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-5028
38Monitor
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
HighCVSS 8.8No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-5032
38Monitor
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
HighCVSS 8.8No exploitEPSS 10%
- pre-auth RCE
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-5036
38Monitor
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
HighCVSS 8.8No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-5038
38Monitor
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
HighCVSS 8.8No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-5040
38Monitor
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
HighCVSS 8.8No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-5041
38Monitor
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
HighCVSS 8.8No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-5045
38Monitor
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
HighCVSS 8.8No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-5052
38Monitor
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
HighCVSS 8.8No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-5058
38Monitor
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
HighCVSS 8.8No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-5063
35Monitor
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
MediumCVSS 6.5No exploitEPSS 30%
- Pre-auth
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-5064
47Plan
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
CriticalCVSS 9.8No exploitEPSS 25%
- pre-auth RCE
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-5065
44Plan
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Use-after-fr
HighCVSS 8.8No exploitEPSS 31%
- pre-auth RCE
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-5067
38Monitor
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
HighCVSS 8.8No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-5068
38Monitor
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
HighCVSS 7.5No exploitEPSS 27%
- Pre-auth
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-5069
47Plan
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
CriticalCVSS 9.8No exploitEPSS 25%
- pre-auth RCE
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-5070
47Plan
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
CriticalCVSS 9.8No exploitEPSS 25%
- pre-auth RCE
- Memory safety
adobe · acrobat dcJul 20, 2018
CVE-2018-1999001
40Plan
A unauthorized modification of configuration vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in User.java that allows
HighCVSS 8.8No exploitEPSS 18%
- Pre-auth
jenkins · jenkinsJul 23, 2018
CVE-2018-1999002
56Plan
A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framework's org/kohsuke/stap
HighCVSS 7.5Proof of conceptEPSS 86%
- Pre-auth
jenkins · jenkinsJul 23, 2018
CVE-2018-14328
42Plan
Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via a
CriticalCVSS 9.8Proof of conceptEPSS 10%
- Pre-auth
- Info leak
brynamics · online tradeJul 23, 2018
CVE-2018-14335
30Monitor
An issue was discovered in H2 1.4.197.
MediumCVSS 6.5Proof of conceptEPSS 13%
h2database · h2Jul 24, 2018
CVE-2016-5649
46Plan
Netgear DGN2200 and DGND3700 disclose the administrator password
CriticalCVSS 9.8Proof of conceptEPSS 23%
- Pre-auth
- Weak crypto
netgear · dgn2200 firmwareJul 24, 2018
CVE-2018-1002200
25Monitor
plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash)
MediumCVSS 5.5Proof of conceptEPSS 11%
- Path traversal
codehaus-plexus · plexus-archiverJul 25, 2018
CVE-2018-1002201
25Monitor
zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip a
MediumCVSS 5.5Proof of conceptEPSS 10%
- Path traversal
jrebel · zt-zipJul 25, 2018
CVE-2018-1002202
30Monitor
zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip a
MediumCVSS 6.5Proof of conceptEPSS 12%
- Pre-auth
- Path traversal
zip4j project · zip4jJul 25, 2018
CVE-2018-1002203
25Monitor
unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot s
MediumCVSS 5.5No exploitEPSS 10%
- Path traversal
unzipper project · unzipperJul 25, 2018
CVE-2018-1002204
26Monitor
adm-zip npm library before 0.4.9 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot sla
MediumCVSS 5.5No exploitEPSS 13%
- Path traversal
adm-zip project · adm-zipJul 25, 2018
CVE-2018-1002205
25Monitor
DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot sla
MediumCVSS 5.5No exploitEPSS 10%
- Path traversal
dotnetzip.semverd project · dotnetzip.semverdJul 25, 2018
CVE-2018-14493
36Monitor
Cross-site scripting (XSS) vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inject arbitrary web sc
MediumCVSS 6.1Proof of conceptEPSS 40%
- Pre-auth
- XSS
opmantek · open-auditJul 25, 2018
CVE-2018-10900
40Plan
Network Manager VPNC plugin (aka networkmanager-vpnc) before version 1.2.6 is vulnerable to a privilege escalation attack.
HighCVSS 7.8WeaponizedEPSS 3%
- RCE
- Local privilege escalation
- Command injection
gnome · network manager vpncJul 26, 2018
CVE-2017-12150
33Monitor
It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration
HighCVSS 7.4No exploitEPSS 13%
- Pre-auth
samba · sambaJul 26, 2018
CVE-2017-15120
45Plan
An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference whe
HighCVSS 7.5Proof of conceptEPSS 51%
- Pre-auth
- Memory safety
- Denial of service
powerdns · recursorJul 27, 2018
CVE-2017-15118
43Plan
A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an expor
CriticalCVSS 9.8Proof of conceptEPSS 11%
- Pre-auth
- Memory safety
qemu · qemuJul 27, 2018
CVE-2018-14767
48Plan
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentation
CriticalCVSS 9.8No exploitEPSS 29%
- pre-auth RCE
kamailio · kamailioJul 31, 2018