Yayın tarihine göre

Ekim 2018: sömürülen ve yeni ciddi CVE kayıtları

121 kayıt · 2 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2018-17408Silahlaştırılmış	Stack-based buffer overflows in Zahir Accounting Enterprise Plus 6 through build 10b allow remote attackers to execute arbitrary code via a zahiraccounting · zahir enterprise plus · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%18,9	3 Eki 2018
64Bu hafta	CVE-2018-17552Silahlaştırılmış	SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigate-user cookie.naviwebs · navigate cms · CWE-89 Kimlik doğrulamasız Kimlik doğrulama atlatma SQL enjeksiyonu	Kritik9,8	—	%84,0	3 Eki 2018
59Planlayın	CVE-2018-17553Silahlaştırılmış	An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs Navigate CMS 2.8 allonaviwebs · navigate cms · CWE-22 RCE Yol geçişi Dosya yükleme	Yüksek8,8	—	%78,9	3 Eki 2018
46Planlayın	CVE-2018-11784Kavram kanıtı	When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directoapache · tomcat · CWE-601 Kimlik doğrulamasız Açık yönlendirme	Orta4,3	—	%97,6	4 Eki 2018
39İzleyin	CVE-2018-0472İstismar yok	Cisco IOS XE Software and Cisco ASA 5500-X Series Adaptive Security Appliance IPsec Denial of Service Vulnerabilitycisco · ios xe · CWE-20 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek8,6	—	%16,2	5 Eki 2018
27İzleyin	CVE-2018-0476İstismar yok	Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service Vulnerabilitycisco · ios xe · CWE-399 Kimlik doğrulamasız Hizmet dışı bırakma	Orta5,9	—	%13,6	5 Eki 2018
65Bu hafta	CVE-2018-15379Silahlaştırılmış	Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerabilitycisco · prime infrastructure · CWE-275 Girişsiz RCE Kimlik doğrulama atlatma Dosya yükleme	Kritik9,8	—	%86,2	5 Eki 2018
68Bu hafta	CVE-2018-17456Silahlaştırılmış	Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows rgit-scm · git · CWE-88 Girişsiz RCE	Kritik9,8	—	%97,3	6 Eki 2018
60Bu hafta	CVE-2012-6710Silahlaştırılmış	ext_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a password[]= (aka an empty array) in an actioextplorer · extplorer · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%24,9	7 Eki 2018
51Planlayın	CVE-2018-17440Kavram kanıtı	An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1.dlink · central wifimanager · CWE-434 Girişsiz RCE Dosya yükleme Gömülü kimlik bilgisi	Kritik9,8	—	%38,4	8 Eki 2018
39İzleyin	CVE-2018-17442Kavram kanıtı	An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1.dlink · central wifimanager · CWE-434 RCE Dosya yükleme	Yüksek8,8	—	%14,2	8 Eki 2018
31İzleyin	CVE-2018-18065Kavram kanıtı	_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attnet-snmp · net-snmp · CWE-476 Bellek hatası Hizmet dışı bırakma	Orta6,5	—	%17,5	8 Eki 2018
28İzleyin	CVE-2018-18069Kavram kanıtı	process_forms in the WPML (aka sitepress-multilingual-cms) plugin through 3.6.3 for WordPress has XSS via any locale_file_name_ parameter (swpml · wpml · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%13,2	8 Eki 2018
43Planlayın	CVE-2018-14649İstismar yok	It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug shell mode.redhat · enterprise linux desktop · CWE-77 Girişsiz RCE Komut enjeksiyonu	Kritik9,8	—	%11,9	9 Eki 2018
37İzleyin	CVE-2018-8265İstismar yok	A remote code execution vulnerability exists in the way Microsoft Exchange software parses specially crafted email messages, aka "Microsoft microsoft · exchange server · CWE-20 RCE	Yüksek7,8	—	%19,2	10 Eki 2018
34İzleyin	CVE-2018-8292İstismar yok	An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NEmicrosoft · asp.net core · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Yüksek7,5	—	%14,8	10 Eki 2018
45Planlayın	CVE-2018-8413Kavram kanıtı	A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows Theme API Remote Codemicrosoft · windows 10 RCE	Yüksek7,8	—	%46,2	10 Eki 2018
41Planlayın	CVE-2018-8423İstismar yok	A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution microsoft · windows 10 · CWE-119 RCE Bellek hatası	Yüksek7,8	—	%32,1	10 Eki 2018
37İzleyin	CVE-2018-8432İstismar yok	A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphicsmicrosoft · excel viewer RCE	Yüksek7,8	—	%19,5	10 Eki 2018
82Hemen	CVE-2018-8453Silahlaştırılmış	An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k microsoft · windows 10 1507 Yerel yetki yükseltme	Yüksek7,8	KEV	%70,0	10 Eki 2018
36İzleyin	CVE-2018-8460İstismar yok	A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cormicrosoft · internet explorer · CWE-787 Girişsiz RCE Bellek hatası	Yüksek7,5	—	%20,6	10 Eki 2018
28İzleyin	CVE-2018-8472İstismar yok	An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowimicrosoft · windows 10 · CWE-200 Bilgi sızıntısı	Orta5,5	—	%18,8	10 Eki 2018
34İzleyin	CVE-2018-8473İstismar yok	A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptiomicrosoft · chakracore · CWE-787 Girişsiz RCE Bellek hatası	Yüksek7,5	—	%14,2	10 Eki 2018
34İzleyin	CVE-2018-8491İstismar yok	A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cormicrosoft · internet explorer · CWE-787 Girişsiz RCE Bellek hatası	Yüksek7,5	—	%12,7	10 Eki 2018
42Planlayın	CVE-2018-8494İstismar yok	A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Codemicrosoft · windows 10 · CWE-611 Girişsiz RCE XXE	Yüksek8,8	—	%22,0	10 Eki 2018
45Planlayın	CVE-2018-8495Kavram kanıtı	A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka "Windows Shell Remote Code Execution Vulnerabilmicrosoft · windows 10 · CWE-22 Girişsiz RCE Yol geçişi	Yüksek7,5	—	%50,7	10 Eki 2018
45Planlayın	CVE-2018-8500İstismar yok	A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Enginmicrosoft · chakracore · CWE-787 Girişsiz RCE Bellek hatası	Kritik9,8	—	%18,4	10 Eki 2018
41Planlayın	CVE-2018-8501İstismar yok	A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protectemicrosoft · office Girişsiz RCE	Yüksek8,8	—	%19,7	10 Eki 2018
41Planlayın	CVE-2018-8502İstismar yok	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected Viemicrosoft · excel Girişsiz RCE	Yüksek8,8	—	%20,4	10 Eki 2018
34İzleyin	CVE-2018-8503İstismar yok	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Cmicrosoft · chakracore · CWE-787 Girişsiz RCE Bellek hatası	Yüksek7,5	—	%14,2	10 Eki 2018
41Planlayın	CVE-2018-8504İstismar yok	A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected Viewmicrosoft · office Girişsiz RCE	Yüksek8,8	—	%19,7	10 Eki 2018
34İzleyin	CVE-2018-8505İstismar yok	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Cmicrosoft · chakracore · CWE-787 Girişsiz RCE Bellek hatası	Yüksek7,5	—	%14,2	10 Eki 2018
34İzleyin	CVE-2018-8509İstismar yok	A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptiomicrosoft · edge · CWE-787 Girişsiz RCE Bellek hatası	Yüksek7,5	—	%12,7	10 Eki 2018
34İzleyin	CVE-2018-8510İstismar yok	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Cmicrosoft · chakracore · CWE-787 Girişsiz RCE Bellek hatası	Yüksek7,5	—	%14,2	10 Eki 2018
34İzleyin	CVE-2018-8511İstismar yok	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Cmicrosoft · chakracore · CWE-787 Girişsiz RCE Bellek hatası	Yüksek7,5	—	%14,2	10 Eki 2018
34İzleyin	CVE-2018-8513İstismar yok	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Cmicrosoft · chakracore · CWE-787 Girişsiz RCE Bellek hatası	Yüksek7,5	—	%14,2	10 Eki 2018
29İzleyin	CVE-2018-8527Kavram kanıtı	An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XEL file containingmicrosoft · sql server management studio · CWE-611 XXE	Orta5,5	—	%23,3	10 Eki 2018
40Planlayın	CVE-2018-8531İstismar yok	A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory,microsoft · azure internet of things edge · CWE-787 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%15,1	10 Eki 2018
29İzleyin	CVE-2018-8532Kavram kanıtı	An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XMLA file containinmicrosoft · sql server management studio · CWE-611 XXE	Orta5,5	—	%23,3	10 Eki 2018
29İzleyin	CVE-2018-8533Kavram kanıtı	An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containinmicrosoft · sql server management studio · CWE-611 XXE	Orta5,5	—	%23,3	10 Eki 2018
41Planlayın	CVE-2018-8006Kavram kanıtı	An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp paapache · activemq · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%55,4	10 Eki 2018
46Planlayın	CVE-2018-12596Kavram kanıtı	Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspxepiserver · ektron cms · CWE-269 Kimlik doğrulamasız	Kritik9,8	—	%22,3	10 Eki 2018
68Bu hafta	CVE-2018-9206Silahlaştırılmış	Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0jquery file upload project · jquery file upload · CWE-434 Kimlik doğrulamasız Dosya yükleme	Kritik9,8	—	%97,2	11 Eki 2018
60Bu hafta	CVE-2018-17888Silahlaştırılmış	NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the activenuuo · nuuo cms · CWE-330 Girişsiz RCE Zayıf kripto	Kritik9,8	—	%29,6	12 Eki 2018
34İzleyin	CVE-2018-12832İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overfloadobe · acrobat dc · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%10,0	12 Eki 2018
34İzleyin	CVE-2018-12833İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overfloadobe · acrobat dc · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%10,2	12 Eki 2018
34İzleyin	CVE-2018-12836İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overfloadobe · acrobat dc · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%10,0	12 Eki 2018
34İzleyin	CVE-2018-12837İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overfloadobe · acrobat dc · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%10,0	12 Eki 2018
26İzleyin	CVE-2018-12838İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a stack overfladobe · acrobat dc · CWE-125 Bellek hatası	Orta5,5	—	%11,8	12 Eki 2018
28İzleyin	CVE-2018-12839İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Bellek hatası	Orta5,5	—	%19,8	12 Eki 2018
34İzleyin	CVE-2018-12847İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overfloadobe · acrobat dc · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%10,8	12 Eki 2018
34İzleyin	CVE-2018-12851İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overfloadobe · acrobat dc · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%10,0	12 Eki 2018
27İzleyin	CVE-2018-12857İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Bellek hatası	Orta5,5	—	%16,3	12 Eki 2018
28İzleyin	CVE-2018-12859İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Bellek hatası	Orta5,5	—	%19,7	12 Eki 2018
35İzleyin	CVE-2018-12860İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%13,4	12 Eki 2018
36İzleyin	CVE-2018-12861İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%15,9	12 Eki 2018
35İzleyin	CVE-2018-12862İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%13,4	12 Eki 2018
36İzleyin	CVE-2018-12863İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an use after fadobe · acrobat dc · CWE-416 RCE Bellek hatası	Yüksek7,8	—	%16,8	12 Eki 2018
36İzleyin	CVE-2018-12864İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%16,0	12 Eki 2018
36İzleyin	CVE-2018-12865İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%15,9	12 Eki 2018
27İzleyin	CVE-2018-12866İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Bellek hatası	Orta5,5	—	%16,3	12 Eki 2018
28İzleyin	CVE-2018-12867İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Bellek hatası	Orta5,5	—	%19,7	12 Eki 2018
28İzleyin	CVE-2018-12869İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Bellek hatası	Orta5,5	—	%19,7	12 Eki 2018
28İzleyin	CVE-2018-12870İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Bellek hatası	Orta5,5	—	%19,7	12 Eki 2018
28İzleyin	CVE-2018-12871İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Bellek hatası	Orta5,5	—	%19,7	12 Eki 2018
28İzleyin	CVE-2018-12872İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Bellek hatası	Orta5,5	—	%19,7	12 Eki 2018
27İzleyin	CVE-2018-12873İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Bellek hatası	Orta5,5	—	%16,3	12 Eki 2018
27İzleyin	CVE-2018-12874İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Bellek hatası	Orta5,5	—	%16,3	12 Eki 2018
27İzleyin	CVE-2018-12875İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Bellek hatası	Orta5,5	—	%16,3	12 Eki 2018
27İzleyin	CVE-2018-15927İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Bellek hatası	Orta5,5	—	%16,3	12 Eki 2018
36İzleyin	CVE-2018-15928İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%15,9	12 Eki 2018
35İzleyin	CVE-2018-15929İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%13,4	12 Eki 2018
39İzleyin	CVE-2018-15930İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted padobe · acrobat dc · CWE-476 RCE Bellek hatası	Yüksek7,8	—	%27,8	12 Eki 2018
39İzleyin	CVE-2018-15931İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted padobe · acrobat dc · CWE-476 RCE Bellek hatası	Yüksek7,8	—	%27,8	12 Eki 2018
28İzleyin	CVE-2018-15932İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Bellek hatası	Orta5,5	—	%18,8	12 Eki 2018
35İzleyin	CVE-2018-15933İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%13,4	12 Eki 2018
35İzleyin	CVE-2018-15934İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%13,4	12 Eki 2018
35İzleyin	CVE-2018-15935İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%13,5	12 Eki 2018
35İzleyin	CVE-2018-15936İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%13,5	12 Eki 2018
39İzleyin	CVE-2018-15937İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted padobe · acrobat dc · CWE-476 RCE Bellek hatası	Yüksek7,8	—	%27,9	12 Eki 2018
35İzleyin	CVE-2018-15938İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%13,5	12 Eki 2018
36İzleyin	CVE-2018-15952İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%15,4	12 Eki 2018
28İzleyin	CVE-2018-15953İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Bellek hatası	Orta5,5	—	%19,8	12 Eki 2018
37İzleyin	CVE-2018-15954İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%19,0	12 Eki 2018
37İzleyin	CVE-2018-15955İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%19,0	12 Eki 2018
27İzleyin	CVE-2018-15956İstismar yok	Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounadobe · acrobat dc · CWE-125 Bellek hatası	Orta5,5	—	%16,4	12 Eki 2018
44Planlayın	CVE-2018-18322Kavram kanıtı	CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/index.php service_startcontrol-webpanel · webpanel · CWE-78 Girişsiz RCE Komut enjeksiyonu	Kritik9,8	—	%15,1	15 Eki 2018
51Planlayın	CVE-2018-18323Kavram kanıtı	CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=filcontrol-webpanel · webpanel · CWE-22 Kimlik doğrulamasız Yol geçişi	Yüksek7,5	—	%70,7	15 Eki 2018
60Bu hafta	CVE-2018-17532İstismar yok	Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autoloteltonika · rut900 firmware · CWE-78 Girişsiz RCE Komut enjeksiyonu	Kritik9,8	—	%70,6	15 Eki 2018
26İzleyin	CVE-2018-3167Kavram kanıtı	Vulnerability in the Application Management Pack for Oracle E-Business Suite component of Oracle E-Business Suite (subcomponent: User Monitooracle · application management pack Kimlik doğrulamasız	Orta5,3	—	%16,4	16 Eki 2018
58Planlayın	CVE-2018-3191Kavram kanıtı	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).oracle · weblogic server Kimlik doğrulamasız	Kritik9,8	—	%62,9	16 Eki 2018
67Bu hafta	CVE-2018-3245Kavram kanıtı	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).oracle · weblogic server · CWE-502 Kimlik doğrulamasız Deserializasyon	Kritik9,8	—	%94,2	16 Eki 2018
48Planlayın	CVE-2018-3252Kavram kanıtı	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).oracle · weblogic server Kimlik doğrulamasız	Kritik9,8	—	%29,3	16 Eki 2018
40Planlayın	CVE-2018-3953Silahlaştırılmış	Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04) are susceptlinksys · e1200 firmware · CWE-78 RCE Komut enjeksiyonu	Yüksek7,2	—	%13,5	16 Eki 2018
64Bu hafta	CVE-2018-10933Silahlaştırılmış	A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4.libssh · libssh · CWE-592 Kimlik doğrulamasız	Kritik9,1	—	%91,7	17 Eki 2018
43Planlayın	CVE-2018-7076İstismar yok	A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) prior to iMC PLAT 7.3 E0605P04.hp · intelligent management center · CWE-287 Girişsiz RCE Kimlik doğrulama atlatma	Kritik9,8	—	%12,3	17 Eki 2018
42Planlayın	CVE-2018-10822Kavram kanıtı	Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512dlink · dwr-116 firmware · CWE-22 Kimlik doğrulamasız Yol geçişi	Yüksek7,5	—	%39,2	17 Eki 2018
58Planlayın	CVE-2018-10823Kavram kanıtı	An issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.dlink · dwr-116 firmware · CWE-78 RCE Komut enjeksiyonu	Yüksek8,8	—	%77,6	17 Eki 2018
43Planlayın	CVE-2018-10824Kavram kanıtı	An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through dlink · dwr-116 firmware · CWE-22 Kimlik doğrulamasız Yol geçişi	Kritik9,8	—	%12,4	17 Eki 2018
42Planlayın	CVE-2018-12813İstismar yok	Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability.adobe · digital editions · CWE-787 Girişsiz RCE Bellek hatası	Kritik9,8	—	%11,2	17 Eki 2018

CVE-2018-17408
40Planlayın
Stack-based buffer overflows in Zahir Accounting Enterprise Plus 6 through build 10b allow remote attackers to execute arbitrary code via a
YüksekCVSS 7,8SilahlaştırılmışEPSS %18
- RCE
- Bellek hatası
zahiraccounting · zahir enterprise plus3 Eki 2018
CVE-2018-17552
64Bu hafta
SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigate-user cookie.
KritikCVSS 9,8SilahlaştırılmışEPSS %84
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
- SQL enjeksiyonu
naviwebs · navigate cms3 Eki 2018
CVE-2018-17553
59Planlayın
An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs Navigate CMS 2.8 allo
YüksekCVSS 8,8SilahlaştırılmışEPSS %78
- RCE
- Yol geçişi
- Dosya yükleme
naviwebs · navigate cms3 Eki 2018
CVE-2018-11784
46Planlayın
When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directo
OrtaCVSS 4,3Kavram kanıtıEPSS %97
- Kimlik doğrulamasız
- Açık yönlendirme
apache · tomcat4 Eki 2018
CVE-2018-0472
39İzleyin
Cisco IOS XE Software and Cisco ASA 5500-X Series Adaptive Security Appliance IPsec Denial of Service Vulnerability
YüksekCVSS 8,6İstismar yokEPSS %16
- Kimlik doğrulamasız
- Hizmet dışı bırakma
cisco · ios xe5 Eki 2018
CVE-2018-0476
27İzleyin
Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service Vulnerability
OrtaCVSS 5,9İstismar yokEPSS %13
- Kimlik doğrulamasız
- Hizmet dışı bırakma
cisco · ios xe5 Eki 2018
CVE-2018-15379
65Bu hafta
Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerability
KritikCVSS 9,8SilahlaştırılmışEPSS %86
- Girişsiz RCE
- Kimlik doğrulama atlatma
- Dosya yükleme
cisco · prime infrastructure5 Eki 2018
CVE-2018-17456
68Bu hafta
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows r
KritikCVSS 9,8SilahlaştırılmışEPSS %97
- Girişsiz RCE
git-scm · git6 Eki 2018
CVE-2012-6710
60Bu hafta
ext_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a password[]= (aka an empty array) in an actio
KritikCVSS 9,8SilahlaştırılmışEPSS %24
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
extplorer · extplorer7 Eki 2018
CVE-2018-17440
51Planlayın
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1.
KritikCVSS 9,8Kavram kanıtıEPSS %38
- Girişsiz RCE
- Dosya yükleme
- Gömülü kimlik bilgisi
dlink · central wifimanager8 Eki 2018
CVE-2018-17442
39İzleyin
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1.
YüksekCVSS 8,8Kavram kanıtıEPSS %14
- RCE
- Dosya yükleme
dlink · central wifimanager8 Eki 2018
CVE-2018-18065
31İzleyin
_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated att
OrtaCVSS 6,5Kavram kanıtıEPSS %17
- Bellek hatası
- Hizmet dışı bırakma
net-snmp · net-snmp8 Eki 2018
CVE-2018-18069
28İzleyin
process_forms in the WPML (aka sitepress-multilingual-cms) plugin through 3.6.3 for WordPress has XSS via any locale_file_name_ parameter (s
OrtaCVSS 6,1Kavram kanıtıEPSS %13
- Kimlik doğrulamasız
- XSS
wpml · wpml8 Eki 2018
CVE-2018-14649
43Planlayın
It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug shell mode.
KritikCVSS 9,8İstismar yokEPSS %11
- Girişsiz RCE
- Komut enjeksiyonu
redhat · enterprise linux desktop9 Eki 2018
CVE-2018-8265
37İzleyin
A remote code execution vulnerability exists in the way Microsoft Exchange software parses specially crafted email messages, aka "Microsoft
YüksekCVSS 7,8İstismar yokEPSS %19
- RCE
microsoft · exchange server10 Eki 2018
CVE-2018-8292
34İzleyin
An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NE
YüksekCVSS 7,5İstismar yokEPSS %14
- Kimlik doğrulamasız
- Bilgi sızıntısı
microsoft · asp.net core10 Eki 2018
CVE-2018-8413
45Planlayın
A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows Theme API Remote Code
YüksekCVSS 7,8Kavram kanıtıEPSS %46
- RCE
microsoft · windows 1010 Eki 2018
CVE-2018-8423
41Planlayın
A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution
YüksekCVSS 7,8İstismar yokEPSS %32
- RCE
- Bellek hatası
microsoft · windows 1010 Eki 2018
CVE-2018-8432
37İzleyin
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics
YüksekCVSS 7,8İstismar yokEPSS %19
- RCE
microsoft · excel viewer10 Eki 2018
CVE-2018-8453
82Hemen
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %70
- Yerel yetki yükseltme
microsoft · windows 10 150710 Eki 2018
CVE-2018-8460
36İzleyin
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor
YüksekCVSS 7,5İstismar yokEPSS %20
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer10 Eki 2018
CVE-2018-8472
28İzleyin
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowi
OrtaCVSS 5,5İstismar yokEPSS %18
- Bilgi sızıntısı
microsoft · windows 1010 Eki 2018
CVE-2018-8473
34İzleyin
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptio
YüksekCVSS 7,5İstismar yokEPSS %14
- Girişsiz RCE
- Bellek hatası
microsoft · chakracore10 Eki 2018
CVE-2018-8491
34İzleyin
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor
YüksekCVSS 7,5İstismar yokEPSS %12
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer10 Eki 2018
CVE-2018-8494
42Planlayın
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code
YüksekCVSS 8,8İstismar yokEPSS %22
- Girişsiz RCE
- XXE
microsoft · windows 1010 Eki 2018
CVE-2018-8495
45Planlayın
A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka "Windows Shell Remote Code Execution Vulnerabil
YüksekCVSS 7,5Kavram kanıtıEPSS %50
- Girişsiz RCE
- Yol geçişi
microsoft · windows 1010 Eki 2018
CVE-2018-8500
45Planlayın
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engin
KritikCVSS 9,8İstismar yokEPSS %18
- Girişsiz RCE
- Bellek hatası
microsoft · chakracore10 Eki 2018
CVE-2018-8501
41Planlayın
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protecte
YüksekCVSS 8,8İstismar yokEPSS %19
- Girişsiz RCE
microsoft · office10 Eki 2018
CVE-2018-8502
41Planlayın
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected Vie
YüksekCVSS 8,8İstismar yokEPSS %20
- Girişsiz RCE
microsoft · excel10 Eki 2018
CVE-2018-8503
34İzleyin
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C
YüksekCVSS 7,5İstismar yokEPSS %14
- Girişsiz RCE
- Bellek hatası
microsoft · chakracore10 Eki 2018
CVE-2018-8504
41Planlayın
A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View
YüksekCVSS 8,8İstismar yokEPSS %19
- Girişsiz RCE
microsoft · office10 Eki 2018
CVE-2018-8505
34İzleyin
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C
YüksekCVSS 7,5İstismar yokEPSS %14
- Girişsiz RCE
- Bellek hatası
microsoft · chakracore10 Eki 2018
CVE-2018-8509
34İzleyin
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptio
YüksekCVSS 7,5İstismar yokEPSS %12
- Girişsiz RCE
- Bellek hatası
microsoft · edge10 Eki 2018
CVE-2018-8510
34İzleyin
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C
YüksekCVSS 7,5İstismar yokEPSS %14
- Girişsiz RCE
- Bellek hatası
microsoft · chakracore10 Eki 2018
CVE-2018-8511
34İzleyin
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C
YüksekCVSS 7,5İstismar yokEPSS %14
- Girişsiz RCE
- Bellek hatası
microsoft · chakracore10 Eki 2018
CVE-2018-8513
34İzleyin
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C
YüksekCVSS 7,5İstismar yokEPSS %14
- Girişsiz RCE
- Bellek hatası
microsoft · chakracore10 Eki 2018
CVE-2018-8527
29İzleyin
An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XEL file containing
OrtaCVSS 5,5Kavram kanıtıEPSS %23
- XXE
microsoft · sql server management studio10 Eki 2018
CVE-2018-8531
40Planlayın
A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory,
YüksekCVSS 8,8İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · azure internet of things edge10 Eki 2018
CVE-2018-8532
29İzleyin
An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XMLA file containin
OrtaCVSS 5,5Kavram kanıtıEPSS %23
- XXE
microsoft · sql server management studio10 Eki 2018
CVE-2018-8533
29İzleyin
An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containin
OrtaCVSS 5,5Kavram kanıtıEPSS %23
- XXE
microsoft · sql server management studio10 Eki 2018
CVE-2018-8006
41Planlayın
An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp pa
OrtaCVSS 6,1Kavram kanıtıEPSS %55
- Kimlik doğrulamasız
- XSS
apache · activemq10 Eki 2018
CVE-2018-12596
46Planlayın
Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx
KritikCVSS 9,8Kavram kanıtıEPSS %22
- Kimlik doğrulamasız
episerver · ektron cms10 Eki 2018
CVE-2018-9206
68Bu hafta
Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0
KritikCVSS 9,8SilahlaştırılmışEPSS %97
- Kimlik doğrulamasız
- Dosya yükleme
jquery file upload project · jquery file upload11 Eki 2018
CVE-2018-17888
60Bu hafta
NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active
KritikCVSS 9,8SilahlaştırılmışEPSS %29
- Girişsiz RCE
- Zayıf kripto
nuuo · nuuo cms12 Eki 2018
CVE-2018-12832
34İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflo
YüksekCVSS 7,8İstismar yokEPSS %10
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12833
34İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflo
YüksekCVSS 7,8İstismar yokEPSS %10
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12836
34İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflo
YüksekCVSS 7,8İstismar yokEPSS %10
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12837
34İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflo
YüksekCVSS 7,8İstismar yokEPSS %10
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12838
26İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a stack overfl
OrtaCVSS 5,5İstismar yokEPSS %11
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12839
28İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
OrtaCVSS 5,5İstismar yokEPSS %19
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12847
34İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflo
YüksekCVSS 7,8İstismar yokEPSS %10
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12851
34İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflo
YüksekCVSS 7,8İstismar yokEPSS %10
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12857
27İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
OrtaCVSS 5,5İstismar yokEPSS %16
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12859
28İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
OrtaCVSS 5,5İstismar yokEPSS %19
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12860
35İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
YüksekCVSS 7,8İstismar yokEPSS %13
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12861
36İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
YüksekCVSS 7,8İstismar yokEPSS %15
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12862
35İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
YüksekCVSS 7,8İstismar yokEPSS %13
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12863
36İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an use after f
YüksekCVSS 7,8İstismar yokEPSS %16
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12864
36İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
YüksekCVSS 7,8İstismar yokEPSS %16
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12865
36İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
YüksekCVSS 7,8İstismar yokEPSS %15
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12866
27İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
OrtaCVSS 5,5İstismar yokEPSS %16
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12867
28İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
OrtaCVSS 5,5İstismar yokEPSS %19
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12869
28İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
OrtaCVSS 5,5İstismar yokEPSS %19
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12870
28İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
OrtaCVSS 5,5İstismar yokEPSS %19
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12871
28İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
OrtaCVSS 5,5İstismar yokEPSS %19
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12872
28İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
OrtaCVSS 5,5İstismar yokEPSS %19
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12873
27İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
OrtaCVSS 5,5İstismar yokEPSS %16
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12874
27İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
OrtaCVSS 5,5İstismar yokEPSS %16
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-12875
27İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
OrtaCVSS 5,5İstismar yokEPSS %16
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-15927
27İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
OrtaCVSS 5,5İstismar yokEPSS %16
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-15928
36İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
YüksekCVSS 7,8İstismar yokEPSS %15
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-15929
35İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
YüksekCVSS 7,8İstismar yokEPSS %13
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-15930
39İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted p
YüksekCVSS 7,8İstismar yokEPSS %27
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-15931
39İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted p
YüksekCVSS 7,8İstismar yokEPSS %27
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-15932
28İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
OrtaCVSS 5,5İstismar yokEPSS %18
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-15933
35İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
YüksekCVSS 7,8İstismar yokEPSS %13
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-15934
35İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
YüksekCVSS 7,8İstismar yokEPSS %13
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-15935
35İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
YüksekCVSS 7,8İstismar yokEPSS %13
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-15936
35İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
YüksekCVSS 7,8İstismar yokEPSS %13
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-15937
39İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted p
YüksekCVSS 7,8İstismar yokEPSS %27
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-15938
35İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
YüksekCVSS 7,8İstismar yokEPSS %13
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-15952
36İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
YüksekCVSS 7,8İstismar yokEPSS %15
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-15953
28İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
OrtaCVSS 5,5İstismar yokEPSS %19
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-15954
37İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
YüksekCVSS 7,8İstismar yokEPSS %19
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-15955
37İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
YüksekCVSS 7,8İstismar yokEPSS %19
- RCE
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-15956
27İzleyin
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-boun
OrtaCVSS 5,5İstismar yokEPSS %16
- Bellek hatası
adobe · acrobat dc12 Eki 2018
CVE-2018-18322
44Planlayın
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/index.php service_start
KritikCVSS 9,8Kavram kanıtıEPSS %15
- Girişsiz RCE
- Komut enjeksiyonu
control-webpanel · webpanel15 Eki 2018
CVE-2018-18323
51Planlayın
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=fil
YüksekCVSS 7,5Kavram kanıtıEPSS %70
- Kimlik doğrulamasız
- Yol geçişi
control-webpanel · webpanel15 Eki 2018
CVE-2018-17532
60Bu hafta
Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autolo
KritikCVSS 9,8İstismar yokEPSS %70
- Girişsiz RCE
- Komut enjeksiyonu
teltonika · rut900 firmware15 Eki 2018
CVE-2018-3167
26İzleyin
Vulnerability in the Application Management Pack for Oracle E-Business Suite component of Oracle E-Business Suite (subcomponent: User Monito
OrtaCVSS 5,3Kavram kanıtıEPSS %16
- Kimlik doğrulamasız
oracle · application management pack16 Eki 2018
CVE-2018-3191
58Planlayın
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).
KritikCVSS 9,8Kavram kanıtıEPSS %62
- Kimlik doğrulamasız
oracle · weblogic server16 Eki 2018
CVE-2018-3245
67Bu hafta
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).
KritikCVSS 9,8Kavram kanıtıEPSS %94
- Kimlik doğrulamasız
- Deserializasyon
oracle · weblogic server16 Eki 2018
CVE-2018-3252
48Planlayın
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).
KritikCVSS 9,8Kavram kanıtıEPSS %29
- Kimlik doğrulamasız
oracle · weblogic server16 Eki 2018
CVE-2018-3953
40Planlayın
Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04) are suscept
YüksekCVSS 7,2SilahlaştırılmışEPSS %13
- RCE
- Komut enjeksiyonu
linksys · e1200 firmware16 Eki 2018
CVE-2018-10933
64Bu hafta
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4.
KritikCVSS 9,1SilahlaştırılmışEPSS %91
- Kimlik doğrulamasız
libssh · libssh17 Eki 2018
CVE-2018-7076
43Planlayın
A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) prior to iMC PLAT 7.3 E0605P04.
KritikCVSS 9,8İstismar yokEPSS %12
- Girişsiz RCE
- Kimlik doğrulama atlatma
hp · intelligent management center17 Eki 2018
CVE-2018-10822
42Planlayın
Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512
YüksekCVSS 7,5Kavram kanıtıEPSS %39
- Kimlik doğrulamasız
- Yol geçişi
dlink · dwr-116 firmware17 Eki 2018
CVE-2018-10823
58Planlayın
An issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.
YüksekCVSS 8,8Kavram kanıtıEPSS %77
- RCE
- Komut enjeksiyonu
dlink · dwr-116 firmware17 Eki 2018
CVE-2018-10824
43Planlayın
An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through
KritikCVSS 9,8Kavram kanıtıEPSS %12
- Kimlik doğrulamasız
- Yol geçişi
dlink · dwr-116 firmware17 Eki 2018
CVE-2018-12813
42Planlayın
Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability.
KritikCVSS 9,8İstismar yokEPSS %11
- Girişsiz RCE
- Bellek hatası
adobe · digital editions17 Eki 2018