Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2018-10-10 CVE-2018-13802 Improper Privilege Management vulnerability in Siemens ROX II Firmware
A vulnerability has been identified in ROX II (All versions < V2.12.1).
network
low complexity
siemens CWE-269
7.2
2018-10-10 CVE-2018-13801 Improper Privilege Management vulnerability in Siemens ROX II Firmware
A vulnerability has been identified in ROX II (All versions < V2.12.1).
network
low complexity
siemens CWE-269
8.8
2018-10-10 CVE-2018-13800 Cross-Site Request Forgery (CSRF) vulnerability in Siemens Simatic S7-1200 V4 Firmware
A vulnerability has been identified in SIMATIC S7-1200 CPU family version 4 (All versions < V4.2.3).
network
low complexity
siemens CWE-352
7.3
2018-10-10 CVE-2018-18211 SQL Injection vulnerability in Pbootcms 1.2.1
PbootCMS 1.2.1 has SQL injection via the HTTP POST data to the api.php/cms/addform?fcode=1 URI.
network
high complexity
pbootcms CWE-89
8.1
2018-10-10 CVE-2018-12131 Incorrect Permission Assignment for Critical Resource vulnerability in Intel products
Permissions in the driver pack installers for Intel NVMe before version 4.0.0.1007 and Intel RSTe before version 4.7.0.2083 may allow an authenticated user to potentially escalate privilege via local access.
local
low complexity
intel CWE-732
7.8
2018-10-10 CVE-2018-8531 Out-of-bounds Write vulnerability in Microsoft products
A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT Device Client SDK Memory Corruption Vulnerability." This affects Hub Device Client SDK, Azure IoT Edge.
network
low complexity
microsoft CWE-787
8.8
2018-10-10 CVE-2018-8513 Out-of-bounds Write vulnerability in Microsoft Chakracore and Edge
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore.
network
high complexity
microsoft CWE-787
7.5
2018-10-10 CVE-2018-8511 Out-of-bounds Write vulnerability in Microsoft Chakracore and Edge
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore.
network
high complexity
microsoft CWE-787
7.5
2018-10-10 CVE-2018-8510 Out-of-bounds Write vulnerability in Microsoft Chakracore and Edge
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore.
network
high complexity
microsoft CWE-787
7.5
2018-10-10 CVE-2018-8509 Out-of-bounds Write vulnerability in Microsoft Edge
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge.
network
high complexity
microsoft CWE-787
7.5