Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: September 2018

82 records · 3 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2018-16323
    41Plan

    ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel v

    MediumCVSS 6.5Proof of conceptEPSS 49%

    imagemagick · imagemagickSep 1, 2018

  • CVE-2018-16509
    59Plan

    An issue was discovered in Artifex Ghostscript before 9.24.

    HighCVSS 7.8WeaponizedEPSS 92%

    artifex · ghostscriptSep 5, 2018

  • CVE-2018-14618
    42Plan

    curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code.

    CriticalCVSS 9.8No exploitEPSS 11%

    haxx · libcurlSep 5, 2018

  • CVE-2015-9266
    61This week

    Ubiquiti airOS HTTP(S) unauthenticated arbitrary file upload

    CriticalCVSS 9.8WeaponizedEPSS 73%

    ui · airmax ac firmwareSep 5, 2018

  • CVE-2018-16144
    49Plan

    The test connection functionality in the NetAudit section of Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to command in

    CriticalCVSS 9.8No exploitEPSS 32%

    opsview · opsviewSep 5, 2018

  • CVE-2018-5391
    40Plan

    The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets

    HighCVSS 7.5Proof of conceptEPSS 32%

    linux · linux kernelSep 6, 2018

  • CVE-2018-1756
    33Monitor

    IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 is vulnerable to SQL injection.

    HighCVSS 7.5Proof of conceptEPSS 10%

    ibm · security identity governance and intelligenceSep 7, 2018

  • CVE-2018-16059
    30Monitor

    Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter.

    MediumCVSS 5.3Proof of conceptEPSS 29%

    endress · wirelesshart fieldgate swg70 firmwareSep 7, 2018

  • CVE-2018-16763
    64This week

    FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter.

    CriticalCVSS 9.8Proof of conceptEPSS 82%

    thedaylightstudio · fuel cmsSep 9, 2018

  • CVE-2018-16836
    57Plan

    Rubedo through 3.4.0 contains a Directory Traversal vulnerability in the theme component, allowing unauthenticated attackers to read and exe

    CriticalCVSS 9.8Proof of conceptEPSS 61%

    rubedo project · rubedoSep 11, 2018

  • CVE-2017-1084
    35Monitor

    In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections afforded by the guard

    HighCVSS 7.5Proof of conceptEPSS 15%

    freebsd · freebsdSep 12, 2018

  • CVE-2018-7921
    30Monitor

    Huawei B315s-22 products with software of 21.318.01.00.26 have an information leak vulnerability.

    MediumCVSS 6.5Proof of conceptEPSS 13%

    huawei · b315s-22 firmwareSep 12, 2018

  • CVE-2018-8269
    38Monitor

    A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability." Th

    HighCVSS 7.5Proof of conceptEPSS 26%

    microsoft · microsoft.data.odataSep 12, 2018

  • CVE-2018-8331
    37Monitor

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "

    HighCVSS 7.8No exploitEPSS 19%

    microsoft · excelSep 12, 2018

  • CVE-2018-8332
    41Plan

    A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k

    HighCVSS 8.8No exploitEPSS 19%

    microsoft · officeSep 12, 2018

  • CVE-2018-8354
    34Monitor

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scriptin

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · chakracoreSep 12, 2018

  • CVE-2018-8367
    34Monitor

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · chakracoreSep 12, 2018

  • CVE-2018-8391
    33Monitor

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engin

    HighCVSS 7.5No exploitEPSS 11%

    microsoft · chakracoreSep 12, 2018

  • CVE-2018-8392
    38Monitor

    A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, ak

    HighCVSS 7.8No exploitEPSS 22%

    microsoft · windows 10Sep 12, 2018

  • CVE-2018-8393
    38Monitor

    A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, ak

    HighCVSS 7.8No exploitEPSS 22%

    microsoft · windows 10Sep 12, 2018

  • CVE-2018-8420
    50Plan

    A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code

    HighCVSS 8.8Proof of conceptEPSS 48%

    microsoft · windows 10Sep 12, 2018

  • CVE-2018-8421
    48Plan

    A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input, aka ".NET Framework Remote Code Execut

    CriticalCVSS 9.8No exploitEPSS 29%

    microsoft · .net frameworkSep 12, 2018

  • CVE-2018-8424
    30Monitor

    An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows

    MediumCVSS 6.5No exploitEPSS 12%

    microsoft · windows 10Sep 12, 2018

  • CVE-2018-8429
    26Monitor

    An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel In

    MediumCVSS 5.5No exploitEPSS 12%

    microsoft · excelSep 12, 2018

  • CVE-2018-8430
    38Monitor

    A remote code execution vulnerability exists in Microsoft Word if a user opens a specially crafted PDF file, aka "Word PDF Remote Code Execu

    HighCVSS 7.8No exploitEPSS 23%

    microsoft · officeSep 12, 2018

  • CVE-2018-8440
    67This week

    An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows A

    HighCVSS 7.8KEVWeaponizedEPSS 18%

    microsoft · windows 10 1607Sep 12, 2018

  • CVE-2018-8447
    34Monitor

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor

    HighCVSS 7.5No exploitEPSS 12%

    microsoft · internet explorerSep 12, 2018

  • CVE-2018-8456
    34Monitor

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engin

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · chakracoreSep 12, 2018

  • CVE-2018-8457
    34Monitor

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting

    HighCVSS 7.5No exploitEPSS 13%

    microsoft · internet explorerSep 12, 2018

  • CVE-2018-8459
    34Monitor

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engin

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · edgeSep 12, 2018

  • CVE-2018-8461
    34Monitor

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor

    HighCVSS 7.5No exploitEPSS 12%

    microsoft · internet explorerSep 12, 2018

  • CVE-2018-8463
    34Monitor

    An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the

    HighCVSS 7.4Proof of conceptEPSS 15%

    microsoft · edgeSep 12, 2018

  • CVE-2018-8464
    43Plan

    An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF R

    HighCVSS 7.5No exploitEPSS 42%

    microsoft · edgeSep 12, 2018

  • CVE-2018-8465
    34Monitor

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · edgeSep 12, 2018

  • CVE-2018-8466
    51Plan

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5Proof of conceptEPSS 69%

    microsoft · chakracoreSep 12, 2018

  • CVE-2018-8467
    51Plan

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5Proof of conceptEPSS 69%

    microsoft · chakracoreSep 12, 2018

  • CVE-2018-8468
    22Monitor

    An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privilege Vulnerability."

    MediumCVSS 4.7Proof of conceptEPSS 11%

    microsoft · windows 10Sep 12, 2018

  • CVE-2018-8469
    34Monitor

    An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the

    HighCVSS 7.4Proof of conceptEPSS 15%

    microsoft · edgeSep 12, 2018

  • CVE-2018-8474
    41Plan

    A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted messages, aka "Lync for M

    HighCVSS 7.5Proof of conceptEPSS 38%

    microsoft · lync for macSep 12, 2018

  • CVE-2018-8475
    40Plan

    A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "Windows Remote Code E

    HighCVSS 8.8No exploitEPSS 15%

    microsoft · windows 10Sep 12, 2018

  • CVE-2018-17057
    47Plan

    An issue was discovered in TCPDF before 6.2.22.

    CriticalCVSS 9.8Proof of conceptEPSS 26%

    tecnick · tcpdfSep 14, 2018

  • CVE-2018-10814
    31Monitor

    Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials.

    HighCVSS 7.8Proof of conceptEPSS 1%

    synametrics · synamanSep 14, 2018

  • CVE-2018-12086
    34Monitor

    Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.

    HighCVSS 7.5Proof of conceptEPSS 11%

    opcfoundation · unified architecture-.net-legacySep 14, 2018

  • CVE-2018-16286
    45Plan

    LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the P

    CriticalCVSS 9.8No exploitEPSS 21%

    lg · supersign cmsSep 14, 2018

  • CVE-2018-16287
    45Plan

    LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs.

    CriticalCVSS 9.8No exploitEPSS 19%

    lg · supersign cmsSep 14, 2018

  • CVE-2018-16288
    45Plan

    LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.

    HighCVSS 8.6Proof of conceptEPSS 35%

    lg · supersign cmsSep 14, 2018

  • CVE-2018-16706
    37Monitor

    LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsr_server/device/reboot on port 90

    HighCVSS 7.5Proof of conceptEPSS 22%

    lg · supersign cmsSep 14, 2018

  • CVE-2018-17128
    43Plan

    A Persistent XSS issue was discovered in the Visual Editor in MyBB before 1.8.19 via a Video MyCode.

    MediumCVSS 5.4Proof of conceptEPSS 74%

    mybb · mybbSep 17, 2018

  • CVE-2018-11780
    42Plan

    A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2.

    CriticalCVSS 9.8No exploitEPSS 10%

    apache · spamassassinSep 17, 2018

  • CVE-2018-17153
    65This week

    It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability.

    CriticalCVSS 9.8WeaponizedEPSS 86%

    western digital · my cloud wdbctl0020hwt firmwareSep 18, 2018

  • CVE-2018-16670
    28Monitor

    An issue was discovered in CIRCONTROL CirCarLife before 4.3.

    MediumCVSS 5.3Proof of conceptEPSS 24%

    circontrol · circarlife scadaSep 18, 2018

  • CVE-2018-1000802
    45Plan

    Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('C

    CriticalCVSS 9.8Proof of conceptEPSS 20%

    python · pythonSep 18, 2018

  • CVE-2018-1149
    44Plan

    cgi_system in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute arbitrary code via crafted HTTP requests.

    CriticalCVSS 9.8No exploitEPSS 15%

    nuuo · nvrmini2 firmwareSep 19, 2018

  • CVE-2018-17207
    60This week

    An issue was discovered in Snap Creek Duplicator before 1.2.42.

    CriticalCVSS 9.8WeaponizedEPSS 60%

    awesomemotive · duplicatorSep 19, 2018

  • CVE-2018-17243
    62This week

    Global Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection.

    CriticalCVSS 9.8No exploitEPSS 75%

    zohocorp · manageengine opmanagerSep 20, 2018

  • CVE-2018-17254
    64This week

    The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter.

    CriticalCVSS 9.8Proof of conceptEPSS 82%

    arkextensions · jck editorSep 20, 2018

  • CVE-2018-14829
    44Plan

    Rockwell Automation RSLinx Classic Versions 4.00.01 and prior.

    CriticalCVSS 9.8No exploitEPSS 16%

    rockwellautomation · rslinxSep 20, 2018

  • CVE-2018-16752
    48Plan

    LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feat

    HighCVSS 8.8No exploitEPSS 42%

    linknet-usa · lw-n605r firmwareSep 20, 2018

  • CVE-2018-17283
    50Plan

    Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /opu

    HighCVSS 7.5Proof of conceptEPSS 66%

    zohocorp · manageengine opmanagerSep 20, 2018

  • CVE-2018-16793
    37Monitor

    Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/log

    HighCVSS 8.6No exploitEPSS 11%

    microsoft · exchange serverSep 21, 2018

  • CVE-2018-16833
    44Plan

    Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI.

    MediumCVSS 6.1No exploitEPSS 65%

    zohocorp · manageengine desktop centralSep 21, 2018

  • CVE-2018-17173
    56Plan

    LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail.

    CriticalCVSS 9.8Proof of conceptEPSS 56%

    lg · supersign cmsSep 21, 2018

  • CVE-2018-16283
    58Plan

    The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter.

    CriticalCVSS 9.8Proof of conceptEPSS 63%

    wechat brodcast project · wechat brodcastSep 24, 2018

  • CVE-2018-16299
    43Plan

    The Localize My Post plugin 1.0 for WordPress allows Directory Traversal via the ajax/include.php file parameter.

    HighCVSS 7.5Proof of conceptEPSS 44%

    localize my post project · localize my postSep 24, 2018

  • CVE-2018-17281
    46Plan

    There is a stack consumption vulnerability in the res_http_websocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x

    HighCVSS 7.5No exploitEPSS 52%

    digium · asteriskSep 24, 2018

  • CVE-2018-14647
    33Monitor

    Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization.

    HighCVSS 7.5No exploitEPSS 10%

    python · pythonSep 25, 2018

  • CVE-2018-12840
    39Monitor

    Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-boun

    HighCVSS 7.5No exploitEPSS 28%

    adobe · acrobat dcSep 25, 2018

  • CVE-2018-12848
    49Plan

    Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-boun

    CriticalCVSS 9.8No exploitEPSS 34%

    adobe · acrobat dcSep 25, 2018

  • CVE-2018-12849
    40Plan

    Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-boun

    HighCVSS 7.5No exploitEPSS 33%

    adobe · acrobat dcSep 25, 2018

  • CVE-2018-12850
    40Plan

    Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-boun

    HighCVSS 7.5No exploitEPSS 33%

    adobe · acrobat dcSep 25, 2018

  • CVE-2018-15957
    47Plan

    Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untru

    CriticalCVSS 9.8No exploitEPSS 28%

    adobe · coldfusionSep 25, 2018

  • CVE-2018-15958
    47Plan

    Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untru

    CriticalCVSS 9.8No exploitEPSS 25%

    adobe · coldfusionSep 25, 2018

  • CVE-2018-15959
    47Plan

    Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untru

    CriticalCVSS 9.8No exploitEPSS 25%

    adobe · coldfusionSep 25, 2018

  • CVE-2018-15961
    99Now

    Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file uploa

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    adobe · coldfusionSep 25, 2018

  • CVE-2018-15965
    47Plan

    Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untru

    CriticalCVSS 9.8No exploitEPSS 25%

    adobe · coldfusionSep 25, 2018

  • CVE-2018-11763
    38Monitor

    In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU

    MediumCVSS 5.9No exploitEPSS 50%

    apache · http serverSep 25, 2018

  • CVE-2018-14634
    65This week

    An integer overflow flaw was found in the Linux kernel's create_elf_tables() function.

    HighCVSS 7.8KEVWeaponizedEPSS 14%

    linux · linux kernelSep 25, 2018

  • CVE-2018-16364
    37Monitor

    A serialization vulnerability in Zoho ManageEngine Applications Manager before build 13740 allows for remote code execution on Windows via a

    HighCVSS 8.1No exploitEPSS 17%

    zohocorp · manageengine applications managerSep 26, 2018

  • CVE-2018-15531
    47Plan

    JavaMelody before 1.74.0 has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java.

    CriticalCVSS 9.8No exploitEPSS 27%

    javamelody project · javamelodySep 26, 2018

  • CVE-2018-16055
    38Monitor

    An authenticated command injection vulnerability exists in status_interfaces.php via dhcp_relinquish_lease() in pfSense before 2.4.4 due to

    HighCVSS 8.8No exploitEPSS 11%

    netgate · pfsenseSep 26, 2018

  • CVE-2018-17613
    39Monitor

    Telegram Desktop (aka tdesktop) 1.3.16 alpha, when "Use proxy" is enabled, sends credentials and application data in cleartext over the SOCK

    CriticalCVSS 9.8No exploitEPSS 1%

    telegram · telegram desktopSep 28, 2018

  • CVE-2018-5393
    43Plan

    TP-Link EAP Controller versions 2.5.3 and earlier lack RMI authentication

    CriticalCVSS 9.8No exploitEPSS 12%

    tp-link · eap controllerSep 28, 2018