Security Vulnerabilities Published In September 2018

2018 : January February March April May June July August September October November December

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2013-4451	264		2018-09-21	2018-11-19	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
gitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via vectors involving world-writable permissions when creating (1) ~/.gitolite.rc, (2) ~/.gitolite, or (3) ~/repositories/gitolite-admin.git on fresh installs.
2	CVE-2013-7203	200	+Info	2018-09-21	2018-11-19	2.1	None	Local	Low	Not required	Partial	None	None
gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when running gitolite setup.
3	CVE-2015-8298	89	Exec Code Sql	2018-09-24	2018-11-13	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple SQL injection vulnerabilities in the login page in RXTEC RXAdmin UPDATE 06 / 2012 allow remote attackers to execute arbitrary SQL commands via the (1) loginpassword, (2) loginusername, (3) zusatzlicher, or (4) groupid parameter to index.htm, or the (5) rxtec cookie to index.htm.
4	CVE-2015-9266	22	+Priv Dir. Trav.	2018-09-05	2021-08-12	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly TOUGHSwitch) allows an unauthenticated attacker to upload and write arbitrary files using directory traversal techniques. An attacker can exploit this vulnerability to gain root privileges. This vulnerability is fixed in the following product versions (fixes released in July 2015, all prior versions are affected): airMAX AC 7.1.3; airMAX M (and airRouter) 5.6.2 XM/XW/TI, 5.5.11 XM/TI, and 5.5.10u2 XW; airGateway 1.1.5; airFiber AF24/AF24HD 2.2.1, AF5x 3.0.2.1, and AF5 2.2.1; airOS 4 XS2/XS5 4.0.4; and EdgeSwitch XP (formerly TOUGHSwitch) 1.3.2.
5	CVE-2016-0715	200	+Info	2018-09-11	2019-10-09	4.3	None	Remote	Medium	Not required	Partial	None	None
Pivotal Cloud Foundry Elastic Runtime version 1.4.0 through 1.4.5, 1.5.0 through 1.5.11 and 1.6.0 through 1.6.11 is vulnerable to a remote information disclosure. It was found that original mitigation configuration instructions provided as part of CVE-2016-0708 were incomplete and could leave PHP Buildpack, Staticfile Buildpack and potentially other custom Buildpack applications vulnerable to remote information disclosure. Affected applications use automated buildpack detection, serve files directly from the root of the application and have a buildpack that matched after the Java Buildpack in the system buildpack priority when Java Buildpack versions 2.0 through 3.4 were present.
6	CVE-2016-0750	502	Exec Code	2018-09-11	2019-10-09	6.5	None	Remote	Low	???	Partial	Partial	Partial
The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or conduct other attacks.
7	CVE-2016-7035	285	+Priv	2018-09-10	2019-10-09	7.2	None	Local	Low	Not required	Complete	Complete	Complete
An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface. An attacker with an unprivileged account on a Pacemaker node could use this flaw to, for example, force the Local Resource Manager daemon to execute a script as root and thereby gain root access on the machine.
8	CVE-2016-7041	22	Dir. Trav. Bypass	2018-09-10	2019-10-09	6.8	None	Remote	Low	???	Complete	None	None
Drools Workbench contains a path traversal vulnerability. The vulnerability allows a remote, authenticated attacker to bypass the directory restrictions and retrieve arbitrary files from the affected host.
9	CVE-2016-7047	200	+Info	2018-09-11	2019-10-09	4.0	None	Remote	Low	???	Partial	None	None
A flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2. A user with permissions to use the MiqReportResults capability within the API could potentially view data from other tenants or groups to which they should not have access.
10	CVE-2016-7056	320		2018-09-10	2019-10-09	2.1	None	Local	Low	Not required	Partial	None	None
A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys.
11	CVE-2016-7061	200	+Info	2018-09-10	2019-10-09	4.0	None	Remote	Low	???	Partial	None	None
An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4. It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information.
12	CVE-2016-7066	275		2018-09-11	2019-10-09	4.6	None	Local	Low	Not required	Partial	Partial	Partial
It was found that the improper default permissions on /tmp/auth directory in JBoss Enterprise Application Platform before 7.1.0 can allow any local user to connect to CLI and allow the user to execute any arbitrary operations.
13	CVE-2016-7067	352	CSRF	2018-09-10	2019-10-09	4.3	None	Remote	Medium	Not required	None	Partial	None
Monit before version 5.20.0 is vulnerable to a cross site request forgery attack. Successful exploitation will enable an attacker to disable/enable all monitoring for a particular host or disable/enable monitoring for a specific service.
14	CVE-2016-7068	400	DoS	2018-09-11	2019-10-09	7.8	None	Remote	Low	Not required	None	None	Complete
An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 3.7.4 and 4.0.4, allowing a remote, unauthenticated attacker to cause an abnormal CPU usage load on the PowerDNS server by sending crafted DNS queries, which might result in a partial denial of service if the system becomes overloaded. This issue is based on the fact that the PowerDNS server parses all records present in a query regardless of whether they are needed or even legitimate. A specially crafted query containing a large number of records can be used to take advantage of that behaviour.
15	CVE-2016-7069	20		2018-09-11	2019-10-09	5.0	None	Remote	Low	Not required	None	None	Partial
An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to the initial client. On a 32-bit system, the pointer arithmetic used when parsing the received response to remove that record might trigger an undefined behavior leading to a crash.
16	CVE-2016-7070	264	+Priv	2018-09-11	2019-10-09	5.2	None	Local Network	Low	???	Partial	Partial	Partial
A privilege escalation flaw was found in the Ansible Tower. When Tower before 3.0.3 deploys a PostgreSQL database, it incorrectly configures the trust level of postgres user. An attacker could use this vulnerability to gain admin level access to the database.
17	CVE-2016-7071	285		2018-09-10	2019-10-09	9.0	None	Remote	Low	???	Complete	Complete	Complete
It was found that the CloudForms before 5.6.2.2, and 5.7.0.7 did not properly apply permissions controls to VM IDs passed by users. A remote, authenticated attacker could use this flaw to execute arbitrary VMs on systems managed by CloudForms if they know the ID of the VM.
18	CVE-2016-7072	400	DoS	2018-09-10	2019-10-09	5.0	None	Remote	Low	Not required	None	None	Partial
An issue has been found in PowerDNS Authoritative Server before 3.4.11 and 4.0.2 allowing a remote, unauthenticated attacker to cause a denial of service by opening a large number of TCP connections to the web server. If the web server runs out of file descriptors, it triggers an exception and terminates the whole PowerDNS process. While it's more complicated for an unauthorized attacker to make the web server run out of file descriptors since its connection will be closed just after being accepted, it might still be possible.
19	CVE-2016-7073	20		2018-09-11	2019-10-09	4.3	None	Remote	Medium	Not required	None	Partial	None
An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in position of man-in-the-middle to alter the content of an AXFR because of insufficient validation of TSIG signatures. A missing check of the TSIG time and fudge values was found in AXFRRetriever, leading to a possible replay attack.
20	CVE-2016-7074	20		2018-09-11	2019-10-09	4.3	None	Remote	Medium	Not required	None	Partial	None
An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in position of man-in-the-middle to alter the content of an AXFR because of insufficient validation of TSIG signatures. A missing check that the TSIG record is the last one, leading to the possibility of parsing records that are not covered by the TSIG signature.
21	CVE-2016-7075	295	Bypass	2018-09-10	2019-10-09	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate certificate host name fields. An attacker could use this flaw to bypass authentication requirements by using a specially crafted X.509 certificate.
22	CVE-2016-7077	200	+Info	2018-09-10	2019-10-09	4.0	None	Remote	Low	???	Partial	None	None
foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper does not authorize options for associated objects. Unauthorized user can see names of such objects if their count is less than 6.
23	CVE-2016-7078	200	+Info	2018-09-10	2019-10-09	4.0	None	Remote	Low	???	Partial	None	None
foreman before version 1.15.0 is vulnerable to an information leak through organizations and locations feature. When a user is assigned _no_ organizations/locations, they are able to view all resources instead of none (mirroring an administrator's view). The user's actions are still limited by their assigned permissions, e.g. to control viewing, editing and deletion.
24	CVE-2016-9040	400	DoS	2018-09-07	2022-04-19	4.9	None	Local	Low	Not required	None	None	Complete
An exploitable denial of service exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when used with a 32 bit model. An attacker can cause a buffer to be allocated and never freed. When repeatedly exploit this will result in memory exhaustion, resulting in a full system denial of service.
25	CVE-2016-9044	77	Exec Code	2018-09-07	2022-04-19	9.0	None	Remote	Low	???	Complete	Complete	Complete
An exploitable command execution vulnerability exists in Information Builders WebFOCUS Business Intelligence Portal 8.1 . A specially crafted web parameter can cause a command injection. An authenticated attacker can send a crafted web request to trigger this vulnerability.
26	CVE-2016-9045	502	Exec Code	2018-09-17	2022-04-19	6.5	None	Remote	Low	???	Partial	Partial	Partial
A code execution vulnerability exists in ProcessMaker Enterprise Core 3.0.1.7-community. A specially crafted web request can cause unsafe deserialization potentially resulting in PHP code being executed. An attacker can send a crafted web parameter to trigger this vulnerability.
27	CVE-2016-9048	89	Sql	2018-09-10	2022-04-19	6.5	None	Remote	Low	???	Partial	Partial	Partial
Multiple exploitable SQL Injection vulnerabilities exists in ProcessMaker Enterprise Core 3.0.1.7-community. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing exfiltration of the database, user credentials and in certain setups access the underlying operating system.
28	CVE-2016-1000030	295	Exec Code	2018-09-05	2018-11-14	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Pidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of return values from gnutls_x509_crt_init() and gnutls_x509_crt_import() that can result in code execution. This attack appear to be exploitable via custom X.509 certificate from another client. This vulnerability appears to have been fixed in 2.11.0.
29	CVE-2016-1000232	20	DoS	2018-09-05	2018-10-31	5.0	None	Remote	Low	Not required	None	None	Partial
NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header parsing that can result in Denial of Service. This attack appear to be exploitable via Custom HTTP header passed by client. This vulnerability appears to have been fixed in 2.3.0.
30	CVE-2017-1082	20	Overflow	2018-09-12	2018-11-27	5.0	None	Remote	Low	Not required	None	None	Partial
In FreeBSD 11.x before 11.1-RELEASE and 10.x before 10.4-RELEASE, the qsort algorithm has a deterministic recursion pattern. Feeding a pathological input to the algorithm can lead to excessive stack usage and potential overflow. Applications that use qsort to handle large data set may crash if the input follows the pathological pattern.
31	CVE-2017-1083	119	Overflow	2018-09-12	2018-11-23	7.8	None	Remote	Low	Not required	None	None	Complete
In FreeBSD before 11.2-RELEASE, a stack guard-page is available but is disabled by default. This results in the possibility a poorly written process could be cause a stack overflow.
32	CVE-2017-1084	119	Overflow	2018-09-12	2018-11-23	7.8	None	Remote	Low	Not required	None	None	Complete
In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections afforded by the guard-page. This results in the possibility a poorly written process could be cause a stack overflow.
33	CVE-2017-1085	119	Exec Code Overflow	2018-09-12	2018-11-23	7.2	None	Local	Low	Not required	Complete	Complete	Complete
In FreeBSD before 11.2-RELEASE, an application which calls setrlimit() to increase RLIMIT_STACK may turn a read-only memory region below the stack into a read-write region. A specially crafted executable could be exploited to execute arbitrary code in the user context.
34	CVE-2017-1114	79	XSS	2018-09-07	2019-10-09	3.5	None	Remote	Medium	???	None	Partial	None
IBM Campaign 9.1, 9.1.2, and 10 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 121152.
35	CVE-2017-1115	74	Exec Code	2018-09-07	2019-10-09	3.5	None	Remote	Medium	???	None	Partial	None
IBM Campaign 9.1, 9.1.2, and 10 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 121153.
36	CVE-2017-1679	200	+Info	2018-09-10	2019-10-09	2.1	None	Local	Low	Not required	Partial	None	None
IBM OpenPages GRC Platform 7.2, 7.3, 7.4, and 8.0 could allow an attacker to obtain sensitive information from error log files. IBM X-Force ID: 134001.
37	CVE-2017-1794	400	DoS	2018-09-19	2019-10-09	6.0	None	Remote	Medium	???	Partial	Partial	Partial
IBM Tivoli Monitoring 6.2.3 through 6.2.3.5 and 6.3.0 through 6.3.0.7 are vulnerable to both TEPS user privilege escalation and possible denial of service due to unconstrained memory growth. IBM X-Force ID: 137039.
38	CVE-2017-2777	190	Overflow	2018-09-17	2022-04-19	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
An exploitable heap overflow vulnerability exists in the ipStringCreate function of Iceni Argus Version 6.6.05. A specially crafted pdf file can cause an integer overflow resulting in heap overflow. An attacker can send file to trigger this vulnerability.
39	CVE-2017-2792	119	Exec Code Overflow	2018-09-07	2022-04-19	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
An exploitable heap corruption vulnerability exists in the iBldDirInfo functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can provide a malicious xls file to trigger this vulnerability.
40	CVE-2017-2795	119	Exec Code Overflow	2018-09-07	2022-04-19	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
An exploitable heap corruption vulnerability exists in the Txo functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious XLS file to trigger this vulnerability.
41	CVE-2017-2854	120	Overflow	2018-09-17	2022-06-07	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue HTTP server.
42	CVE-2017-2855	120	Overflow	2018-09-19	2022-06-07	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue HTTP server.
43	CVE-2017-2856	120	Overflow	2018-09-17	2022-06-07	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue HTTP server.
44	CVE-2017-2857	120	Overflow	2018-09-17	2022-06-07	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue HTTP server.
45	CVE-2017-2872	287	Exec Code	2018-09-17	2022-06-07	9.0	None	Remote	Low	???	Complete	Complete	Complete
Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A HTTP request can allow for a user to perform a firmware upgrade using a crafted image. Before any firmware upgrades in this image are flashed to the device, binaries as well as arguments to shell commands contained in the image are executed with elevated privileges.
46	CVE-2017-2873	78		2018-09-19	2022-06-07	6.5	None	Remote	Low	???	Partial	Partial	Partial
An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SoftAP configuration resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
47	CVE-2017-2874			2018-09-17	2022-06-07	5.0	None	Remote	Low	Not required	Partial	None	None
An information disclosure vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10001 can allow for a user to retrieve sensitive information without authentication.
48	CVE-2017-2875	120	Overflow	2018-09-19	2022-06-07	6.4	None	Remote	Low	Not required	None	Partial	Partial
An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10000 can cause a buffer overflow resulting in overwriting arbitrary data.
49	CVE-2017-2876	120	Overflow	2018-09-19	2022-06-07	5.0	None	Remote	Low	Not required	None	Partial	None
An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10000 can cause a buffer overflow resulting in overwriting arbitrary data.
50	CVE-2017-2877	755		2018-09-19	2022-06-07	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A missing error check exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10001 could allow an attacker to reset the user accounts to factory defaults, without authentication.

Total number of vulnerabilities : 1174 Page : 1 (This Page)2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24