Эксплуатируемые и новые серьёзные CVE: сентябрь 2018 г.

ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel v

• Без аутентификации
• Утечка информации

imagemagick · imagemagick1 сент. 2018 г.

An issue was discovered in Artifex Ghostscript before 9.24.

• Локальное повышение привилегий

artifex · ghostscript5 сент. 2018 г.

curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code.

• Без аутентификации
• Ошибки памяти

haxx · libcurl5 сент. 2018 г.

Ubiquiti airOS HTTP(S) unauthenticated arbitrary file upload

• Без аутентификации
• Обход пути
• Загрузка файлов

ui · airmax ac firmware5 сент. 2018 г.

The test connection functionality in the NetAudit section of Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to command in

• RCE без входа
• Инъекция команд

opsview · opsview5 сент. 2018 г.

The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets

• Без аутентификации
• Отказ в обслуживании

linux · linux kernel6 сент. 2018 г.

IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 is vulnerable to SQL injection.

• Без аутентификации
• SQL-инъекция

ibm · security identity governance and intelligence7 сент. 2018 г.

Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter.

• Без аутентификации
• Обход пути

endress · wirelesshart fieldgate swg70 firmware7 сент. 2018 г.

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter.

• RCE без входа

thedaylightstudio · fuel cms9 сент. 2018 г.

Rubedo through 3.4.0 contains a Directory Traversal vulnerability in the theme component, allowing unauthenticated attackers to read and exe

• RCE без входа
• Обход пути

rubedo project · rubedo11 сент. 2018 г.

In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections afforded by the guard

• Без аутентификации
• Ошибки памяти
• Отказ в обслуживании

freebsd · freebsd12 сент. 2018 г.

Huawei B315s-22 products with software of 21.318.01.00.26 have an information leak vulnerability.

• Без аутентификации
• Утечка информации

huawei · b315s-22 firmware12 сент. 2018 г.

A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability." Th

• Без аутентификации
• Отказ в обслуживании

microsoft · microsoft.data.odata12 сент. 2018 г.

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "

• RCE

microsoft · excel12 сент. 2018 г.

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k

• RCE без входа

microsoft · office12 сент. 2018 г.

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scriptin

• RCE без входа
• Ошибки памяти

microsoft · chakracore12 сент. 2018 г.

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

• RCE без входа
• Ошибки памяти

microsoft · chakracore12 сент. 2018 г.

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engin

• RCE без входа
• Ошибки памяти

microsoft · chakracore12 сент. 2018 г.

A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, ak

• RCE

microsoft · windows 1012 сент. 2018 г.

A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, ak

• RCE

microsoft · windows 1012 сент. 2018 г.

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code

• RCE без входа
• XXE

microsoft · windows 1012 сент. 2018 г.

A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input, aka ".NET Framework Remote Code Execut

• RCE без входа

microsoft · .net framework12 сент. 2018 г.

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows

• Без аутентификации
• Утечка информации

microsoft · windows 1012 сент. 2018 г.

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel In

• Утечка информации

microsoft · excel12 сент. 2018 г.

A remote code execution vulnerability exists in Microsoft Word if a user opens a specially crafted PDF file, aka "Word PDF Remote Code Execu

• RCE

microsoft · office12 сент. 2018 г.

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows A

• Локальное повышение привилегий

microsoft · windows 10 160712 сент. 2018 г.

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor

• RCE без входа
• Ошибки памяти

microsoft · internet explorer12 сент. 2018 г.

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engin

• RCE без входа
• Ошибки памяти

microsoft · chakracore12 сент. 2018 г.

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting

• RCE без входа
• Ошибки памяти

microsoft · internet explorer12 сент. 2018 г.

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engin

• RCE без входа
• Ошибки памяти

microsoft · edge12 сент. 2018 г.

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor

• RCE без входа
• Ошибки памяти

microsoft · internet explorer12 сент. 2018 г.

An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the

• Без аутентификации

microsoft · edge12 сент. 2018 г.

An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF R

• RCE без входа
• Ошибки памяти

microsoft · edge12 сент. 2018 г.

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

• RCE без входа
• Ошибки памяти

microsoft · edge12 сент. 2018 г.

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

• RCE без входа
• Ошибки памяти

microsoft · chakracore12 сент. 2018 г.

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

• RCE без входа
• Ошибки памяти

microsoft · chakracore12 сент. 2018 г.

An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privilege Vulnerability."

• Без аутентификации

microsoft · windows 1012 сент. 2018 г.

An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the

• Без аутентификации

microsoft · edge12 сент. 2018 г.

A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted messages, aka "Lync for M

• Без аутентификации

microsoft · lync for mac12 сент. 2018 г.

A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "Windows Remote Code E

• RCE без входа

microsoft · windows 1012 сент. 2018 г.

An issue was discovered in TCPDF before 6.2.22.

• Без аутентификации
• Десериализация

tecnick · tcpdf14 сент. 2018 г.

Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials.

• Утечка информации

synametrics · synaman14 сент. 2018 г.

Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.

• Без аутентификации
• Ошибки памяти
• Отказ в обслуживании

opcfoundation · unified architecture-.net-legacy14 сент. 2018 г.

LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the P

• Без аутентификации
• Обход аутентификации

lg · supersign cms14 сент. 2018 г.

LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs.

• Без аутентификации
• Загрузка файлов

lg · supersign cms14 сент. 2018 г.

LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.

• Без аутентификации
• Утечка информации

lg · supersign cms14 сент. 2018 г.

LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsr_server/device/reboot on port 90

• Без аутентификации
• Обход аутентификации
• Отказ в обслуживании

lg · supersign cms14 сент. 2018 г.

A Persistent XSS issue was discovered in the Visual Editor in MyBB before 1.8.19 via a Video MyCode.

• XSS

mybb · mybb17 сент. 2018 г.

A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2.

• RCE без входа

apache · spamassassin17 сент. 2018 г.

It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability.

• Без аутентификации
• Обход аутентификации

western digital · my cloud wdbctl0020hwt firmware18 сент. 2018 г.

An issue was discovered in CIRCONTROL CirCarLife before 4.3.

• Без аутентификации
• Обход аутентификации

circontrol · circarlife scada18 сент. 2018 г.

Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('C

• RCE без входа
• Инъекция команд

python · python18 сент. 2018 г.

cgi_system in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute arbitrary code via crafted HTTP requests.

• RCE без входа
• Ошибки памяти

nuuo · nvrmini2 firmware19 сент. 2018 г.

An issue was discovered in Snap Creek Duplicator before 1.2.42.

• RCE без входа

awesomemotive · duplicator19 сент. 2018 г.

Global Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection.

• Без аутентификации
• SQL-инъекция

zohocorp · manageengine opmanager20 сент. 2018 г.

The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter.

• Без аутентификации
• SQL-инъекция

arkextensions · jck editor20 сент. 2018 г.

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior.

• RCE без входа
• Ошибки памяти

rockwellautomation · rslinx20 сент. 2018 г.

LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feat

• RCE
• Зашитые учётные данные
• Инъекция команд

linknet-usa · lw-n605r firmware20 сент. 2018 г.

Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /opu

• Без аутентификации
• SQL-инъекция

zohocorp · manageengine opmanager20 сент. 2018 г.

Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/log

• Без аутентификации
• SSRF

microsoft · exchange server21 сент. 2018 г.

Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI.

• Без аутентификации
• XSS

zohocorp · manageengine desktop central21 сент. 2018 г.

LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail.

• RCE без входа

lg · supersign cms21 сент. 2018 г.

The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter.

• Без аутентификации
• Обход пути

wechat brodcast project · wechat brodcast24 сент. 2018 г.

The Localize My Post plugin 1.0 for WordPress allows Directory Traversal via the ajax/include.php file parameter.

• Без аутентификации
• Обход пути

localize my post project · localize my post24 сент. 2018 г.

There is a stack consumption vulnerability in the res_http_websocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x

• Без аутентификации
• Отказ в обслуживании

digium · asterisk24 сент. 2018 г.

Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization.

• Без аутентификации
• Отказ в обслуживании

python · python25 сент. 2018 г.

Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-boun

• Без аутентификации
• Ошибки памяти

adobe · acrobat dc25 сент. 2018 г.

Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-boun

• RCE без входа
• Ошибки памяти

adobe · acrobat dc25 сент. 2018 г.

Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-boun

• Без аутентификации
• Ошибки памяти

adobe · acrobat dc25 сент. 2018 г.

Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-boun

• Без аутентификации
• Ошибки памяти

adobe · acrobat dc25 сент. 2018 г.

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untru

• RCE без входа
• Десериализация

adobe · coldfusion25 сент. 2018 г.

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untru

• RCE без входа
• Десериализация

adobe · coldfusion25 сент. 2018 г.

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untru

• RCE без входа
• Десериализация

adobe · coldfusion25 сент. 2018 г.

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file uploa

• RCE без входа
• Загрузка файлов

adobe · coldfusion25 сент. 2018 г.

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untru

• RCE без входа
• Десериализация

adobe · coldfusion25 сент. 2018 г.

In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU

• Без аутентификации
• Отказ в обслуживании

apache · http server25 сент. 2018 г.

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function.

• Локальное повышение привилегий
• Ошибки памяти

linux · linux kernel25 сент. 2018 г.

A serialization vulnerability in Zoho ManageEngine Applications Manager before build 13740 allows for remote code execution on Windows via a

• RCE без входа
• Десериализация

zohocorp · manageengine applications manager26 сент. 2018 г.

JavaMelody before 1.74.0 has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java.

• Без аутентификации
• XXE

javamelody project · javamelody26 сент. 2018 г.

An authenticated command injection vulnerability exists in status_interfaces.php via dhcp_relinquish_lease() in pfSense before 2.4.4 due to

• RCE
• Инъекция команд

netgate · pfsense26 сент. 2018 г.

Telegram Desktop (aka tdesktop) 1.3.16 alpha, when "Use proxy" is enabled, sends credentials and application data in cleartext over the SOCK

• Без аутентификации
• Утечка информации

telegram · telegram desktop28 сент. 2018 г.

TP-Link EAP Controller versions 2.5.3 and earlier lack RMI authentication

• Без аутентификации
• Обход аутентификации
• Десериализация

tp-link · eap controller28 сент. 2018 г.