Vulnerabilities > Critical

DATE CVE VULNERABILITY TITLE RISK
2018-03-13 CVE-2018-1000123 Information Exposure Through Log Files vulnerability in Ionicframework IOS Keychain 1.0.0/2.0.0
Ionic Team Cordova plugin iOS Keychain version before commit 18233ca25dfa92cca018b9c0935f43f78fd77fbf contains an Information Exposure Through Log Files (CWE-532) vulnerability in CDVKeychain.m that can result in login, password and other sensitive data leakage.
network
low complexity
ionicframework CWE-532
critical
 9.8
9.8
2018-03-13 CVE-2018-7750 Improper Authentication vulnerability in multiple products
transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open.
network
low complexity
paramiko redhat debian CWE-287
critical
 9.8
9.8
2018-03-13 CVE-2018-6300 Unspecified vulnerability in Hanwha-Security Snh-V6410Pn Firmware and Snh-V6410Pnw Firmware
Remote password change in Hanwha Techwin Smartcams
network
low complexity
hanwha-security
critical
 9.8
9.8
2018-03-13 CVE-2018-6299 Improper Authentication vulnerability in Hanwha-Security Snh-V6410Pn Firmware and Snh-V6410Pnw Firmware
Authentication bypass in Hanwha Techwin Smartcams
network
low complexity
hanwha-security CWE-287
critical
 9.8
9.8
2018-03-13 CVE-2018-6298 Improper Input Validation vulnerability in Hanwha-Security Snh-V6410Pn Firmware and Snh-V6410Pnw Firmware
Remote code execution in Hanwha Techwin Smartcams
network
low complexity
hanwha-security CWE-20
critical
 9.8
9.8
2018-03-13 CVE-2018-6297 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Hanwha-Security Snh-V6410Pn Firmware and Snh-V6410Pnw Firmware
Buffer overflow in Hanwha Techwin Smartcams
network
low complexity
hanwha-security CWE-119
critical
 9.8
9.8
2018-03-13 CVE-2018-6295 Cleartext Transmission of Sensitive Information vulnerability in Hanwha-Security Snh-V6410Pn Firmware and Snh-V6410Pnw Firmware
Unencrypted way of remote control and communications in Hanwha Techwin Smartcams
network
low complexity
hanwha-security CWE-319
critical
 9.8
9.8
2018-03-13 CVE-2018-6294 Improper Authentication vulnerability in Hanwha-Security Snh-V6410Pn Firmware and Snh-V6410Pnw Firmware
Unsecured way of firmware update in Hanwha Techwin Smartcams
network
low complexity
hanwha-security CWE-287
critical
 9.8
9.8
2018-03-13 CVE-2017-1002101 Link Following vulnerability in Kubernetes
In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host's filesystem.
network
low complexity
kubernetes CWE-59
critical
 9.6
9.6
2018-03-13 CVE-2018-1000076 Improper Verification of Cryptographic Signature vulnerability in multiple products
RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Improper Verification of Cryptographic Signature vulnerability in package.rb that can result in a mis-signed gem could be installed, as the tarball would contain multiple gem signatures..
network
low complexity
rubygems debian CWE-347
critical
 9.8
9.8