Skip to content
OpenAdvisories

Archive

21 February 2018

Vulnerabilities first published on this day (UTC), newest first.

← January 2018 2018 / February /21 March 2018 →
  1. 128
  2. 266
  3. 39
  4. 46
  5. 540
  6. 664
  7. 761
  8. 874
  9. 977
  10. 10 
  11. 113
  12. 1254
  13. 1329
  14. 1438
  15. 15340
  16. 1622
  17. 1731
  18. 1811
  19. 1943
  20. 2028
  21. 2147
  22. 2248
  23. 2359
  24. 2411
  25. 256
  26. 2630
  27. 2777
  28. 2828
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.4
    CVE-2018-7302

    Tiki Wiki CMS XSS Vulnerability

    Tiki 17.1 allows upload of a .PNG file that actually has SVG content, leading to XSS.

    tikiwiki/tiki-manager Packagist
  • Medium —
    CVE-2017-12161

    Moderate severity vulnerability that affects org.keycloak:keycloak-core

    It was found that keycloak before 3.4.2 final would permit misuse of a client-side /etc/hosts entry to spoof a URL in a password reset request. An attacker could use this flaw to craft a malicious password reset request and gain a valid reset token, leading t…

    Red Hat keycloak org.keycloak:keycloak-core Maven
  • Medium 5.4
    CVE-2018-7261

    radiant vulnerable to Cross-site Scripting

    There are multiple Persistent XSS vulnerabilities in Radiant CMS 1.1.4. They affect Personal Preferences (Name and Username) and Configuration (Site Title, Dev Site Domain, Page Parts, and Page Fields).

    radiant RubyGems
  • Medium 5.4
    CVE-2018-7260

    phpMyAdmin Cross-site scripting (XSS) vulnerability in central columns feature

    Cross-site scripting (XSS) vulnerability in db_central_columns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin Debian Ubuntu Packagist
  • Medium 6.1
    CVE-2018-7274

    Yab Quarx persistent cross-site scripting vulnerability

    Yab Quarx through 2.4.3 is prone to multiple persistent cross-site scripting vulnerabilities: Blog (Title), FAQ (Question), Pages (Title), Widgets (Name), and Menus (Name).

    yab/quarx Packagist