Google Security Research Google Chrome V8 - Object Allocation Size Integer Overflow
remote multiple CVE-2018-6065

Hector Monsegur JasperReports - (Authenticated) File Read
webapps multiple CVE-2018-5430

vpnmentor GPON Routers - Authentication Bypass / Command Injection
remote hardware CVE-2018-10562;CVE-2018-10561

Alex Inführ Adobe Reader PDF - Client Side Request Injection
local windows

straight_blast Exim < 4.90.1 - 'base64d' Remote Code Execution
remote linux 25 CVE-2018-6789

Google Security Research WebKit - 'WebCore::jsElementScrollHeightGetter' Use-After-Free
dos multiple CVE-2018-4200

Marwan Shamel Easy MPEG to DVD Burner 1.7.11 - Local Buffer Overflow (SEH)
local windows

Richard Davy LibreOffice/Open Office - '.odt' Information Disclosure
local windows CVE-2018-10583

SecuriTeam Linux Kernel < 4.17-rc1 - 'AF_LLC' Double Free
dos linux

Google Security Research Apple macOS/iOS - ReportCrash mach port Replacement due to Failure to Respect MIG Ownership Rules
dos multiple CVE-2018-4206

Google Security Research Apple macOS 10.13.2 - Double mach_port_deallocate in kextd due to Failure to Comply with MIG Ownership Rules
dos macos CVE-2018-4139

Jared Arave Nagios XI 5.2.6 < 5.2.9 / 5.3 / 5.4 - Chained Remote Root
webapps php CVE-2018-8736;CVE-2018-8735;CVE-2018-8734;CVE-2018-8733

Jared Arave Nagios XI 5.2.6 < 5.2.9 / 5.3 / 5.4 - Chained Remote Root
webapps php CVE-2018-8736;CVE-2018-8735;CVE-2018-8734;CVE-2018-8733

Sairam Jetty WordPress Plugin Form Maker 1.12.20 - CSV Injection
webapps php CVE-2018-10504

SixP4ck3r Drupal < 7.58 - 'Drupalgeddon3' (Authenticated) Remote Code (Metasploit)
webapps php CVE-2018-7602

SixP4ck3r Drupal < 7.58 - 'Drupalgeddon3' (Authenticated) Remote Code (Metasploit)
webapps php CVE-2018-7602