Design/Logic Flaw

Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Incorrect Access Control vulnerability in XMLRPC API /cobblerapi that can result in Privilege escalation, data manipulation or...

CVE-2018-1000225

Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Cross Site Scripting XSS vulnerability in cobbler-web that can result in Privilege escalation to admin.. This attack appear to...

CVE-2018-1000226

Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Incorrect Access Control vulnerability in XMLRPC API /cobblerapi that can result in Privilege escalation, data manipulation or...

CVE-2018-1000225

CVE-2018-1000225 is an XSS vulnerability in Cobbler’s web interface (cobbler-web) that can escalate privileges to admin. Technical details in the sources indicate the issue affects Cobbler versions at least as early as 2.0.0+ and is present in 2.6.11+ according to the description. The exploit pat...

Microsoft Windows: Allow network connectivity during connected-standby (on battery)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnetworkactivitystandbybattery.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Allow network connectivity during connected-standby on battery Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH...

Microsoft Windows: Allow network connectivity during connected-standby (plugged in)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnetworkactivitystandbyplugged.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Allow network connectivity during connected-standby plugged in Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH...

Design/Logic Flaw

FFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array access vulnerabilities in the mms protocol that can result in attackers accessing out of bound data. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been...

CVE-2018-1999010

FFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array access vulnerabilities in the mms protocol that can result in attackers accessing out of bound data. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been...

CVE-2018-1999010

FFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array access vulnerabilities in the mms protocol that can result in attackers accessing out of bound data. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been...

CVE-2018-1999010

FFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array access vulnerabilities in the mms protocol that can result in attackers accessing out of bound data. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been...

July 18, 2018—KB4338831 (Preview of Monthly Rollup)

None None...

CVE-2018-1000617

Atlassian Floodlight Atlassian Floodlight Controller version 1.2 and earlier versions contains a Denial of Service vulnerability in Forwarding module that can result in Improper type cast in Forwarding module allows remote attackers to cause a DoSthread crash.. This attack appear to be exploitabl...

CVE-2018-1000616

ONOS ONOS controller version 1.13.1 and earlier contains a XML External Entity XXE vulnerability in onos\drivers\utilities\src\main\java\org\onosproject\drivers\utilities\XmlConfigParser.java loadxml that can result in An adversary can remotely launch XXE attacks on ONOS controller via an...

Xxe

ONOS ONOS controller version 1.13.1 and earlier contains a XML External Entity XXE vulnerability in onos\drivers\utilities\src\main\java\org\onosproject\drivers\utilities\XmlConfigParser.java loadxml that can result in An adversary can remotely launch XXE attacks on ONOS controller via an...

Input validation

Atlassian Floodlight Atlassian Floodlight Controller version 1.2 and earlier versions contains a Denial of Service vulnerability in Forwarding module that can result in Improper type cast in Forwarding module allows remote attackers to cause a DoSthread crash.. This attack appear to be exploitabl...

CVE-2018-1000616

ONOS ONOS controller version 1.13.1 and earlier contains a XML External Entity XXE vulnerability in onos\drivers\utilities\src\main\java\org\onosproject\drivers\utilities\XmlConfigParser.java loadxml that can result in An adversary can remotely launch XXE attacks on ONOS controller via an...

CVE-2018-1000616

CVE-2018-1000616 affects ONOS controller versions 1.13.1 and earlier. The vulnerability is a XML External Entity (XXE) flaw in XmlConfigParser.loadxml() that can enable remote XXE attacks over network via an OpenConfig Terminal Device. Multiple sources (including Red Hat, Veracode, OSV, NVD/CVE r...

EulerOS 2.0 SP3 : memcached (EulerOS-SA-2018-1177)

According to the version of the memcached package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - memcached version prior to 1.4.37 contains an Integer Overflow vulnerability in items.c:itemfree that can result in data corruption and deadlocks...

CVE-2018-1000517

BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflow vulnerability in Busybox wget that can result in heap buffer overflow. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been...

CVE-2018-1000539

Nov json-jwt version = 0.5.0 && 1.9.4 contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability in Decryption of AES-GCM encrypted JSON Web Tokens that can result in Attacker can forge a authentication tag. This attack appear to be exploitable via network connectivity. Th...