İçeriğe atla
Noroxi

Yayın tarihine göre

Temmuz 2018: sömürülen ve yeni ciddi CVE kayıtları

159 kayıt · 5 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2018-13050
    51Planlayın

    A SQL Injection vulnerability exists in Zoho ManageEngine Applications Manager 13.x before build 13800 via the j_username parameter in a /j_

    KritikCVSS 9,8İstismar yokEPSS %39

    zohocorp · manageengine applications manager2 Tem 2018

  • CVE-2018-9276
    84Hemen

    An issue was discovered in PRTG Network Monitor before 18.2.39.

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %86

    paessler · prtg network monitor2 Tem 2018

  • CVE-2018-7777
    45Planlayın

    The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Electric U.motion Build

    YüksekCVSS 8,8Kavram kanıtıEPSS %31

    schneider-electric · u.motion builder3 Tem 2018

  • CVE-2017-0929
    34İzleyin

    DNN (aka DotNetNuke) before 9.2.0 suffers from a Server-Side Request Forgery (SSRF) vulnerability in the DnnImageHandler class.

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    dnnsoftware · dotnetnuke3 Tem 2018

  • CVE-2018-8038
    33İzleyin

    Versions of Apache CXF Fediz prior to 1.4.4 do not fully disable Document Type Declarations (DTDs) when either parsing the Identity Provider

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    apache · cxf fediz5 Tem 2018

  • CVE-2018-12520
    35İzleyin

    An issue was discovered in ntopng 3.4 before 3.4.180617.

    YüksekCVSS 8,1Kavram kanıtıEPSS %10

    ntop · ntopng5 Tem 2018

  • CVE-2018-12571
    48Planlayın

    uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS q

    KritikCVSS 9,8İstismar yokEPSS %30

    microsoft · forefront unified access gateway5 Tem 2018

  • CVE-2018-8046
    44Planlayın

    The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data.

    OrtaCVSS 6,1İstismar yokEPSS %66

    sencha · ext js5 Tem 2018

  • CVE-2018-13109
    41Planlayın

    All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers a

    YüksekCVSS 7,5Kavram kanıtıEPSS %35

    adbglobal · dv2210 firmware6 Tem 2018

  • CVE-2018-13784
    41Planlayın

    PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfish.php.

    KritikCVSS 9,1Kavram kanıtıEPSS %16

    prestashop · prestashop9 Tem 2018

  • CVE-2018-4947
    44Planlayın

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap Overflo

    KritikCVSS 9,8İstismar yokEPSS %15

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4948
    44Planlayın

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap Overflo

    KritikCVSS 9,8İstismar yokEPSS %15

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4949
    40Planlayın

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    YüksekCVSS 7,5İstismar yokEPSS %32

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4950
    42Planlayın

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    KritikCVSS 9,8İstismar yokEPSS %10

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4955
    33İzleyin

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    YüksekCVSS 7,5İstismar yokEPSS %10

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4956
    40Planlayın

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    YüksekCVSS 7,5İstismar yokEPSS %32

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4957
    33İzleyin

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    YüksekCVSS 7,5İstismar yokEPSS %10

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4958
    42Planlayın

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-fr

    KritikCVSS 9,8İstismar yokEPSS %11

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4959
    42Planlayın

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-fr

    KritikCVSS 9,8İstismar yokEPSS %11

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4960
    33İzleyin

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    YüksekCVSS 7,5İstismar yokEPSS %10

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4961
    42Planlayın

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-fr

    KritikCVSS 9,8İstismar yokEPSS %11

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4962
    33İzleyin

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    YüksekCVSS 7,5İstismar yokEPSS %10

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4963
    33İzleyin

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    YüksekCVSS 7,5İstismar yokEPSS %10

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4964
    33İzleyin

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    YüksekCVSS 7,5İstismar yokEPSS %10

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4966
    44Planlayın

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap Overflo

    KritikCVSS 9,8İstismar yokEPSS %15

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4967
    33İzleyin

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    YüksekCVSS 7,5İstismar yokEPSS %10

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4968
    44Planlayın

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap Overflo

    KritikCVSS 9,8İstismar yokEPSS %15

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4969
    33İzleyin

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    YüksekCVSS 7,5İstismar yokEPSS %10

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4970
    33İzleyin

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    YüksekCVSS 7,5İstismar yokEPSS %10

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4973
    33İzleyin

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    YüksekCVSS 7,5İstismar yokEPSS %10

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4975
    33İzleyin

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    YüksekCVSS 7,5İstismar yokEPSS %10

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4976
    33İzleyin

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    YüksekCVSS 7,5İstismar yokEPSS %10

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4977
    42Planlayın

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-fr

    KritikCVSS 9,8İstismar yokEPSS %11

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4978
    44Planlayın

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap Overflo

    KritikCVSS 9,8İstismar yokEPSS %15

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4981
    33İzleyin

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    YüksekCVSS 7,5İstismar yokEPSS %10

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4982
    42Planlayın

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap Overflo

    YüksekCVSS 8,8İstismar yokEPSS %24

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4983
    42Planlayın

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-fr

    KritikCVSS 9,8İstismar yokEPSS %11

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4984
    44Planlayın

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap Overflo

    KritikCVSS 9,8İstismar yokEPSS %15

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4985
    41Planlayın

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    YüksekCVSS 7,5İstismar yokEPSS %36

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4986
    33İzleyin

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun

    YüksekCVSS 7,5İstismar yokEPSS %10

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4987
    43Planlayın

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Untrusted p

    KritikCVSS 9,8İstismar yokEPSS %13

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4988
    42Planlayın

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-fr

    KritikCVSS 9,8İstismar yokEPSS %11

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4989
    42Planlayın

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-fr

    KritikCVSS 9,8İstismar yokEPSS %11

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4990
    76Bu hafta

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %36

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-4993
    56Planlayın

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an NTLM SSO ha

    YüksekCVSS 7,5SilahlaştırılmışEPSS %86

    adobe · acrobat dc9 Tem 2018

  • CVE-2018-5000
    30İzleyin

    Adobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability.

    OrtaCVSS 6,5İstismar yokEPSS %13

    adobe · flash player desktop runtime9 Tem 2018

  • CVE-2018-5001
    30İzleyin

    Adobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read vulnerability.

    OrtaCVSS 6,5İstismar yokEPSS %13

    adobe · flash player desktop runtime9 Tem 2018

  • CVE-2018-5002
    69Bu hafta

    Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %25

    adobe · flash player desktop runtime9 Tem 2018

  • CVE-2018-1000613
    40Planlayın

    Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of

    KritikCVSS 9,8İstismar yokEPSS %4

    bouncycastle · bc-java9 Tem 2018

  • CVE-2018-0949
    30İzleyin

    A security feature bypass vulnerability exists when Microsoft Internet Explorer improperly handles requests involving UNC resources, aka "In

    OrtaCVSS 6,5İstismar yokEPSS %12

    microsoft · internet explorer10 Tem 2018

  • CVE-2018-8125
    36İzleyin

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptio

    YüksekCVSS 7,5İstismar yokEPSS %20

    microsoft · edge10 Tem 2018

  • CVE-2018-8171
    33İzleyin

    A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Securit

    YüksekCVSS 7,5İstismar yokEPSS %10

    microsoft · asp.net core10 Tem 2018

  • CVE-2018-8172
    41Planlayın

    A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an u

    YüksekCVSS 7,8Kavram kanıtıEPSS %33

    microsoft · expression blend10 Tem 2018

  • CVE-2018-8206
    34İzleyin

    A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections, aka "Windows FTP Server D

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · windows 1010 Tem 2018

  • CVE-2018-8242
    36İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip

    YüksekCVSS 7,5İstismar yokEPSS %19

    microsoft · internet explorer10 Tem 2018

  • CVE-2018-8260
    40Planlayın

    A Remote Code Execution vulnerability exists in .NET software when the software fails to check the source markup of a file, aka ".NET Framew

    YüksekCVSS 8,8İstismar yokEPSS %15

    microsoft · .net framework10 Tem 2018

  • CVE-2018-8262
    36İzleyin

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptio

    YüksekCVSS 7,5İstismar yokEPSS %20

    microsoft · edge10 Tem 2018

  • CVE-2018-8274
    36İzleyin

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptio

    YüksekCVSS 7,5İstismar yokEPSS %20

    microsoft · edge10 Tem 2018

  • CVE-2018-8275
    36İzleyin

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptio

    YüksekCVSS 7,5İstismar yokEPSS %20

    microsoft · edge10 Tem 2018

  • CVE-2018-8279
    51Planlayın

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptio

    YüksekCVSS 7,5Kavram kanıtıEPSS %70

    microsoft · edge10 Tem 2018

  • CVE-2018-8280
    36İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %20

    microsoft · edge10 Tem 2018

  • CVE-2018-8281
    37İzleyin

    A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka

    YüksekCVSS 7,8İstismar yokEPSS %21

    microsoft · office10 Tem 2018

  • CVE-2018-8283
    35İzleyin

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engin

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · chakracore10 Tem 2018

  • CVE-2018-8284
    46Planlayın

    A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote

    YüksekCVSS 8,1Kavram kanıtıEPSS %45

    microsoft · .net framework10 Tem 2018

  • CVE-2018-8286
    36İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %20

    microsoft · edge10 Tem 2018

  • CVE-2018-8287
    35İzleyin

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting

    YüksekCVSS 7,5İstismar yokEPSS %16

    microsoft · internet explorer10 Tem 2018

  • CVE-2018-8288
    51Planlayın

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting

    YüksekCVSS 7,5Kavram kanıtıEPSS %69

    microsoft · internet explorer10 Tem 2018

  • CVE-2018-8289
    20İzleyin

    An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Dis

    OrtaCVSS 4,3İstismar yokEPSS %10

    microsoft · edge10 Tem 2018

  • CVE-2018-8290
    36İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %20

    microsoft · edge10 Tem 2018

  • CVE-2018-8291
    51Planlayın

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting

    YüksekCVSS 7,5Kavram kanıtıEPSS %69

    microsoft · internet explorer10 Tem 2018

  • CVE-2018-8294
    36İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %21

    microsoft · edge10 Tem 2018

  • CVE-2018-8296
    35İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip

    YüksekCVSS 7,5İstismar yokEPSS %17

    microsoft · internet explorer10 Tem 2018

  • CVE-2018-8297
    20İzleyin

    An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Dis

    OrtaCVSS 4,3İstismar yokEPSS %10

    microsoft · edge10 Tem 2018

  • CVE-2018-8298
    82Hemen

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engin

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %74

    microsoft · chakracore10 Tem 2018

  • CVE-2018-8300
    39İzleyin

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa

    YüksekCVSS 8,8İstismar yokEPSS %13

    microsoft · sharepoint enterprise server10 Tem 2018

  • CVE-2018-8301
    34İzleyin

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptio

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · edge10 Tem 2018

  • CVE-2018-8304
    27İzleyin

    A denial of service vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka

    OrtaCVSS 5,9İstismar yokEPSS %12

    microsoft · windows 1010 Tem 2018

  • CVE-2018-8311
    40Planlayın

    A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted

    YüksekCVSS 8,8İstismar yokEPSS %16

    microsoft · lync10 Tem 2018

  • CVE-2018-8312
    37İzleyin

    A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory, aka "Microsoft Access Remote

    YüksekCVSS 7,8İstismar yokEPSS %21

    microsoft · access10 Tem 2018

  • CVE-2018-8324
    20İzleyin

    An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Dis

    OrtaCVSS 4,3İstismar yokEPSS %10

    microsoft · edge10 Tem 2018

  • CVE-2018-8327
    46Planlayın

    A remote code execution vulnerability exists in PowerShell Editor Services, aka "PowerShell Editor Services Remote Code Execution Vulnerabil

    KritikCVSS 9,8İstismar yokEPSS %23

    microsoft · powershell10 Tem 2018

  • CVE-2018-8007
    32İzleyin

    Apache CouchDB administrative users can configure the database server via HTTP(S).

    YüksekCVSS 7,2İstismar yokEPSS %12

    apache · couchdb11 Tem 2018

  • CVE-2017-16709
    50Planlayın

    Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated admini

    YüksekCVSS 7,2SilahlaştırılmışEPSS %71

    crestron · airmedia am-100 firmware11 Tem 2018

  • CVE-2018-11529
    43Planlayın

    VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via craf

    YüksekCVSS 8,0SilahlaştırılmışEPSS %36

    videolan · vlc media player11 Tem 2018

  • CVE-2018-12463
    43Planlayın

    MFSBGN03811 rev.1 - Fortify Software Security Center (SSC), Multiple vulnerabilities

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    hp · fortify software security center12 Tem 2018

  • CVE-2018-14009
    50Planlayın

    Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.

    KritikCVSS 9,8Kavram kanıtıEPSS %38

    codiad · codiad12 Tem 2018

  • CVE-2018-12980
    44Planlayın

    An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02.

    YüksekCVSS 8,8Kavram kanıtıEPSS %29

    wago · 762-3000 firmware12 Tem 2018

  • CVE-2018-1000207
    47Planlayın

    MODX Revolution version <=2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpt

    YüksekCVSS 7,2İstismar yokEPSS %64

    modx · modx revolution13 Tem 2018

  • CVE-2016-6563
    63Bu hafta

    D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action

    KritikCVSS 9,8SilahlaştırılmışEPSS %79

    dlink · dir-823 firmware13 Tem 2018

  • CVE-2016-6566
    42Planlayın

    The Sungard eTRAKiT3 software version 3.2.1.17 may be vulnerable to SQL injection which may allow a remote unauthenticated attacker to run a subset of SQL comma

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    sungardas · etrakit313 Tem 2018

  • CVE-2016-9498
    45Planlayın

    ManageEngine Applications Manager 12 and 13, allows unserialization of unsafe Java objects

    KritikCVSS 9,8İstismar yokEPSS %21

    zohocorp · manageengine applications manager13 Tem 2018

  • CVE-2018-14064
    50Planlayın

    The uc-http service 1.0.0 on VelotiSmart WiFi B-380 camera devices allows Directory Traversal, as demonstrated by /../../etc/passwd on TCP p

    KritikCVSS 9,8Kavram kanıtıEPSS %37

    velotismart project · velotismart wifi firmware15 Tem 2018

  • CVE-2018-11716
    43Planlayın

    An issue was discovered in Zoho ManageEngine Desktop Central before 100230.

    KritikCVSS 9,8İstismar yokEPSS %14

    zohocorp · manageengine desktop central16 Tem 2018

  • CVE-2018-13981
    44Planlayın

    The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated remote code execution due to a d

    KritikCVSS 9,8Kavram kanıtıEPSS %17

    zeta-producer · zeta producer desktop cms16 Tem 2018

  • CVE-2018-12584
    46Planlayın

    The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cau

    KritikCVSS 9,8Kavram kanıtıEPSS %23

    resiprocate · resiprocate16 Tem 2018

  • CVE-2018-0706
    49Planlayın

    Exposure of Private Information in QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to access se

    YüksekCVSS 8,8SilahlaştırılmışEPSS %48

    qnap · q\'center16 Tem 2018

  • CVE-2018-0707
    46Planlayın

    Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated

    YüksekCVSS 7,2SilahlaştırılmışEPSS %58

    qnap · q\'center16 Tem 2018

  • CVE-2018-0708
    43Planlayın

    Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated user

    YüksekCVSS 8,8Kavram kanıtıEPSS %26

    qnap · q\'center16 Tem 2018

  • CVE-2018-0709
    39İzleyin

    Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to r

    YüksekCVSS 8,8Kavram kanıtıEPSS %13

    qnap · q\'center16 Tem 2018

  • CVE-2018-0710
    39İzleyin

    Command injection vulnerability in SSH of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to ru

    YüksekCVSS 8,8Kavram kanıtıEPSS %14

    qnap · q\'center16 Tem 2018