|
246951
|
5.9 |
MEDIUM
Network
|
linux canonical debian
|
linux_kernel ubuntu_linux debian_linux
|
A flaw was found in the Linux kernel present since v4.0-rc1 and through v4.13-rc4. A crafted network packet sent remotely by an attacker may force the kernel to enter an infinite loop in the cipso_v4…
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2018-10938
|
2024-11-21 12:42 |
2018-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246952
|
4.3 |
MEDIUM
Network
|
rsa
|
archer
|
The WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 and 6.4.x prior to 6.4.0.1, contains a SQL injection vulnerability. A malicious user could …
|
CWE-89
SQL Injection
|
CVE-2018-11065
|
2024-11-21 12:42 |
2018-08-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246953
|
9.1 |
CRITICAL
Network
|
emc
|
rsa_security_analytics rsa_netwitness
|
RSA NetWitness Platform versions prior to 11.1.0.2 and RSA Security Analytics versions prior to 10.6.6 are vulnerable to a server-side template injection vulnerability due to insecure configuration o…
|
NVD-CWE-noinfo
|
CVE-2018-11061
|
2024-11-21 12:42 |
2018-08-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246954
|
6.5 |
MEDIUM
Network
|
canonical debian samba
|
ubuntu_linux debian_linux samba
|
The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker could use this flaw to extract confidential…
|
CWE-200
Information Exposure
|
CVE-2018-10919
|
2024-11-21 12:42 |
2018-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246955
|
6.5 |
MEDIUM
Network
|
canonical samba
|
ubuntu_linux samba
|
A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An authenticated attacker could use this flaw to crash a samba server in an Active Dir…
|
CWE-476
NULL Pointer Dereference
|
CVE-2018-10918
|
2024-11-21 12:42 |
2018-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246956
|
8.8 |
HIGH
Network
|
debian canonical samba redhat
|
debian_linux ubuntu_linux samba enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server virtualization_host virtualization
|
A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a sam…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-10858
|
2024-11-21 12:42 |
2018-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246957
|
8.8 |
HIGH
Network
|
redhat
|
ansible_tower
|
Ansible Tower before versions 3.1.8 and 3.2.6 is vulnerable to cross-site request forgery (CSRF) in awx/api/authentication.py. An attacker could exploit this by tricking already authenticated users i…
|
CWE-352
Origin Validation Error
|
CVE-2018-10884
|
2024-11-21 12:42 |
2018-08-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246958
|
5.6 |
MEDIUM
Local
|
gnu redhat canonical fedoraproject debian
|
gnutls enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server ubuntu_linux fedora debian_linux
|
A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found. An attacker could use a combination of "Just in Time" Prime+probe attack in…
|
-
|
CVE-2018-10846
|
2024-11-21 12:42 |
2018-08-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246959
|
5.9 |
MEDIUM
Network
|
gnu redhat canonical fedoraproject debian
|
gnutls enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server ubuntu_linux fedora debian_linux
|
It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plain text reco…
|
-
|
CVE-2018-10845
|
2024-11-21 12:42 |
2018-08-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246960
|
5.9 |
MEDIUM
Network
|
gnu redhat canonical fedoraproject debian
|
gnutls enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server ubuntu_linux fedora debian_linux
|
It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plaintext-recov…
|
-
|
CVE-2018-10844
|
2024-11-21 12:42 |
2018-08-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|