İçeriğe atla
Noroxi

Yayın tarihine göre

Nisan 2018: sömürülen ve yeni ciddi CVE kayıtları

107 kayıt · 3 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2018-6849
    60Bu hafta

    In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https://

    OrtaCVSS 4,3SilahlaştırılmışEPSS %28

    duckduckgo · duckduckgo1 Nis 2018

  • CVE-2018-9230
    43Planlayın

    In OpenResty through 1.13.6.1, URI parameters are obtained using the ngx.req.get_uri_args and ngx.req.get_post_args functions that ignore pa

    KritikCVSS 9,8İstismar yokEPSS %13

    openresty · openresty2 Nis 2018

  • CVE-2018-4121
    39İzleyin

    An issue was discovered in certain Apple products.

    YüksekCVSS 8,8Kavram kanıtıEPSS %13

    apple · safari3 Nis 2018

  • CVE-2018-4162
    60Bu hafta

    An issue was discovered in certain Apple products.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %37

    apple · safari3 Nis 2018

  • CVE-2018-6914
    33İzleyin

    Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2

    YüksekCVSS 7,5İstismar yokEPSS %10

    ruby-lang · ruby3 Nis 2018

  • CVE-2018-9234
    31İzleyin

    GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in a

    YüksekCVSS 7,5İstismar yokEPSS %1

    gnupg · gnupg3 Nis 2018

  • CVE-2016-10718
    34İzleyin

    Brave Browser before 0.13.0 allows a tab to close itself even if the tab was not opened by a script, resulting in denial of service.

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    brave · brave browser3 Nis 2018

  • CVE-2018-9205
    47Planlayın

    Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path.

    YüksekCVSS 7,5Kavram kanıtıEPSS %55

    drupal · avatar uploader4 Nis 2018

  • CVE-2018-9248
    43Planlayın

    FiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass via a "Cookie: Name=0admin" header.

    KritikCVSS 9,8Kavram kanıtıEPSS %14

    fiberhome · vdsl2 modem hg 150-ub firmware4 Nis 2018

  • CVE-2018-0986
    54Planlayın

    A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, l

    YüksekCVSS 8,8Kavram kanıtıEPSS %63

    microsoft · exchange server4 Nis 2018

  • CVE-2018-8719
    26İzleyin

    An issue was discovered in the WP Security Audit Log plugin 3.1.1 for WordPress.

    OrtaCVSS 5,3Kavram kanıtıEPSS %15

    wpsecurityauditlog · wp security audit log4 Nis 2018

  • CVE-2018-9126
    54Planlayın

    The DNNArticle module 11 for DNN (formerly DotNetNuke) allows remote attackers to read the web.config file, and consequently discover databa

    KritikCVSS 9,8Kavram kanıtıEPSS %48

    zldnn · dnnarticle4 Nis 2018

  • CVE-2016-8371
    32İzleyin

    The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the authentication mechanism is enabled.

    YüksekCVSS 7,3Kavram kanıtıEPSS %10

    phoenixcontact · ilc plcs firmware5 Nis 2018

  • CVE-2016-8380
    32İzleyin

    The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.

    YüksekCVSS 7,3Kavram kanıtıEPSS %10

    phoenixcontact · ilc plcs firmware5 Nis 2018

  • CVE-2017-14462
    50Planlayın

    An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl

    KritikCVSS 9,8İstismar yokEPSS %35

    rockwellautomation · micrologix 1400 b firmware5 Nis 2018

  • CVE-2017-14463
    51Planlayın

    An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl

    KritikCVSS 9,8İstismar yokEPSS %38

    rockwellautomation · micrologix 1400 b firmware5 Nis 2018

  • CVE-2017-14464
    50Planlayın

    An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl

    KritikCVSS 9,8İstismar yokEPSS %37

    rockwellautomation · micrologix 1400 b firmware5 Nis 2018

  • CVE-2017-14465
    50Planlayın

    An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl

    KritikCVSS 9,8İstismar yokEPSS %35

    rockwellautomation · micrologix 1400 b firmware5 Nis 2018

  • CVE-2017-14466
    50Planlayın

    An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl

    KritikCVSS 9,8İstismar yokEPSS %37

    rockwellautomation · micrologix 1400 b firmware5 Nis 2018

  • CVE-2017-14467
    50Planlayın

    An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl

    KritikCVSS 9,8İstismar yokEPSS %37

    rockwellautomation · micrologix 1400 b firmware5 Nis 2018

  • CVE-2017-14468
    50Planlayın

    An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl

    KritikCVSS 9,8İstismar yokEPSS %37

    rockwellautomation · micrologix 1400 b firmware5 Nis 2018

  • CVE-2017-14469
    50Planlayın

    An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl

    KritikCVSS 9,8İstismar yokEPSS %37

    rockwellautomation · micrologix 1400 b firmware5 Nis 2018

  • CVE-2017-14470
    50Planlayın

    An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl

    KritikCVSS 9,8İstismar yokEPSS %37

    rockwellautomation · micrologix 1400 b firmware5 Nis 2018

  • CVE-2017-14471
    50Planlayın

    An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl

    KritikCVSS 9,8İstismar yokEPSS %37

    rockwellautomation · micrologix 1400 b firmware5 Nis 2018

  • CVE-2017-14472
    50Planlayın

    An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl

    KritikCVSS 9,8İstismar yokEPSS %37

    rockwellautomation · micrologix 1400 b firmware5 Nis 2018

  • CVE-2017-14473
    50Planlayın

    An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl

    KritikCVSS 9,8İstismar yokEPSS %37

    rockwellautomation · micrologix 1400 b firmware5 Nis 2018

  • CVE-2018-1271
    33İzleyin

    Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configu

    OrtaCVSS 5,9Kavram kanıtıEPSS %34

    vmware · spring framework6 Nis 2018

  • CVE-2018-1270
    62Bu hafta

    Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose

    KritikCVSS 9,8Kavram kanıtıEPSS %77

    vmware · spring framework6 Nis 2018

  • CVE-2018-1308
    36İzleyin

    This vulnerability in Apache Solr 1.2 to 6.6.2 and 7.0.0 to 7.2.1 relates to an XML external entity expansion (XXE) in the `&dataConfig=<inl

    YüksekCVSS 7,5İstismar yokEPSS %20

    apache · solr9 Nis 2018

  • CVE-2018-1217
    54Planlayın

    Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1

    KritikCVSS 9,8Kavram kanıtıEPSS %50

    dell · emc avamar9 Nis 2018

  • CVE-2014-1889
    29İzleyin

    The Group creation process in the Buddypress plugin before 1.9.2 for WordPress allows remote authenticated users to gain control of arbitrar

    OrtaCVSS 6,5Kavram kanıtıEPSS %10

    buddypress · buddypress10 Nis 2018

  • CVE-2018-9995
    64Bu hafta

    TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login

    KritikCVSS 9,8Kavram kanıtıEPSS %82

    tbkvision · tbk-dvr4216 firmware10 Nis 2018

  • CVE-2018-1273
    98Hemen

    Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerabilit

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %96

    broadcom · spring data commons11 Nis 2018

  • CVE-2018-1275
    56Planlayın

    Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose

    KritikCVSS 9,8İstismar yokEPSS %57

    vmware · spring framework11 Nis 2018

  • CVE-2017-14459
    43Planlayın

    An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Industrial IE

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    moxa · awk-3131a firmware11 Nis 2018

  • CVE-2018-10054
    45Planlayın

    H2 1.4.197, as used in Datomic before 0.9.5697 and other products, allows remote code execution because CREATE ALIAS can execute arbitrary J

    YüksekCVSS 8,8SilahlaştırılmışEPSS %33

    cognitect · datomic11 Nis 2018

  • CVE-2018-0870
    35İzleyin

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · internet explorer11 Nis 2018

  • CVE-2018-0920
    37İzleyin

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "

    YüksekCVSS 7,8İstismar yokEPSS %20

    microsoft · excel11 Nis 2018

  • CVE-2018-0956
    34İzleyin

    A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2.

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · windows 1011 Nis 2018

  • CVE-2018-0967
    27İzleyin

    A denial of service vulnerability exists in the way that Windows SNMP Service handles malformed SNMP traps, aka "Windows SNMP Service Denial

    OrtaCVSS 5,3İstismar yokEPSS %18

    microsoft · windows 1011 Nis 2018

  • CVE-2018-0979
    35İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · edge11 Nis 2018

  • CVE-2018-0980
    50Planlayın

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5Kavram kanıtıEPSS %66

    microsoft · edge11 Nis 2018

  • CVE-2018-0988
    35İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · internet explorer11 Nis 2018

  • CVE-2018-0990
    35İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · edge11 Nis 2018

  • CVE-2018-0991
    35İzleyin

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · internet explorer11 Nis 2018

  • CVE-2018-0993
    35İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · edge11 Nis 2018

  • CVE-2018-0994
    35İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · edge11 Nis 2018

  • CVE-2018-0995
    35İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · edge11 Nis 2018

  • CVE-2018-0996
    34İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · internet explorer11 Nis 2018

  • CVE-2018-0997
    35İzleyin

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · internet explorer11 Nis 2018

  • CVE-2018-1001
    34İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · internet explorer11 Nis 2018

  • CVE-2018-1003
    38İzleyin

    A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, ak

    YüksekCVSS 7,8İstismar yokEPSS %22

    microsoft · windows 1011 Nis 2018

  • CVE-2018-1004
    41Planlayın

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem

    YüksekCVSS 8,8İstismar yokEPSS %18

    microsoft · internet explorer11 Nis 2018

  • CVE-2018-1010
    47Planlayın

    A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso

    YüksekCVSS 8,8Kavram kanıtıEPSS %39

    microsoft · windows 1011 Nis 2018

  • CVE-2018-1011
    37İzleyin

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · excel11 Nis 2018

  • CVE-2018-1012
    42Planlayın

    A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso

    YüksekCVSS 8,8İstismar yokEPSS %23

    microsoft · windows 1011 Nis 2018

  • CVE-2018-1013
    42Planlayın

    A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso

    YüksekCVSS 8,8İstismar yokEPSS %23

    microsoft · windows 1011 Nis 2018

  • CVE-2018-1015
    42Planlayın

    A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso

    YüksekCVSS 8,8İstismar yokEPSS %23

    microsoft · windows 1011 Nis 2018

  • CVE-2018-1016
    42Planlayın

    A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso

    YüksekCVSS 8,8İstismar yokEPSS %23

    microsoft · windows 1011 Nis 2018

  • CVE-2018-1018
    35İzleyin

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · internet explorer11 Nis 2018

  • CVE-2018-1019
    35İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · edge11 Nis 2018

  • CVE-2018-1020
    35İzleyin

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor

    YüksekCVSS 7,5İstismar yokEPSS %16

    microsoft · internet explorer11 Nis 2018

  • CVE-2018-1023
    34İzleyin

    A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corr

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · chakracore11 Nis 2018

  • CVE-2018-1026
    47Planlayın

    A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka

    YüksekCVSS 8,8Kavram kanıtıEPSS %40

    microsoft · office11 Nis 2018

  • CVE-2018-1027
    37İzleyin

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · excel11 Nis 2018

  • CVE-2018-1028
    41Planlayın

    A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Mi

    YüksekCVSS 8,8İstismar yokEPSS %18

    microsoft · excel services11 Nis 2018

  • CVE-2018-1029
    37İzleyin

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "

    YüksekCVSS 7,8İstismar yokEPSS %20

    microsoft · excel11 Nis 2018

  • CVE-2018-1030
    42Planlayın

    A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka

    YüksekCVSS 8,8İstismar yokEPSS %24

    microsoft · office11 Nis 2018

  • CVE-2018-9118
    44Planlayın

    exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a

    YüksekCVSS 7,5Kavram kanıtıEPSS %46

    99robots · wp background takeover advertisements12 Nis 2018

  • CVE-2018-9842
    26İzleyin

    CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by replaying a logon message.

    OrtaCVSS 5,3Kavram kanıtıEPSS %15

    cyberark · password vault12 Nis 2018

  • CVE-2018-9843
    44Planlayın

    The REST API in CyberArk Password Vault Web Access before 9.9.5 and 10.x before 10.1 allows remote attackers to execute arbitrary code via a

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    cyberark · password vault12 Nis 2018

  • CVE-2018-5511
    32İzleyin

    On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (T

    YüksekCVSS 7,2Kavram kanıtıEPSS %14

    f5 · big-ip local traffic manager13 Nis 2018

  • CVE-2017-0358
    40Planlayın

    ntfs-3g: Modprobe influence vulnerability via environment variables

    YüksekCVSS 7,8SilahlaştırılmışEPSS %2

    tuxera · ntfs-3g13 Nis 2018

  • CVE-2017-0372
    60Bu hafta

    Parameters injection in SyntaxHighlight results in multiple vulnerabilities

    KritikCVSS 9,8SilahlaştırılmışEPSS %11

    mediawiki · mediawiki13 Nis 2018

  • CVE-2018-6546
    44Planlayın

    plays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver-installation packages and Gaming Evolved products, e

    KritikCVSS 9,8Kavram kanıtıEPSS %17

    plays.tv · plays.tv13 Nis 2018

  • CVE-2014-2069
    35İzleyin

    Absolute path traversal vulnerability in Eshtery CMS allows remote attackers to read arbitrary files via a full pathname in the file paramet

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    eshtery.she7ata · eshtery cms16 Nis 2018

  • CVE-2018-10070
    34İzleyin

    A vulnerability in MikroTik Version 6.41.4 could allow an unauthenticated remote attacker to exhaust all available CPU and all available RAM

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    mikrotik · router firmware16 Nis 2018

  • CVE-2018-0737
    26İzleyin

    Cache timing vulnerability in RSA Key Generation

    OrtaCVSS 5,9İstismar yokEPSS %11

    openssl · openssl16 Nis 2018

  • CVE-2018-5430
    79Bu hafta

    TIBCO JasperReports Server Information Disclosure Vulnerability

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %48

    tibco · jasperreports server17 Nis 2018

  • CVE-2018-6913
    42Planlayın

    Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a lar

    KritikCVSS 9,8İstismar yokEPSS %10

    perl · perl17 Nis 2018

  • CVE-2018-8733
    60Bu hafta

    Authentication bypass vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an unauthenticated atta

    KritikCVSS 9,8SilahlaştırılmışEPSS %26

    nagios · nagios xi17 Nis 2018

  • CVE-2018-8734
    60Bu hafta

    SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrar

    KritikCVSS 9,8SilahlaştırılmışEPSS %53

    nagios · nagios xi17 Nis 2018

  • CVE-2018-8735
    54Planlayın

    Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary commands

    YüksekCVSS 8,8SilahlaştırılmışEPSS %63

    nagios · nagios xi17 Nis 2018

  • CVE-2018-8736
    49Planlayın

    A privilege escalation vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to leverage an RCE vulnerability esca

    YüksekCVSS 8,8SilahlaştırılmışEPSS %45

    nagios · nagios xi17 Nis 2018

  • CVE-2018-8831
    40Planlayın

    A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the co

    OrtaCVSS 6,1Kavram kanıtıEPSS %52

    kodi · kodi18 Nis 2018

  • CVE-2018-2628
    99Hemen

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    oracle · weblogic server18 Nis 2018

  • CVE-2018-2791
    43Planlayın

    Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI).

    YüksekCVSS 8,2Kavram kanıtıEPSS %38

    oracle · webcenter sites18 Nis 2018

  • CVE-2018-2799
    25İzleyin

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP).

    OrtaCVSS 5,3İstismar yokEPSS %14

    oracle · jdk18 Nis 2018

  • CVE-2018-2879
    42Planlayın

    Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Authentication Engine).

    KritikCVSS 9,0Kavram kanıtıEPSS %21

    oracle · access manager18 Nis 2018

  • CVE-2018-1143
    55Planlayın

    A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP reque

    KritikCVSS 9,8İstismar yokEPSS %54

    belkin · n750 firmware19 Nis 2018

  • CVE-2018-1145
    46Planlayın

    A remote unauthenticated user can overflow a stack buffer in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP reques

    KritikCVSS 9,8İstismar yokEPSS %24

    belkin · n750 firmware19 Nis 2018

  • CVE-2018-1146
    38İzleyin

    A remote unauthenticated user can enable telnet on the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to set.c

    YüksekCVSS 7,5İstismar yokEPSS %28

    belkin · n750 firmware19 Nis 2018

  • CVE-2018-3843
    41Planlayın

    An exploitable type confusion vulnerability exists in the way Foxit PDF Reader version 9.0.1.1049 parses files with associated file annotati

    YüksekCVSS 8,8İstismar yokEPSS %21

    foxitsoftware · foxit reader19 Nis 2018

  • CVE-2018-10201
    43Planlayın

    An issue was discovered in NcMonitorServer.exe in NC Monitor Server in NComputing vSpace Pro 10 and 11.

    YüksekCVSS 7,5Kavram kanıtıEPSS %43

    ncomputing · vspace pro20 Nis 2018

  • CVE-2018-9059
    62Bu hafta

    Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious logi

    KritikCVSS 9,8SilahlaştırılmışEPSS %77

    sharing-file · easy file sharing web server20 Nis 2018

  • CVE-2018-10285
    43Planlayın

    The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms.

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    ericssonlg · ipecs nms22 Nis 2018

  • CVE-2018-8880
    34İzleyin

    Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check for correct user authentication before showing the /deviceIP informat

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    lutron · quantum bacnet integration firmware23 Nis 2018

  • CVE-2016-9587
    37İzleyin

    Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems.

    YüksekCVSS 8,1Kavram kanıtıEPSS %17

    ansible · ansible24 Nis 2018

  • CVE-2017-2885
    46Planlayın

    An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58.

    KritikCVSS 9,8İstismar yokEPSS %23

    gnome · libsoup24 Nis 2018

  • CVE-2018-8716
    32İzleyin

    WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers.

    OrtaCVSS 5,4Kavram kanıtıEPSS %38

    wso2 · identity server25 Nis 2018