By publication date

Exploited and new serious CVEs: October 2018

121 records · 2 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 1 of 2

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2018-17408Weaponized	Stack-based buffer overflows in Zahir Accounting Enterprise Plus 6 through build 10b allow remote attackers to execute arbitrary code via a zahiraccounting · zahir enterprise plus · CWE-787 RCE Memory safety	High7.8	—	18.9%	Oct 3, 2018
64This week	CVE-2018-17552Weaponized	SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigate-user cookie.naviwebs · navigate cms · CWE-89 Pre-auth Auth bypass SQL injection	Critical9.8	—	84.0%	Oct 3, 2018
59Plan	CVE-2018-17553Weaponized	An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs Navigate CMS 2.8 allonaviwebs · navigate cms · CWE-22 RCE Path traversal File upload	High8.8	—	78.9%	Oct 3, 2018
46Plan	CVE-2018-11784Proof of concept	When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directoapache · tomcat · CWE-601 Pre-auth Open redirect	Medium4.3	—	97.6%	Oct 4, 2018
39Monitor	CVE-2018-0472No exploit	Cisco IOS XE Software and Cisco ASA 5500-X Series Adaptive Security Appliance IPsec Denial of Service Vulnerabilitycisco · ios xe · CWE-20 Pre-auth Denial of service	High8.6	—	16.2%	Oct 5, 2018
27Monitor	CVE-2018-0476No exploit	Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service Vulnerabilitycisco · ios xe · CWE-399 Pre-auth Denial of service	Medium5.9	—	13.6%	Oct 5, 2018
65This week	CVE-2018-15379Weaponized	Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerabilitycisco · prime infrastructure · CWE-275 pre-auth RCE Auth bypass File upload	Critical9.8	—	86.2%	Oct 5, 2018
68This week	CVE-2018-17456Weaponized	Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows rgit-scm · git · CWE-88 pre-auth RCE	Critical9.8	—	97.3%	Oct 6, 2018
60This week	CVE-2012-6710Weaponized	ext_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a password[]= (aka an empty array) in an actioextplorer · extplorer · CWE-287 Pre-auth Auth bypass	Critical9.8	—	24.9%	Oct 7, 2018
51Plan	CVE-2018-17440Proof of concept	An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1.dlink · central wifimanager · CWE-434 pre-auth RCE File upload Hard-coded credentials	Critical9.8	—	38.4%	Oct 8, 2018
39Monitor	CVE-2018-17442Proof of concept	An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1.dlink · central wifimanager · CWE-434 RCE File upload	High8.8	—	14.2%	Oct 8, 2018
31Monitor	CVE-2018-18065Proof of concept	_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attnet-snmp · net-snmp · CWE-476 Memory safety Denial of service	Medium6.5	—	17.5%	Oct 8, 2018
28Monitor	CVE-2018-18069Proof of concept	process_forms in the WPML (aka sitepress-multilingual-cms) plugin through 3.6.3 for WordPress has XSS via any locale_file_name_ parameter (swpml · wpml · CWE-79 Pre-auth XSS	Medium6.1	—	13.2%	Oct 8, 2018
43Plan	CVE-2018-14649No exploit	It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug shell mode.redhat · enterprise linux desktop · CWE-77 pre-auth RCE Command injection	Critical9.8	—	11.9%	Oct 9, 2018
37Monitor	CVE-2018-8265No exploit	A remote code execution vulnerability exists in the way Microsoft Exchange software parses specially crafted email messages, aka "Microsoft microsoft · exchange server · CWE-20 RCE	High7.8	—	19.2%	Oct 10, 2018
34Monitor	CVE-2018-8292No exploit	An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NEmicrosoft · asp.net core · CWE-200 Pre-auth Info leak	High7.5	—	14.8%	Oct 10, 2018
45Plan	CVE-2018-8413Proof of concept	A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows Theme API Remote Codemicrosoft · windows 10 RCE	High7.8	—	46.2%	Oct 10, 2018
41Plan	CVE-2018-8423No exploit	A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution microsoft · windows 10 · CWE-119 RCE Memory safety	High7.8	—	32.1%	Oct 10, 2018
37Monitor	CVE-2018-8432No exploit	A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphicsmicrosoft · excel viewer RCE	High7.8	—	19.5%	Oct 10, 2018
82Now	CVE-2018-8453Weaponized	An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k microsoft · windows 10 1507 Local privilege escalation	High7.8	KEV	70.0%	Oct 10, 2018
36Monitor	CVE-2018-8460No exploit	A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cormicrosoft · internet explorer · CWE-787 pre-auth RCE Memory safety	High7.5	—	20.6%	Oct 10, 2018
28Monitor	CVE-2018-8472No exploit	An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowimicrosoft · windows 10 · CWE-200 Info leak	Medium5.5	—	18.8%	Oct 10, 2018
34Monitor	CVE-2018-8473No exploit	A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptiomicrosoft · chakracore · CWE-787 pre-auth RCE Memory safety	High7.5	—	14.2%	Oct 10, 2018
34Monitor	CVE-2018-8491No exploit	A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cormicrosoft · internet explorer · CWE-787 pre-auth RCE Memory safety	High7.5	—	12.7%	Oct 10, 2018
42Plan	CVE-2018-8494No exploit	A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Codemicrosoft · windows 10 · CWE-611 pre-auth RCE XXE	High8.8	—	22.0%	Oct 10, 2018
45Plan	CVE-2018-8495Proof of concept	A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka "Windows Shell Remote Code Execution Vulnerabilmicrosoft · windows 10 · CWE-22 pre-auth RCE Path traversal	High7.5	—	50.7%	Oct 10, 2018
45Plan	CVE-2018-8500No exploit	A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Enginmicrosoft · chakracore · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	18.4%	Oct 10, 2018
41Plan	CVE-2018-8501No exploit	A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protectemicrosoft · office pre-auth RCE	High8.8	—	19.7%	Oct 10, 2018
41Plan	CVE-2018-8502No exploit	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected Viemicrosoft · excel pre-auth RCE	High8.8	—	20.4%	Oct 10, 2018
34Monitor	CVE-2018-8503No exploit	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Cmicrosoft · chakracore · CWE-787 pre-auth RCE Memory safety	High7.5	—	14.2%	Oct 10, 2018
41Plan	CVE-2018-8504No exploit	A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected Viewmicrosoft · office pre-auth RCE	High8.8	—	19.7%	Oct 10, 2018
34Monitor	CVE-2018-8505No exploit	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Cmicrosoft · chakracore · CWE-787 pre-auth RCE Memory safety	High7.5	—	14.2%	Oct 10, 2018
34Monitor	CVE-2018-8509No exploit	A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptiomicrosoft · edge · CWE-787 pre-auth RCE Memory safety	High7.5	—	12.7%	Oct 10, 2018
34Monitor	CVE-2018-8510No exploit	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Cmicrosoft · chakracore · CWE-787 pre-auth RCE Memory safety	High7.5	—	14.2%	Oct 10, 2018
34Monitor	CVE-2018-8511No exploit	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Cmicrosoft · chakracore · CWE-787 pre-auth RCE Memory safety	High7.5	—	14.2%	Oct 10, 2018
34Monitor	CVE-2018-8513No exploit	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Cmicrosoft · chakracore · CWE-787 pre-auth RCE Memory safety	High7.5	—	14.2%	Oct 10, 2018
29Monitor	CVE-2018-8527Proof of concept	An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XEL file containingmicrosoft · sql server management studio · CWE-611 XXE	Medium5.5	—	23.3%	Oct 10, 2018
40Plan	CVE-2018-8531No exploit	A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory,microsoft · azure internet of things edge · CWE-787 pre-auth RCE Memory safety	High8.8	—	15.1%	Oct 10, 2018
29Monitor	CVE-2018-8532Proof of concept	An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XMLA file containinmicrosoft · sql server management studio · CWE-611 XXE	Medium5.5	—	23.3%	Oct 10, 2018
29Monitor	CVE-2018-8533Proof of concept	An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containinmicrosoft · sql server management studio · CWE-611 XXE	Medium5.5	—	23.3%	Oct 10, 2018
41Plan	CVE-2018-8006Proof of concept	An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp paapache · activemq · CWE-79 Pre-auth XSS	Medium6.1	—	55.4%	Oct 10, 2018
46Plan	CVE-2018-12596Proof of concept	Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspxepiserver · ektron cms · CWE-269 Pre-auth	Critical9.8	—	22.3%	Oct 10, 2018
68This week	CVE-2018-9206Weaponized	Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0jquery file upload project · jquery file upload · CWE-434 Pre-auth File upload	Critical9.8	—	97.2%	Oct 11, 2018
60This week	CVE-2018-17888Weaponized	NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the activenuuo · nuuo cms · CWE-330 pre-auth RCE Weak crypto	Critical9.8	—	29.6%	Oct 12, 2018
34Monitor	CVE-2018-12832No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overfloadobe · acrobat dc · CWE-787 RCE Memory safety	High7.8	—	10.0%	Oct 12, 2018
34Monitor	CVE-2018-12833No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overfloadobe · acrobat dc · CWE-787 RCE Memory safety	High7.8	—	10.2%	Oct 12, 2018
34Monitor	CVE-2018-12836No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overfloadobe · acrobat dc · CWE-787 RCE Memory safety	High7.8	—	10.0%	Oct 12, 2018
34Monitor	CVE-2018-12837No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overfloadobe · acrobat dc · CWE-787 RCE Memory safety	High7.8	—	10.0%	Oct 12, 2018
26Monitor	CVE-2018-12838No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a stack overfladobe · acrobat dc · CWE-125 Memory safety	Medium5.5	—	11.8%	Oct 12, 2018
28Monitor	CVE-2018-12839No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Memory safety	Medium5.5	—	19.8%	Oct 12, 2018
34Monitor	CVE-2018-12847No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overfloadobe · acrobat dc · CWE-787 RCE Memory safety	High7.8	—	10.8%	Oct 12, 2018
34Monitor	CVE-2018-12851No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overfloadobe · acrobat dc · CWE-787 RCE Memory safety	High7.8	—	10.0%	Oct 12, 2018
27Monitor	CVE-2018-12857No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Memory safety	Medium5.5	—	16.3%	Oct 12, 2018
28Monitor	CVE-2018-12859No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Memory safety	Medium5.5	—	19.7%	Oct 12, 2018
35Monitor	CVE-2018-12860No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Memory safety	High7.8	—	13.4%	Oct 12, 2018
36Monitor	CVE-2018-12861No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Memory safety	High7.8	—	15.9%	Oct 12, 2018
35Monitor	CVE-2018-12862No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Memory safety	High7.8	—	13.4%	Oct 12, 2018
36Monitor	CVE-2018-12863No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an use after fadobe · acrobat dc · CWE-416 RCE Memory safety	High7.8	—	16.8%	Oct 12, 2018
36Monitor	CVE-2018-12864No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Memory safety	High7.8	—	16.0%	Oct 12, 2018
36Monitor	CVE-2018-12865No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Memory safety	High7.8	—	15.9%	Oct 12, 2018
27Monitor	CVE-2018-12866No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Memory safety	Medium5.5	—	16.3%	Oct 12, 2018
28Monitor	CVE-2018-12867No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Memory safety	Medium5.5	—	19.7%	Oct 12, 2018
28Monitor	CVE-2018-12869No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Memory safety	Medium5.5	—	19.7%	Oct 12, 2018
28Monitor	CVE-2018-12870No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Memory safety	Medium5.5	—	19.7%	Oct 12, 2018
28Monitor	CVE-2018-12871No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Memory safety	Medium5.5	—	19.7%	Oct 12, 2018
28Monitor	CVE-2018-12872No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Memory safety	Medium5.5	—	19.7%	Oct 12, 2018
27Monitor	CVE-2018-12873No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Memory safety	Medium5.5	—	16.3%	Oct 12, 2018
27Monitor	CVE-2018-12874No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Memory safety	Medium5.5	—	16.3%	Oct 12, 2018
27Monitor	CVE-2018-12875No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Memory safety	Medium5.5	—	16.3%	Oct 12, 2018
27Monitor	CVE-2018-15927No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Memory safety	Medium5.5	—	16.3%	Oct 12, 2018
36Monitor	CVE-2018-15928No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Memory safety	High7.8	—	15.9%	Oct 12, 2018
35Monitor	CVE-2018-15929No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Memory safety	High7.8	—	13.4%	Oct 12, 2018
39Monitor	CVE-2018-15930No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted padobe · acrobat dc · CWE-476 RCE Memory safety	High7.8	—	27.8%	Oct 12, 2018
39Monitor	CVE-2018-15931No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted padobe · acrobat dc · CWE-476 RCE Memory safety	High7.8	—	27.8%	Oct 12, 2018
28Monitor	CVE-2018-15932No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Memory safety	Medium5.5	—	18.8%	Oct 12, 2018
35Monitor	CVE-2018-15933No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Memory safety	High7.8	—	13.4%	Oct 12, 2018
35Monitor	CVE-2018-15934No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Memory safety	High7.8	—	13.4%	Oct 12, 2018
35Monitor	CVE-2018-15935No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Memory safety	High7.8	—	13.5%	Oct 12, 2018
35Monitor	CVE-2018-15936No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Memory safety	High7.8	—	13.5%	Oct 12, 2018
39Monitor	CVE-2018-15937No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted padobe · acrobat dc · CWE-476 RCE Memory safety	High7.8	—	27.9%	Oct 12, 2018
35Monitor	CVE-2018-15938No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Memory safety	High7.8	—	13.5%	Oct 12, 2018
36Monitor	CVE-2018-15952No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Memory safety	High7.8	—	15.4%	Oct 12, 2018
28Monitor	CVE-2018-15953No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Memory safety	Medium5.5	—	19.8%	Oct 12, 2018
37Monitor	CVE-2018-15954No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Memory safety	High7.8	—	19.0%	Oct 12, 2018
37Monitor	CVE-2018-15955No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Memory safety	High7.8	—	19.0%	Oct 12, 2018
27Monitor	CVE-2018-15956No exploit	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Memory safety	Medium5.5	—	16.4%	Oct 12, 2018
44Plan	CVE-2018-18322Proof of concept	CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/index.php service_startcontrol-webpanel · webpanel · CWE-78 pre-auth RCE Command injection	Critical9.8	—	15.1%	Oct 15, 2018
51Plan	CVE-2018-18323Proof of concept	CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=filcontrol-webpanel · webpanel · CWE-22 Pre-auth Path traversal	High7.5	—	70.7%	Oct 15, 2018
60This week	CVE-2018-17532No exploit	Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autoloteltonika · rut900 firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	70.6%	Oct 15, 2018
26Monitor	CVE-2018-3167Proof of concept	Vulnerability in the Application Management Pack for Oracle E-Business Suite component of Oracle E-Business Suite (subcomponent: User Monitooracle · application management pack Pre-auth	Medium5.3	—	16.4%	Oct 16, 2018
58Plan	CVE-2018-3191Proof of concept	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).oracle · weblogic server Pre-auth	Critical9.8	—	62.9%	Oct 16, 2018
67This week	CVE-2018-3245Proof of concept	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).oracle · weblogic server · CWE-502 Pre-auth Deserialization	Critical9.8	—	94.2%	Oct 16, 2018
48Plan	CVE-2018-3252Proof of concept	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).oracle · weblogic server Pre-auth	Critical9.8	—	29.3%	Oct 16, 2018
40Plan	CVE-2018-3953Weaponized	Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04) are susceptlinksys · e1200 firmware · CWE-78 RCE Command injection	High7.2	—	13.5%	Oct 16, 2018
64This week	CVE-2018-10933Weaponized	A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4.libssh · libssh · CWE-592 Pre-auth	Critical9.1	—	91.7%	Oct 17, 2018
43Plan	CVE-2018-7076No exploit	A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) prior to iMC PLAT 7.3 E0605P04.hp · intelligent management center · CWE-287 pre-auth RCE Auth bypass	Critical9.8	—	12.3%	Oct 17, 2018
42Plan	CVE-2018-10822Proof of concept	Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512dlink · dwr-116 firmware · CWE-22 Pre-auth Path traversal	High7.5	—	39.2%	Oct 17, 2018
58Plan	CVE-2018-10823Proof of concept	An issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.dlink · dwr-116 firmware · CWE-78 RCE Command injection	High8.8	—	77.6%	Oct 17, 2018
43Plan	CVE-2018-10824Proof of concept	An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through dlink · dwr-116 firmware · CWE-22 Pre-auth Path traversal	Critical9.8	—	12.4%	Oct 17, 2018
42Plan	CVE-2018-12813No exploit	Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability.adobe · digital editions · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	11.2%	Oct 17, 2018

CVE-2018-17408
40Plan
Stack-based buffer overflows in Zahir Accounting Enterprise Plus 6 through build 10b allow remote attackers to execute arbitrary code via a
HighCVSS 7.8WeaponizedEPSS 18%
- RCE
- Memory safety
zahiraccounting · zahir enterprise plusOct 3, 2018
CVE-2018-17552
64This week
SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigate-user cookie.
CriticalCVSS 9.8WeaponizedEPSS 84%
- Pre-auth
- Auth bypass
- SQL injection
naviwebs · navigate cmsOct 3, 2018
CVE-2018-17553
59Plan
An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs Navigate CMS 2.8 allo
HighCVSS 8.8WeaponizedEPSS 78%
- RCE
- Path traversal
- File upload
naviwebs · navigate cmsOct 3, 2018
CVE-2018-11784
46Plan
When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directo
MediumCVSS 4.3Proof of conceptEPSS 97%
- Pre-auth
- Open redirect
apache · tomcatOct 4, 2018
CVE-2018-0472
39Monitor
Cisco IOS XE Software and Cisco ASA 5500-X Series Adaptive Security Appliance IPsec Denial of Service Vulnerability
HighCVSS 8.6No exploitEPSS 16%
- Pre-auth
- Denial of service
cisco · ios xeOct 5, 2018
CVE-2018-0476
27Monitor
Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service Vulnerability
MediumCVSS 5.9No exploitEPSS 13%
- Pre-auth
- Denial of service
cisco · ios xeOct 5, 2018
CVE-2018-15379
65This week
Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerability
CriticalCVSS 9.8WeaponizedEPSS 86%
- pre-auth RCE
- Auth bypass
- File upload
cisco · prime infrastructureOct 5, 2018
CVE-2018-17456
68This week
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows r
CriticalCVSS 9.8WeaponizedEPSS 97%
- pre-auth RCE
git-scm · gitOct 6, 2018
CVE-2012-6710
60This week
ext_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a password[]= (aka an empty array) in an actio
CriticalCVSS 9.8WeaponizedEPSS 24%
- Pre-auth
- Auth bypass
extplorer · extplorerOct 7, 2018
CVE-2018-17440
51Plan
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1.
CriticalCVSS 9.8Proof of conceptEPSS 38%
- pre-auth RCE
- File upload
- Hard-coded credentials
dlink · central wifimanagerOct 8, 2018
CVE-2018-17442
39Monitor
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1.
HighCVSS 8.8Proof of conceptEPSS 14%
- RCE
- File upload
dlink · central wifimanagerOct 8, 2018
CVE-2018-18065
31Monitor
_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated att
MediumCVSS 6.5Proof of conceptEPSS 17%
- Memory safety
- Denial of service
net-snmp · net-snmpOct 8, 2018
CVE-2018-18069
28Monitor
process_forms in the WPML (aka sitepress-multilingual-cms) plugin through 3.6.3 for WordPress has XSS via any locale_file_name_ parameter (s
MediumCVSS 6.1Proof of conceptEPSS 13%
- Pre-auth
- XSS
wpml · wpmlOct 8, 2018
CVE-2018-14649
43Plan
It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug shell mode.
CriticalCVSS 9.8No exploitEPSS 11%
- pre-auth RCE
- Command injection
redhat · enterprise linux desktopOct 9, 2018
CVE-2018-8265
37Monitor
A remote code execution vulnerability exists in the way Microsoft Exchange software parses specially crafted email messages, aka "Microsoft
HighCVSS 7.8No exploitEPSS 19%
- RCE
microsoft · exchange serverOct 10, 2018
CVE-2018-8292
34Monitor
An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NE
HighCVSS 7.5No exploitEPSS 14%
- Pre-auth
- Info leak
microsoft · asp.net coreOct 10, 2018
CVE-2018-8413
45Plan
A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows Theme API Remote Code
HighCVSS 7.8Proof of conceptEPSS 46%
- RCE
microsoft · windows 10Oct 10, 2018
CVE-2018-8423
41Plan
A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution
HighCVSS 7.8No exploitEPSS 32%
- RCE
- Memory safety
microsoft · windows 10Oct 10, 2018
CVE-2018-8432
37Monitor
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics
HighCVSS 7.8No exploitEPSS 19%
- RCE
microsoft · excel viewerOct 10, 2018
CVE-2018-8453
82Now
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k
HighCVSS 7.8KEVWeaponizedEPSS 70%
- Local privilege escalation
microsoft · windows 10 1507Oct 10, 2018
CVE-2018-8460
36Monitor
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor
HighCVSS 7.5No exploitEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · internet explorerOct 10, 2018
CVE-2018-8472
28Monitor
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowi
MediumCVSS 5.5No exploitEPSS 18%
- Info leak
microsoft · windows 10Oct 10, 2018
CVE-2018-8473
34Monitor
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptio
HighCVSS 7.5No exploitEPSS 14%
- pre-auth RCE
- Memory safety
microsoft · chakracoreOct 10, 2018
CVE-2018-8491
34Monitor
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor
HighCVSS 7.5No exploitEPSS 12%
- pre-auth RCE
- Memory safety
microsoft · internet explorerOct 10, 2018
CVE-2018-8494
42Plan
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code
HighCVSS 8.8No exploitEPSS 22%
- pre-auth RCE
- XXE
microsoft · windows 10Oct 10, 2018
CVE-2018-8495
45Plan
A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka "Windows Shell Remote Code Execution Vulnerabil
HighCVSS 7.5Proof of conceptEPSS 50%
- pre-auth RCE
- Path traversal
microsoft · windows 10Oct 10, 2018
CVE-2018-8500
45Plan
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engin
CriticalCVSS 9.8No exploitEPSS 18%
- pre-auth RCE
- Memory safety
microsoft · chakracoreOct 10, 2018
CVE-2018-8501
41Plan
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protecte
HighCVSS 8.8No exploitEPSS 19%
- pre-auth RCE
microsoft · officeOct 10, 2018
CVE-2018-8502
41Plan
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected Vie
HighCVSS 8.8No exploitEPSS 20%
- pre-auth RCE
microsoft · excelOct 10, 2018
CVE-2018-8503
34Monitor
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C
HighCVSS 7.5No exploitEPSS 14%
- pre-auth RCE
- Memory safety
microsoft · chakracoreOct 10, 2018
CVE-2018-8504
41Plan
A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View
HighCVSS 8.8No exploitEPSS 19%
- pre-auth RCE
microsoft · officeOct 10, 2018
CVE-2018-8505
34Monitor
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C
HighCVSS 7.5No exploitEPSS 14%
- pre-auth RCE
- Memory safety
microsoft · chakracoreOct 10, 2018
CVE-2018-8509
34Monitor
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptio
HighCVSS 7.5No exploitEPSS 12%
- pre-auth RCE
- Memory safety
microsoft · edgeOct 10, 2018
CVE-2018-8510
34Monitor
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C
HighCVSS 7.5No exploitEPSS 14%
- pre-auth RCE
- Memory safety
microsoft · chakracoreOct 10, 2018
CVE-2018-8511
34Monitor
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C
HighCVSS 7.5No exploitEPSS 14%
- pre-auth RCE
- Memory safety
microsoft · chakracoreOct 10, 2018
CVE-2018-8513
34Monitor
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C
HighCVSS 7.5No exploitEPSS 14%
- pre-auth RCE
- Memory safety
microsoft · chakracoreOct 10, 2018
CVE-2018-8527
29Monitor
An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XEL file containing
MediumCVSS 5.5Proof of conceptEPSS 23%
- XXE
microsoft · sql server management studioOct 10, 2018
CVE-2018-8531
40Plan
A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory,
HighCVSS 8.8No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · azure internet of things edgeOct 10, 2018
CVE-2018-8532
29Monitor
An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XMLA file containin
MediumCVSS 5.5Proof of conceptEPSS 23%
- XXE
microsoft · sql server management studioOct 10, 2018
CVE-2018-8533
29Monitor
An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containin
MediumCVSS 5.5Proof of conceptEPSS 23%
- XXE
microsoft · sql server management studioOct 10, 2018
CVE-2018-8006
41Plan
An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp pa
MediumCVSS 6.1Proof of conceptEPSS 55%
- Pre-auth
- XSS
apache · activemqOct 10, 2018
CVE-2018-12596
46Plan
Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx
CriticalCVSS 9.8Proof of conceptEPSS 22%
- Pre-auth
episerver · ektron cmsOct 10, 2018
CVE-2018-9206
68This week
Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0
CriticalCVSS 9.8WeaponizedEPSS 97%
- Pre-auth
- File upload
jquery file upload project · jquery file uploadOct 11, 2018
CVE-2018-17888
60This week
NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active
CriticalCVSS 9.8WeaponizedEPSS 29%
- pre-auth RCE
- Weak crypto
nuuo · nuuo cmsOct 12, 2018
CVE-2018-12832
34Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflo
HighCVSS 7.8No exploitEPSS 10%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12833
34Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflo
HighCVSS 7.8No exploitEPSS 10%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12836
34Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflo
HighCVSS 7.8No exploitEPSS 10%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12837
34Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflo
HighCVSS 7.8No exploitEPSS 10%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12838
26Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a stack overfl
MediumCVSS 5.5No exploitEPSS 11%
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12839
28Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
MediumCVSS 5.5No exploitEPSS 19%
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12847
34Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflo
HighCVSS 7.8No exploitEPSS 10%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12851
34Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflo
HighCVSS 7.8No exploitEPSS 10%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12857
27Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
MediumCVSS 5.5No exploitEPSS 16%
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12859
28Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
MediumCVSS 5.5No exploitEPSS 19%
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12860
35Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
HighCVSS 7.8No exploitEPSS 13%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12861
36Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
HighCVSS 7.8No exploitEPSS 15%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12862
35Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
HighCVSS 7.8No exploitEPSS 13%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12863
36Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an use after f
HighCVSS 7.8No exploitEPSS 16%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12864
36Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
HighCVSS 7.8No exploitEPSS 16%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12865
36Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
HighCVSS 7.8No exploitEPSS 15%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12866
27Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
MediumCVSS 5.5No exploitEPSS 16%
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12867
28Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
MediumCVSS 5.5No exploitEPSS 19%
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12869
28Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
MediumCVSS 5.5No exploitEPSS 19%
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12870
28Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
MediumCVSS 5.5No exploitEPSS 19%
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12871
28Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
MediumCVSS 5.5No exploitEPSS 19%
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12872
28Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
MediumCVSS 5.5No exploitEPSS 19%
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12873
27Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
MediumCVSS 5.5No exploitEPSS 16%
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12874
27Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
MediumCVSS 5.5No exploitEPSS 16%
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-12875
27Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
MediumCVSS 5.5No exploitEPSS 16%
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-15927
27Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
MediumCVSS 5.5No exploitEPSS 16%
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-15928
36Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
HighCVSS 7.8No exploitEPSS 15%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-15929
35Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
HighCVSS 7.8No exploitEPSS 13%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-15930
39Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted p
HighCVSS 7.8No exploitEPSS 27%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-15931
39Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted p
HighCVSS 7.8No exploitEPSS 27%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-15932
28Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
MediumCVSS 5.5No exploitEPSS 18%
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-15933
35Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
HighCVSS 7.8No exploitEPSS 13%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-15934
35Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
HighCVSS 7.8No exploitEPSS 13%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-15935
35Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
HighCVSS 7.8No exploitEPSS 13%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-15936
35Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
HighCVSS 7.8No exploitEPSS 13%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-15937
39Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted p
HighCVSS 7.8No exploitEPSS 27%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-15938
35Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
HighCVSS 7.8No exploitEPSS 13%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-15952
36Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
HighCVSS 7.8No exploitEPSS 15%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-15953
28Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
MediumCVSS 5.5No exploitEPSS 19%
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-15954
37Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
HighCVSS 7.8No exploitEPSS 19%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-15955
37Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
HighCVSS 7.8No exploitEPSS 19%
- RCE
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-15956
27Monitor
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
MediumCVSS 5.5No exploitEPSS 16%
- Memory safety
adobe · acrobat dcOct 12, 2018
CVE-2018-18322
44Plan
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/index.php service_start
CriticalCVSS 9.8Proof of conceptEPSS 15%
- pre-auth RCE
- Command injection
control-webpanel · webpanelOct 15, 2018
CVE-2018-18323
51Plan
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=fil
HighCVSS 7.5Proof of conceptEPSS 70%
- Pre-auth
- Path traversal
control-webpanel · webpanelOct 15, 2018
CVE-2018-17532
60This week
Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autolo
CriticalCVSS 9.8No exploitEPSS 70%
- pre-auth RCE
- Command injection
teltonika · rut900 firmwareOct 15, 2018
CVE-2018-3167
26Monitor
Vulnerability in the Application Management Pack for Oracle E-Business Suite component of Oracle E-Business Suite (subcomponent: User Monito
MediumCVSS 5.3Proof of conceptEPSS 16%
- Pre-auth
oracle · application management packOct 16, 2018
CVE-2018-3191
58Plan
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).
CriticalCVSS 9.8Proof of conceptEPSS 62%
- Pre-auth
oracle · weblogic serverOct 16, 2018
CVE-2018-3245
67This week
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).
CriticalCVSS 9.8Proof of conceptEPSS 94%
- Pre-auth
- Deserialization
oracle · weblogic serverOct 16, 2018
CVE-2018-3252
48Plan
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).
CriticalCVSS 9.8Proof of conceptEPSS 29%
- Pre-auth
oracle · weblogic serverOct 16, 2018
CVE-2018-3953
40Plan
Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04) are suscept
HighCVSS 7.2WeaponizedEPSS 13%
- RCE
- Command injection
linksys · e1200 firmwareOct 16, 2018
CVE-2018-10933
64This week
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4.
CriticalCVSS 9.1WeaponizedEPSS 91%
- Pre-auth
libssh · libsshOct 17, 2018
CVE-2018-7076
43Plan
A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) prior to iMC PLAT 7.3 E0605P04.
CriticalCVSS 9.8No exploitEPSS 12%
- pre-auth RCE
- Auth bypass
hp · intelligent management centerOct 17, 2018
CVE-2018-10822
42Plan
Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512
HighCVSS 7.5Proof of conceptEPSS 39%
- Pre-auth
- Path traversal
dlink · dwr-116 firmwareOct 17, 2018
CVE-2018-10823
58Plan
An issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.
HighCVSS 8.8Proof of conceptEPSS 77%
- RCE
- Command injection
dlink · dwr-116 firmwareOct 17, 2018
CVE-2018-10824
43Plan
An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through
CriticalCVSS 9.8Proof of conceptEPSS 12%
- Pre-auth
- Path traversal
dlink · dwr-116 firmwareOct 17, 2018
CVE-2018-12813
42Plan
Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability.
CriticalCVSS 9.8No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · digital editionsOct 17, 2018