Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: November 2018

87 records · 6 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2018-18777
    24Monitor

    Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" (in the parameter subpage) allows remote a

    MediumCVSS 4.3Proof of conceptEPSS 22%

    microstrategy · microstrategy webNov 1, 2018

  • CVE-2018-18925
    48Plan

    Gogs 0.11.66 allows remote code execution because it does not properly validate session IDs, as demonstrated by a ".." session-file forgery

    CriticalCVSS 9.8Proof of conceptEPSS 31%

    gogs · gogsNov 4, 2018

  • CVE-2018-18926
    40Plan

    Gitea before 1.5.4 allows remote code execution because it does not properly validate session IDs.

    CriticalCVSS 9.8No exploitEPSS 3%

    gitea · giteaNov 4, 2018

  • CVE-2018-18949
    46Plan

    Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings.

    CriticalCVSS 9.8No exploitEPSS 24%

    zohocorp · manageengine opmanagerNov 5, 2018

  • CVE-2018-18820
    47Plan

    A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4.

    HighCVSS 8.1Proof of conceptEPSS 48%

    xiph · icecastNov 5, 2018

  • CVE-2018-18957
    42Plan

    An issue has been found in libIEC61850 v1.3.

    CriticalCVSS 9.8Proof of conceptEPSS 11%

    mz-automation · libiec61850Nov 5, 2018

  • CVE-2018-18980
    37Monitor

    An XML External Entity injection (XXE) vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager before 12.3.214

    HighCVSS 7.5No exploitEPSS 24%

    zohocorp · manageengine network configuration managerNov 6, 2018

  • CVE-2018-14667
    91Now

    The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource.

    CriticalCVSS 9.8KEVWeaponizedEPSS 74%

    redhat · richfacesNov 6, 2018

  • CVE-2018-19052
    34Monitor

    An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50.

    HighCVSS 7.5Proof of conceptEPSS 13%

    lighttpd · lighttpdNov 7, 2018

  • CVE-2018-16843
    44Plan

    nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption.

    HighCVSS 7.5Proof of conceptEPSS 47%

    f5 · nginxNov 7, 2018

  • CVE-2018-16844
    34Monitor

    nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage.

    HighCVSS 7.5No exploitEPSS 12%

    f5 · nginxNov 7, 2018

  • CVE-2018-8021
    55Plan

    Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to possible remote code ex

    CriticalCVSS 9.8Proof of conceptEPSS 53%

    apache · supersetNov 7, 2018

  • CVE-2018-15381
    65This week

    Cisco Unity Express Arbitrary Command Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 87%

    cisco · unity expressNov 8, 2018

  • CVE-2018-15439
    60This week

    Cisco Small Business Switches Privileged Access Vulnerability

    CriticalCVSS 9.8WeaponizedEPSS 49%

    cisco · sg200-50 firmwareNov 8, 2018

  • CVE-2018-19125
    33Monitor

    PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to delete an image directory.

    HighCVSS 7.5Proof of conceptEPSS 10%

    prestashop · prestashopNov 9, 2018

  • CVE-2018-19126
    46Plan

    PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute arbitrary code via a file upload.

    CriticalCVSS 9.8Proof of conceptEPSS 22%

    prestashop · prestashopNov 9, 2018

  • CVE-2018-19127
    45Plan

    A code injection vulnerability in /type.php in PHPCMS 2008 allows attackers to write arbitrary content to a website cache file with a contro

    CriticalCVSS 9.8Proof of conceptEPSS 20%

    phpcms · phpcmsNov 9, 2018

  • CVE-2018-19206
    41Plan

    steps/mail/func.inc in Roundcube before 1.3.8 has XSS via crafted use of <svg><style>, as demonstrated by an onload attribute in a BODY elem

    MediumCVSS 6.1No exploitEPSS 55%

    roundcube · webmailNov 12, 2018

  • CVE-2018-19207
    65This week

    The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code

    CriticalCVSS 9.8WeaponizedEPSS 88%

    van-ons · wp-gdpr-complianceNov 12, 2018

  • CVE-2018-19246
    37Monitor

    PHP-Proxy 5.1.0 allows remote attackers to read local files if the default "pre-installed version" (intended for users who lack shell access

    HighCVSS 7.5Proof of conceptEPSS 21%

    php-proxy · php-proxyNov 13, 2018

  • CVE-2018-8256
    42Plan

    A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Co

    HighCVSS 8.8No exploitEPSS 22%

    microsoft · microsoft.powershell.archiveNov 13, 2018

  • CVE-2018-8450
    40Plan

    A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulner

    HighCVSS 8.8No exploitEPSS 16%

    microsoft · windows 10Nov 13, 2018

  • CVE-2018-8476
    58Plan

    A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "Windows

    CriticalCVSS 9.8No exploitEPSS 64%

    microsoft · windows server 2008Nov 13, 2018

  • CVE-2018-8522
    37Monitor

    A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsof

    HighCVSS 7.8No exploitEPSS 19%

    microsoft · officeNov 13, 2018

  • CVE-2018-8524
    37Monitor

    A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsof

    HighCVSS 7.8No exploitEPSS 19%

    microsoft · officeNov 13, 2018

  • CVE-2018-8539
    37Monitor

    A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft W

    HighCVSS 7.8No exploitEPSS 19%

    microsoft · officeNov 13, 2018

  • CVE-2018-8541
    34Monitor

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · chakracoreNov 13, 2018

  • CVE-2018-8542
    34Monitor

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · chakracoreNov 13, 2018

  • CVE-2018-8543
    34Monitor

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · chakracoreNov 13, 2018

  • CVE-2018-8544
    49Plan

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem

    HighCVSS 8.8Proof of conceptEPSS 47%

    microsoft · windows 10Nov 13, 2018

  • CVE-2018-8551
    34Monitor

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · chakracoreNov 13, 2018

  • CVE-2018-8552
    45Plan

    An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which could provide an attacke

    HighCVSS 7.5Proof of conceptEPSS 50%

    microsoft · internet explorerNov 13, 2018

  • CVE-2018-8553
    37Monitor

    A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics

    HighCVSS 7.8No exploitEPSS 19%

    microsoft · windows 10Nov 13, 2018

  • CVE-2018-8555
    34Monitor

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · chakracoreNov 13, 2018

  • CVE-2018-8556
    34Monitor

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · chakracoreNov 13, 2018

  • CVE-2018-8557
    34Monitor

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · chakracoreNov 13, 2018

  • CVE-2018-8570
    34Monitor

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · internet explorerNov 13, 2018

  • CVE-2018-8573
    37Monitor

    A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft W

    HighCVSS 7.8No exploitEPSS 19%

    microsoft · officeNov 13, 2018

  • CVE-2018-8574
    37Monitor

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "

    HighCVSS 7.8No exploitEPSS 19%

    microsoft · officeNov 13, 2018

  • CVE-2018-8575
    37Monitor

    A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka "Microsof

    HighCVSS 7.8No exploitEPSS 19%

    microsoft · office 365 proplusNov 13, 2018

  • CVE-2018-8576
    37Monitor

    A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsof

    HighCVSS 7.8No exploitEPSS 19%

    microsoft · officeNov 13, 2018

  • CVE-2018-8577
    37Monitor

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "

    HighCVSS 7.8No exploitEPSS 19%

    microsoft · excelNov 13, 2018

  • CVE-2018-8581
    67This week

    An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerabi

    HighCVSS 7.4KEVWeaponizedEPSS 27%

    microsoft · exchange serverNov 13, 2018

  • CVE-2018-8582
    41Plan

    A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft O

    HighCVSS 8.8No exploitEPSS 18%

    microsoft · office 365 proplusNov 13, 2018

  • CVE-2018-8588
    34Monitor

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · chakracoreNov 13, 2018

  • CVE-2018-8589
    62This week

    An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privile

    HighCVSS 7.8KEVWeaponizedEPSS 3%

    microsoft · windows 7Nov 13, 2018

  • CVE-2018-17463
    90Now

    Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a s

    HighCVSS 8.8KEVWeaponizedEPSS 84%

    google · chromeNov 14, 2018

  • CVE-2018-6065
    83Now

    Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3

    HighCVSS 8.8KEVWeaponizedEPSS 60%

    google · chromeNov 14, 2018

  • CVE-2018-7357
    61This week

    ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper access control vulnerab

    HighCVSS 8.8Proof of conceptEPSS 87%

    zte · zxhn h168n firmwareNov 14, 2018

  • CVE-2018-7358
    62This week

    ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper change control vulnerab

    HighCVSS 8.8Proof of conceptEPSS 89%

    zte · zxhn h168n firmwareNov 14, 2018

  • CVE-2018-15708
    66This week

    Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request.

    CriticalCVSS 9.8WeaponizedEPSS 89%

    nagios · nagios xiNov 14, 2018

  • CVE-2018-15709
    41Plan

    Nagios XI 5.5.6 allows remote authenticated attackers to execute arbitrary commands via a crafted HTTP request.

    HighCVSS 8.8No exploitEPSS 21%

    nagios · nagios xiNov 14, 2018

  • CVE-2018-15710
    42Plan

    Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php.

    HighCVSS 7.8WeaponizedEPSS 38%

    nagios · nagios xiNov 14, 2018

  • CVE-2018-15711
    46Plan

    Nagios XI 5.5.6 allows remote authenticated attackers to reset and regenerate the API key of more privileged users.

    HighCVSS 8.8No exploitEPSS 36%

    nagios · nagios xiNov 14, 2018

  • CVE-2018-15712
    39Monitor

    Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the host parameter in api_tool.php.

    MediumCVSS 6.1No exploitEPSS 48%

    nagios · nagios xiNov 14, 2018

  • CVE-2018-12543
    41Plan

    In Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is published to Mosquitto that has a topic starting with $, but that is n

    HighCVSS 7.5No exploitEPSS 36%

    eclipse · mosquittoNov 15, 2018

  • CVE-2018-8529
    43Plan

    A remote code execution vulnerability exists when Team Foundation Server (TFS) does not enable basic authorization on the communication betw

    CriticalCVSS 9.8No exploitEPSS 13%

    microsoft · team foundation serverNov 15, 2018

  • CVE-2018-16395
    42Plan

    An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3

    CriticalCVSS 9.8No exploitEPSS 10%

    ruby-lang · opensslNov 16, 2018

  • CVE-2018-18761
    44Plan

    SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection.

    CriticalCVSS 9.8Proof of conceptEPSS 16%

    saltos · saltosNov 16, 2018

  • CVE-2018-18955
    40Plan

    In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalation because it misha

    HighCVSS 7.0WeaponizedEPSS 7%

    linux · linux kernelNov 16, 2018

  • CVE-2018-19410
    98Now

    PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including admin

    CriticalCVSS 9.8KEVWeaponizedEPSS 97%

    paessler · prtg network monitorNov 21, 2018

  • CVE-2018-19422
    47Plan

    /panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess fi

    HighCVSS 7.2WeaponizedEPSS 64%

    intelliants · subrion cmsNov 21, 2018

  • CVE-2018-19423
    33Monitor

    Codiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an executable file.

    HighCVSS 7.2Proof of conceptEPSS 18%

    codiad · codiadNov 21, 2018

  • CVE-2018-19458
    40Plan

    In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI URI, a different vulne

    HighCVSS 7.5Proof of conceptEPSS 32%

    php-proxy · php-proxyNov 22, 2018

  • CVE-2018-19518
    59Plan

    University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of

    HighCVSS 7.5WeaponizedEPSS 96%

    php · phpNov 25, 2018

  • CVE-2018-13324
    46Plan

    Incorrect access control in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to bypass authentication by sending a modified

    CriticalCVSS 9.8No exploitEPSS 23%

    buffalo · ts5600d1206 firmwareNov 26, 2018

  • CVE-2018-13022
    24Monitor

    Cross-site scripting vulnerability in the API 404 page on Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary JavaScrip

    MediumCVSS 6.1No exploitEPSS 0%

    mi · miwifi osNov 27, 2018

  • CVE-2018-13023
    42Plan

    System command injection vulnerability in wifi_access in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute system commands via

    HighCVSS 8.8No exploitEPSS 23%

    mi · miwifi osNov 27, 2018

  • CVE-2018-16130
    42Plan

    System command injection in request_mitv in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary system commands via the

    HighCVSS 8.8No exploitEPSS 23%

    mi · miwifi osNov 27, 2018

  • CVE-2018-17934
    60This week

    NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname that is able to be resolved outside the in

    CriticalCVSS 9.8WeaponizedEPSS 19%

    nuuo · nuuo cmsNov 27, 2018

  • CVE-2018-17936
    60This week

    NUUO CMS All versions 3.3 and prior the application allows the upload of arbitrary files that can modify or overwrite configuration files to

    CriticalCVSS 9.8WeaponizedEPSS 15%

    nuuo · nuuo cmsNov 27, 2018

  • CVE-2018-18982
    53Plan

    NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can be used to inject SQL

    HighCVSS 8.8WeaponizedEPSS 60%

    nuuo · nuuo cmsNov 27, 2018

  • CVE-2018-13338
    42Plan

    System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "username" pa

    CriticalCVSS 9.8No exploitEPSS 10%

    terra-master · terramaster operating systemNov 27, 2018

  • CVE-2018-13350
    44Plan

    SQL injection in logtable.php in TerraMaster TOS version 3.1.03 allows attackers to execute SQL queries via the "Event" parameter.

    CriticalCVSS 9.8No exploitEPSS 16%

    terra-master · terramaster operating systemNov 27, 2018

  • CVE-2018-13354
    46Plan

    System command injection in logtable.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "Event" param

    CriticalCVSS 9.8No exploitEPSS 22%

    terra-master · terramaster operating systemNov 27, 2018

  • CVE-2018-13358
    42Plan

    System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "checkName" p

    HighCVSS 8.8No exploitEPSS 24%

    terra-master · terramaster operating systemNov 27, 2018

  • CVE-2018-13359
    41Plan

    Cross-site scripting in usertable.php in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "modgroup" parameter.

    HighCVSS 8.8No exploitEPSS 19%

    terra-master · terramaster operating systemNov 27, 2018

  • CVE-2018-13361
    26Monitor

    User enumeration in usertable.php in TerraMaster TOS version 3.1.03 allows attackers to list all system users via the "modgroup" parameter.

    MediumCVSS 5.3No exploitEPSS 16%

    terra-master · terramaster operating systemNov 27, 2018

  • CVE-2018-12121
    33Monitor

    Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination

    HighCVSS 7.5No exploitEPSS 10%

    nodejs · node.jsNov 28, 2018

  • CVE-2018-12122
    42Plan

    Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial

    HighCVSS 7.5No exploitEPSS 41%

    nodejs · node.jsNov 28, 2018

  • CVE-2018-19627
    35Monitor

    In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash.

    HighCVSS 7.5Proof of conceptEPSS 17%

    wireshark · wiresharkNov 29, 2018

  • CVE-2018-15979
    33Monitor

    Adobe Acrobat and Reader versions 2019.008.20080 and earlier, 2017.011.30105 and earlier, and 2015.006.30456 and earlier have a ntlm sso has

    HighCVSS 7.5No exploitEPSS 10%

    adobe · acrobat dcNov 29, 2018

  • CVE-2018-15981
    43Plan

    Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability.

    CriticalCVSS 9.8No exploitEPSS 11%

    adobe · flash player desktop runtimeNov 29, 2018

  • CVE-2018-15767
    39Monitor

    Improper Authorization Vulnerability

    HighCVSS 8.8Proof of conceptEPSS 12%

    dell · openmanage network managerNov 30, 2018

  • CVE-2018-3948
    37Monitor

    An exploitable denial-of-service vulnerability exists in the URI-parsing functionality of the TP-Link TL-R600VPN HTTP server.

    HighCVSS 7.5No exploitEPSS 23%

    tp-link · tl-r600vpn firmwareNov 30, 2018

  • CVE-2018-15716
    41Plan

    NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection.

    HighCVSS 8.8Proof of conceptEPSS 18%

    nuuo · nvrmini2 firmwareNov 30, 2018

  • CVE-2018-3949
    46Plan

    An exploitable information disclosure vulnerability exists in the HTTP server functionality of the TP-Link TL-R600VPN.

    HighCVSS 7.5No exploitEPSS 53%

    tp-link · tl-r600vpn firmwareNov 30, 2018