İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2018: sömürülen ve yeni ciddi CVE kayıtları

103 kayıt · 8 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2018-8034
    36İzleyin

    The host name verification when using TLS with the WebSocket client was missing.

    YüksekCVSS 7,5İstismar yokEPSS %21

    apache · tomcat1 Ağu 2018

  • CVE-2018-3924
    44Planlayın

    An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.5096.

    YüksekCVSS 7,8İstismar yokEPSS %43

    foxitsoftware · foxit reader1 Ağu 2018

  • CVE-2018-14847
    95Hemen

    MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write a

    KritikCVSS 9,1KEVSilahlaştırılmışEPSS %95

    mikrotik · routeros2 Ağu 2018

  • CVE-2018-8032
    27İzleyin

    Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.

    OrtaCVSS 6,1Kavram kanıtıEPSS %10

    apache · axis2 Ağu 2018

  • CVE-2018-1336
    36İzleyin

    An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Den

    YüksekCVSS 7,5İstismar yokEPSS %20

    apache · tomcat2 Ağu 2018

  • CVE-2018-8037
    26İzleyin

    If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed

    OrtaCVSS 5,9İstismar yokEPSS %11

    apache · tomcat2 Ağu 2018

  • CVE-2018-13416
    45Planlayın

    In Universal Media Server (UMS) 7.1.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    spirton · universal media server3 Ağu 2018

  • CVE-2018-14574
    32İzleyin

    django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect.

    OrtaCVSS 6,1Kavram kanıtıEPSS %25

    djangoproject · django3 Ağu 2018

  • CVE-2018-14773
    43Planlayın

    An issue was discovered in Http Foundation in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13

    OrtaCVSS 6,5İstismar yokEPSS %57

    sensiolabs · symfony3 Ağu 2018

  • CVE-2018-14728
    62Bu hafta

    upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.

    KritikCVSS 9,8Kavram kanıtıEPSS %76

    tecrail · responsive filemanager3 Ağu 2018

  • CVE-2018-7748
    36İzleyin

    report_viewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via '${xyz}' Glide Scri

    YüksekCVSS 8,8İstismar yokEPSS %2

    servicenow · servicenow3 Ağu 2018

  • CVE-2018-14912
    60Bu hafta

    cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrate

    YüksekCVSS 7,5SilahlaştırılmışEPSS %91

    cgit project · cgit3 Ağu 2018

  • CVE-2018-14417
    66Bu hafta

    A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3.

    KritikCVSS 9,8Kavram kanıtıEPSS %89

    softnas · cloud3 Ağu 2018

  • CVE-2018-14933
    97Hemen

    upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeup

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %94

    nuuo · nvrmini firmware4 Ağu 2018

  • CVE-2017-6920
    45Planlayın

    Drupal core 8 before versions 8.3.4 allows remote attackers to execute arbitrary code due to the PECL YAML parser not handling PHP objects s

    KritikCVSS 9,8İstismar yokEPSS %20

    drupal · drupal6 Ağu 2018

  • CVE-2016-4391
    45Planlayın

    A remote code execution security vulnerability has been identified in all versions of the HP ArcSight WINC Connector prior to v7.3.0.

    KritikCVSS 9,8İstismar yokEPSS %18

    hp · arcsight winc connector6 Ağu 2018

  • CVE-2016-4402
    43Planlayın

    A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2.

    KritikCVSS 9,8İstismar yokEPSS %14

    hp · keyview6 Ağu 2018

  • CVE-2016-4403
    43Planlayın

    A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2.

    KritikCVSS 9,8İstismar yokEPSS %12

    hp · keyview6 Ağu 2018

  • CVE-2016-4404
    43Planlayın

    A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2.

    KritikCVSS 9,8İstismar yokEPSS %13

    hp · keyview6 Ağu 2018

  • CVE-2016-8526
    38İzleyin

    Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to an XML external entities (XXE).

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    hp · airwave6 Ağu 2018

  • CVE-2016-8527
    28İzleyin

    Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to a reflected cross-site scripting (XSS).

    OrtaCVSS 6,1Kavram kanıtıEPSS %13

    hp · airwave6 Ağu 2018

  • CVE-2017-8990
    44Planlayın

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Service Manager (WSM) Software earl

    KritikCVSS 9,8İstismar yokEPSS %15

    hp · imc wireless service manager6 Ağu 2018

  • CVE-2018-14716
    40Planlayın

    A Server Side Template Injection (SSTI) was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because requests that don't match

    YüksekCVSS 7,5Kavram kanıtıEPSS %32

    nystudio107 · seomatic6 Ağu 2018

  • CVE-2018-5390
    51Planlayın

    Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can

    YüksekCVSS 7,5İstismar yokEPSS %71

    linux · linux kernel6 Ağu 2018

  • CVE-2018-7074
    44Planlayın

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) PLAT 7.3 E0506P07.

    KritikCVSS 9,8İstismar yokEPSS %15

    hp · intelligent management center6 Ağu 2018

  • CVE-2018-7092
    37İzleyin

    A potential security vulnerability has been identified in HPE Intelligent Management Center Platform (IMC Plat) 7.3 E0506P09.

    YüksekCVSS 7,5İstismar yokEPSS %24

    hp · intelligent management center6 Ağu 2018

  • CVE-2018-15137
    44Planlayın

    CeLa Link CLR-M20 devices allow unauthorized users to upload any file (e.g., asp, aspx, cfm, html, jhtml, jsp, or shtml), which causes remot

    KritikCVSS 9,8Kavram kanıtıEPSS %17

    cela link · clr-m20 firmware7 Ağu 2018

  • CVE-2018-15133
    85Hemen

    In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a pote

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %76

    laravel · laravel9 Ağu 2018

  • CVE-2018-10931
    59Planlayın

    It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC.

    KritikCVSS 9,8Kavram kanıtıEPSS %68

    cobbler project · cobbler9 Ağu 2018

  • CVE-2018-11492
    33İzleyin

    ASUS HG100 devices allow denial of service via an IPv4 packet flood.

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    asus · hg100 firmware10 Ağu 2018

  • CVE-2018-14028
    33İzleyin

    In WordPress 4.9.7, plugins uploaded via the admin area are not verified as being ZIP files.

    YüksekCVSS 7,2İstismar yokEPSS %15

    wordpress · wordpress10 Ağu 2018

  • CVE-2018-10630
    42Planlayın

    For Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001, The devices are shipped with authentication di

    KritikCVSS 9,8İstismar yokEPSS %10

    crestron · tsw-x60 firmware10 Ağu 2018

  • CVE-2018-5924
    42Planlayın

    A security vulnerability has been identified with certain HP Inkjet printers.

    KritikCVSS 9,8İstismar yokEPSS %10

    hp · t8x44 firmware13 Ağu 2018

  • CVE-2018-11770
    40Planlayın

    From version 1.3.0 onward, Apache Spark's standalone master exposes a REST API for job submission, in addition to the submission mechanism u

    OrtaCVSS 4,2SilahlaştırılmışEPSS %65

    apache · spark13 Ağu 2018

  • CVE-2018-13415
    48Planlayın

    In Plex Media Server 1.13.2.5154, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE

    KritikCVSS 9,8Kavram kanıtıEPSS %31

    plex · media server13 Ağu 2018

  • CVE-2018-13417
    45Planlayın

    In Vuze Bittorrent Client 5.7.6.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XX

    KritikCVSS 9,8Kavram kanıtıEPSS %20

    vuze · bittorrent client13 Ağu 2018

  • CVE-2018-15139
    41Planlayın

    Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attack

    YüksekCVSS 8,8Kavram kanıtıEPSS %19

    open-emr · openemr13 Ağu 2018

  • CVE-2018-15140
    31İzleyin

    Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patien

    OrtaCVSS 6,5Kavram kanıtıEPSS %16

    open-emr · openemr13 Ağu 2018

  • CVE-2018-15141
    30İzleyin

    Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patien

    OrtaCVSS 6,5Kavram kanıtıEPSS %14

    open-emr · openemr13 Ağu 2018

  • CVE-2018-15142
    40Planlayın

    Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patien

    YüksekCVSS 8,8Kavram kanıtıEPSS %17

    open-emr · openemr13 Ağu 2018

  • CVE-2016-4975
    30İzleyin

    mod_userdir CRLF injection

    OrtaCVSS 6,1Kavram kanıtıEPSS %19

    apache · http server14 Ağu 2018

  • CVE-2018-15138
    34İzleyin

    Ericsson-LG iPECS NMS 30M allows directory traversal via ipecs-cm/download?filename=../ URIs.

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    ericssonlg · ipecs nms15 Ağu 2018

  • CVE-2018-15152
    44Planlayın

    Authentication bypass vulnerability in portal/account/register.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker to access

    KritikCVSS 9,1Kavram kanıtıEPSS %25

    open-emr · openemr15 Ağu 2018

  • CVE-2018-15153
    53Planlayın

    OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by

    YüksekCVSS 8,8İstismar yokEPSS %61

    open-emr · openemr15 Ağu 2018

  • CVE-2018-15154
    38İzleyin

    OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by

    YüksekCVSS 8,8İstismar yokEPSS %10

    open-emr · openemr15 Ağu 2018

  • CVE-2018-15155
    38İzleyin

    OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by

    YüksekCVSS 8,8İstismar yokEPSS %10

    open-emr · openemr15 Ağu 2018

  • CVE-2018-15156
    38İzleyin

    OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by

    YüksekCVSS 8,8İstismar yokEPSS %10

    open-emr · openemr15 Ağu 2018

  • CVE-2018-8266
    38İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %27

    microsoft · chakracore15 Ağu 2018

  • CVE-2018-8273
    48Planlayın

    A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system, aka "Micros

    KritikCVSS 9,8İstismar yokEPSS %29

    microsoft · sql server15 Ağu 2018

  • CVE-2018-8302
    47Planlayın

    A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, ak

    KritikCVSS 9,8İstismar yokEPSS %25

    microsoft · exchange server15 Ağu 2018

  • CVE-2018-8316
    34İzleyin

    A remote code execution vulnerability exists when Internet Explorer improperly validates hyperlinks before loading executable libraries, aka

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · internet explorer15 Ağu 2018

  • CVE-2018-8344
    41Planlayın

    A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso

    YüksekCVSS 8,8İstismar yokEPSS %21

    microsoft · windows 1015 Ağu 2018

  • CVE-2018-8345
    34İzleyin

    A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "L

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · windows 1015 Ağu 2018

  • CVE-2018-8346
    41Planlayın

    A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "L

    YüksekCVSS 8,8İstismar yokEPSS %18

    microsoft · windows 715 Ağu 2018

  • CVE-2018-8349
    42Planlayın

    A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Micros

    YüksekCVSS 8,8İstismar yokEPSS %22

    microsoft · windows 1015 Ağu 2018

  • CVE-2018-8350
    41Planlayın

    A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory, aka "Windows PDF Remot

    YüksekCVSS 8,8İstismar yokEPSS %18

    microsoft · windows 1015 Ağu 2018

  • CVE-2018-8353
    50Planlayın

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip

    YüksekCVSS 7,5Kavram kanıtıEPSS %67

    microsoft · internet explorer15 Ağu 2018

  • CVE-2018-8355
    50Planlayın

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting

    YüksekCVSS 7,5Kavram kanıtıEPSS %68

    microsoft · internet explorer15 Ağu 2018

  • CVE-2018-8359
    34İzleyin

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engin

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · chakracore15 Ağu 2018

  • CVE-2018-8371
    34İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · internet explorer15 Ağu 2018

  • CVE-2018-8372
    37İzleyin

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting

    YüksekCVSS 7,5İstismar yokEPSS %24

    microsoft · internet explorer15 Ağu 2018

  • CVE-2018-8373
    79Bu hafta

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %61

    microsoft · internet explorer15 Ağu 2018

  • CVE-2018-8375
    36İzleyin

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "

    YüksekCVSS 7,8İstismar yokEPSS %16

    microsoft · excel15 Ağu 2018

  • CVE-2018-8376
    40Planlayın

    A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory,

    YüksekCVSS 8,8İstismar yokEPSS %18

    microsoft · powerpoint15 Ağu 2018

  • CVE-2018-8379
    36İzleyin

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "

    YüksekCVSS 7,8İstismar yokEPSS %17

    microsoft · excel15 Ağu 2018

  • CVE-2018-8380
    34İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · chakracore15 Ağu 2018

  • CVE-2018-8381
    34İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · chakracore15 Ağu 2018

  • CVE-2018-8382
    26İzleyin

    An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel In

    OrtaCVSS 5,5İstismar yokEPSS %12

    microsoft · excel15 Ağu 2018

  • CVE-2018-8384
    49Planlayın

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    YüksekCVSS 7,5Kavram kanıtıEPSS %62

    microsoft · chakracore15 Ağu 2018

  • CVE-2018-8385
    34İzleyin

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · internet explorer15 Ağu 2018

  • CVE-2018-8389
    39İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip

    YüksekCVSS 7,5Kavram kanıtıEPSS %28

    microsoft · internet explorer15 Ağu 2018

  • CVE-2018-8390
    34İzleyin

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engin

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · chakracore15 Ağu 2018

  • CVE-2018-8397
    55Planlayın

    A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka

    YüksekCVSS 8,8İstismar yokEPSS %67

    microsoft · windows 715 Ağu 2018

  • CVE-2018-8403
    34İzleyin

    A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corr

    YüksekCVSS 7,5İstismar yokEPSS %12

    microsoft · internet explorer15 Ağu 2018

  • CVE-2018-8405
    62Bu hafta

    An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %3

    microsoft · windows 10 150715 Ağu 2018

  • CVE-2018-8406
    62Bu hafta

    An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %3

    microsoft · windows 10 150715 Ağu 2018

  • CVE-2018-8414
    87Hemen

    A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Ex

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %72

    microsoft · windows 10 170315 Ağu 2018

  • CVE-2018-14007
    56Planlayın

    Citrix XenServer 7.1 and newer allows Directory Traversal.

    KritikCVSS 9,8İstismar yokEPSS %56

    citrix · xenserver15 Ağu 2018

  • CVE-2018-11509
    43Planlayın

    ASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin username and password as it does for the NAS itself for applications that are instal

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    asustor · asustor data master16 Ağu 2018

  • CVE-2018-11511
    42Planlayın

    The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3 has a SQL injection vulnerability that affects the 'a

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    asustor · asustor data master16 Ağu 2018

  • CVE-2018-14058
    40Planlayın

    Pimcore before 5.3.0 allows SQL Injection via the REST web service API.

    OrtaCVSS 6,5SilahlaştırılmışEPSS %28

    pimcore · pimcore17 Ağu 2018

  • CVE-2018-15473
    60Bu hafta

    OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after

    OrtaCVSS 5,3SilahlaştırılmışEPSS %98

    openbsd · openssh17 Ağu 2018

  • CVE-2018-15494
    40Planlayın

    In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid.

    KritikCVSS 9,8İstismar yokEPSS %2

    dojotoolkit · dojo17 Ağu 2018

  • CVE-2018-1000226
    43Planlayın

    Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older version

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    cobblerd · cobbler20 Ağu 2018

  • CVE-2018-15534
    49Planlayın

    Geutebrueck re_porter 16 before 7.8.974.20 has a possibility of unauthenticated access to sensitive information including usernames and hash

    KritikCVSS 9,8Kavram kanıtıEPSS %32

    geutebrueck · re porter 16 firmware21 Ağu 2018

  • CVE-2018-11776
    92Hemen

    Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (ei

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %99

    apache · struts22 Ağu 2018

  • CVE-2018-1140
    29İzleyin

    A missing input sanitization flaw was found in the implementation of LDP database used for the LDAP server.

    OrtaCVSS 6,5İstismar yokEPSS %10

    samba · samba22 Ağu 2018

  • CVE-2018-15685
    35İzleyin

    GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindowOpen: true" or "sand

    YüksekCVSS 8,1Kavram kanıtıEPSS %10

    electronjs · electron23 Ağu 2018

  • CVE-2018-15120
    29İzleyin

    libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a denial of service (applic

    OrtaCVSS 6,5Kavram kanıtıEPSS %11

    gnome · pango24 Ağu 2018

  • CVE-2018-15535
    44Planlayın

    /filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 uses external input to construct a pathname that should be withi

    YüksekCVSS 7,5Kavram kanıtıEPSS %45

    tecrail · responsive filemanager24 Ağu 2018

  • CVE-2018-3786
    43Planlayın

    A command injection vulnerability in egg-scripts <v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    eggjs · egg-scripts24 Ağu 2018

  • CVE-2018-15877
    58Planlayın

    The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell metacharacters in the ip

    YüksekCVSS 8,8SilahlaştırılmışEPSS %76

    plainview activity monitor project · plainview activity monitor26 Ağu 2018

  • CVE-2015-9263
    43Planlayın

    An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 (build 16) and 7.4.0 (build 13).

    KritikCVSS 9,8İstismar yokEPSS %13

    idera · uptime infrastructure monitor27 Ağu 2018

  • CVE-2018-15839
    53Planlayın

    D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header.

    KritikCVSS 9,8Kavram kanıtıEPSS %45

    dlink · dir-615 firmware28 Ağu 2018

  • CVE-2018-12824
    26İzleyin

    Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability.

    OrtaCVSS 5,9İstismar yokEPSS %10

    adobe · flash player desktop runtime29 Ağu 2018

  • CVE-2018-12827
    40Planlayın

    Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability.

    YüksekCVSS 7,5Kavram kanıtıEPSS %32

    adobe · flash player29 Ağu 2018

  • CVE-2018-15727
    60Bu hafta

    Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember

    KritikCVSS 9,8SilahlaştırılmışEPSS %64

    grafana · grafana29 Ağu 2018

  • CVE-2018-12710
    55Planlayın

    An issue was discovered on D-Link DIR-601 2.02NA devices.

    YüksekCVSS 8,0Kavram kanıtıEPSS %76

    dlink · dir-601 firmware29 Ağu 2018

  • CVE-2018-16133
    33İzleyin

    Cybrotech CyBroHttpServer 1.0.3 allows Directory Traversal via a ../ in the URI.

    OrtaCVSS 5,3Kavram kanıtıEPSS %39

    cybrotech · cybrohttpserver29 Ağu 2018

  • CVE-2018-16158
    60Bu hafta

    Eaton Power Xpert Meter 4000, 6000, and 8000 devices before 13.4.0.10 have a single SSH private key across different customers' installation

    KritikCVSS 9,8SilahlaştırılmışEPSS %34

    eaton · power xpert meter 4000 firmware30 Ağu 2018