August 2018
1,057 CVEs published, −52% on July 2018 and −32% on August 2017. CISA added 0 to KEV.
2018 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2018 | January 2018: 1,715 CVEs | February 2018: 1,350 CVEs | March 2018: 2,306 CVEs | April 2018: no snapshot | May 2018: no snapshot | June 2018: 1,804 CVEs | July 2018: 2,225 CVEs | August 2018: 1,057 CVEs | September 2018: 1,209 CVEs | October 2018: 1,483 CVEs | November 2018: no snapshot | December 2018: 1,212 CVEs | 14,3619 of 12 months9/12 |
- Critical
- 16416% of the 1,014 with a CVSS score
- Added to CISA KEV
- 08 of this month's CVEs are in KEV, listed a median 1319.5 days after publication
- Vendors
- 5052,069 products
- Top weakness
- XSSCWE-79 · 144 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1DebianDebian Linux, Advanced Package Tool876nonenew
- 2Red HatEnterprise Linux Desktop, Enterprise Linux Workstation, Enterprise Linux Server849nonenew
- 3CanonicalUbuntu Linux, Ubuntu, Cloud-init656nonenew
- 4MicrosoftWindows 10, Windows 10 Servers, Windows Server 1709 (Server Core Installation)6224new
- 5Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Linux, Yum548nonenew
- 6HPCentralview Fraud Risk Management, 3par Service Provider, Aruba Clearpass Policy Manager5115nonenew
- 7Ооо «русбитех-астра»Astra Linux Special Edition, Astra Linux Common Edition, Astra Linux Special Edition Для «эльбрус»485nonenew
- 8Hewlett Packard EnterpriseHPE 3par Service Processors, HPE Centralview Fraud Risk Management, Aruba Clearpass4714nonenew
- 9MavenOrg.jenkins-ci.main:jenkins-core, Org.apache.tomcat.embed:tomcat-embed-core, De.tracetronic.jenkins.plugins:ecutest4221new
- 10IBMSecurity Identity Governance and Intelligence, Maximo Asset Management, Urbancode Deploy341nonenew
- 11GoogleChrome, Android, Android Studio324nonenew
- 12SamsungSth-eth-250 Firmware, Samsung, Smartthings Hub Sth-eth-2502814nonenew
- 13InsteonHub Firmware, Insteon, Hub 2245-222 Firmware2414nonenew
- 14PackagistSymfony/symfony, Pimcore/pimcore, Mantisbt/mantisbt2331new
- 15JenkinsJenkins, Tracetronic Ecu-test, Meliora Testlab220nonenew
- 16CiscoCisco Web Security Appliance, Web Security Appliance, SG300-28MP Firmware210nonenew
- 17Open-emrOpenemr203nonenew
- 18Apache Software FoundationApache Traffic Server, Apache Tomcat, Tomcat1911new
- 19OracleDatabase Server, Application Testing Suite, Core Rdbms1911new
- 20ApacheTraffic Server, Tomcat, Cayenne1811new
- 21RubygemsSafemode, Activerecord, Web-console182nonenew
- 22[unknown]Gnutls, Kernel, Ttembed180nonenew
- 23Kaspersky LabKraftway, Eltex Esp-200, Zipato Zipabox Smart Home Controller144nonenew
- 24Novell Inc.Opensuse Leap, Suse Linux Enterprise Server For Sap Applications, Suse Linux Enterprise Server143nonenew
- 25AdobeFlash Player, Creative Cloud, Acrobat Dc136nonenew
Severity
How this month's CVEs score on CVSS; 43 have no score yet. Severity is not exploitation.
- Critical164
- High417
- Medium414
- Low19
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-79XSS144
- CWE-200Information Exposure69
- CWE-119Memory Buffer Bounds62
- CWE-20Improper Input Validation62
- CWE-787Out-of-bounds Write50
- CWE-352CSRF48
- CWE-22Path Traversal35
- CWE-89SQL Injection34
- CWE-287Improper Authentication28
- CWE-125Out-of-bounds Read21
- CWE-798Hard-coded Credentials21
- CWE-400Resource Consumption20
- CWE-611XXE19
- CWE-78OS Command Injection19
- CWE-476NULL Pointer Dereference18
- CWE-732Incorrect Permissions17
- CWE-120Buffer Overflow16
- CWE-502Deserialization16
- CWE-94Code Injection15
- CWE-190Integer Overflow14
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems24817% of sector-tagged CVEs
- OSS Libraries21515% of sector-tagged CVEs
- Enterprise Software21314% of sector-tagged CVEs
- Web & CMS Plugins1349% of sector-tagged CVEs
- Networking Infrastructure1198% of sector-tagged CVEs
- ICS / OT / IoT846% of sector-tagged CVEs
- Security Products735% of sector-tagged CVEs
- Mobile Apps654% of sector-tagged CVEs
- Hardware Firmware614% of sector-tagged CVEs
- Not yet classified77
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 79XSS | 200Information Exposure | 119Memory Buffer Bounds | 20Improper Input Validation | 787Out-of-bounds Write | 352CSRF | 22Path Traversal | 89SQL Injection | 287Improper Authentication | 125Out-of-bounds Read |
|---|---|---|---|---|---|---|---|---|---|---|
| Debian | 3 | 6 | 13 | 9 | 4 | 2 | 1 | 5 | ||
| Red Hat | 4 | 4 | 12 | 11 | 2 | 1 | 3 | 1 | 2 | 7 |
| Canonical | 3 | 4 | 5 | 3 | 1 | 5 | ||||
| Microsoft | 8 | 4 | 16 | 1 | ||||||
| Сообщество Свободного Программного Обеспечения | 5 | 3 | 7 | 3 | 3 | 5 | ||||
| Microsoft Corp | 1 | 7 | 2 | 14 | 1 | |||||
| HP | 9 | 3 | 4 | 1 | 1 | 1 | 2 | 2 | ||
| Ооо «русбитех-астра» | 5 | 3 | 8 | 3 | 2 | 1 | 5 | |||
| Hewlett Packard Enterprise | 9 | 3 | 4 | 2 | 2 | 2 | ||||
| Maven | 2 | 8 | 2 | 1 | 3 | |||||
| IBM | 5 | 9 | 2 | 2 | 2 | 1 | ||||
| 2 | 9 | 4 | 1 |
CVEs published in August 2018
19 vulnerabilities from this month that were exploited in the wild (CISA KEV), covered in the news, explained on cve.tools or searched for. Known-exploited first, then by CVSS.
- CVE-2018-14933upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command.KEV9.8
- CVE-2018-14847MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability...KEV9.1
- CVE-2018-8414A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows 10 Servers, ...KEV8.8
- CVE-2018-11776Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then...KEV8.1
- CVE-2018-15133In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value. This involves the d...KEV8.1
- CVE-2018-8405An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerabil...KEV7.8
- CVE-2018-8406An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerabil...KEV7.8
- CVE-2018-8373A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affect...KEV7.5
- CVE-2018-10618Davolink DVW-3200N all version prior to Version 1.00.06. The device generates a weak password hash that is easily cracked, allowing a remote attacker to obtain the password for the device.9.8
- CVE-2018-11509ASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin username and password as it does for the NAS itself for applications that are installed from the online repository. This may allow an attacke...9.8
- CVE-2018-11511The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3 has a SQL injection vulnerability that affects the 'album_id' or 'scope' parameter via a photo-gallery/api/alb...9.8
- CVE-2018-14007Citrix XenServer 7.1 and newer allows Directory Traversal.9.8
- CVE-2016-8526Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to an XML external entities (XXE). XXEs are a way to permit XML parsers to access storage that exist on external systems. ...8.8
- CVE-2018-3924An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.5096. A specially crafted PDF document can trigger a previously freed ob...8.8
- CVE-2018-15685GitHub Electron 1.7.15, 1.8.7, 2.0.7, and 3.0.0-beta.6, in certain scenarios involving IFRAME elements and "nativeWindowOpen: true" or "sandbox: true" options, is affected by a WebPreferences vulne...8.1
- CVE-2018-11492ASUS HG100 devices allow denial of service via an IPv4 packet flood.7.5
- CVE-2018-15138Ericsson-LG iPECS NMS 30M allows directory traversal via ipecs-cm/download?filename=../ URIs.7.5
- CVE-2018-7092A potential security vulnerability has been identified in HPE Intelligent Management Center Platform (IMC Plat) 7.3 E0506P09. The vulnerability could be remotely exploited to allow for remote direc...7.5
- CVE-2018-16133Cybrotech CyBroHttpServer 1.0.3 allows Directory Traversal via a ../ in the URI.5.3