Skip to content
OpenAdvisories

Archive

5 March 2018

Vulnerabilities first published on this day (UTC), newest first.

← February 2018 2018 / March /5 April 2018 →
  1. 153
  2. 246
  3. 3 
  4. 412
  5. 551
  6. 658
  7. 724
  8. 859
  9. 9104
  10. 104
  11. 115
  12. 1247
  13. 1372
  14. 14144
  15. 1553
  16. 1642
  17. 173
  18. 189
  19. 1930
  20. 2061
  21. 2132
  22. 2267
  23. 2329
  24. 2413
  25. 2535
  26. 2651
  27. 2766
  28. 2856
  29. 2933
  30. 3071
  31. 319
All Critical High Medium Low Exploited only Public exploit

51 results · Feed

  • Unscored —
    CVE-2018-0491 Public exploit EPSS 15%

    A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause a denial of s…

    tor tor tor Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-0490

    An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10. The directory-aut…

    tor tor tor Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-1000115 Public exploit EPSS 88%

    Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vul…

    memcached memcached memcached Debian Ubuntu Alpine
  • High 7.5
    CVE-2018-7644

    SimpleSAMLphp Improper Verification of Cryptographic Signature

    The XmlSecLibs library as used in the saml2 library in SimpleSAMLphp before 1.15.3 incorrectly verifies signatures on SAML assertions, allowing a remote attacker to construct a crafted SAML assertion on behalf of an Identity Provider that would pass as crypto…

    simplesamlphp simplesamlphp simplesamlphp/saml2 Debian Ubuntu Packagist
  • High 7.5
    CVE-2018-1316

    Apache ODE Path Traversal vulnerability

    The ODE process deployment web service was sensible to deployment messages with forged names. Using a path for the name was allowing directory traversal, resulting in the potential writing of files under unwanted locations, the overwriting of existing files o…

    Apache Software Foundation Apache ODE org.apache.ode:ode Maven
  • Unscored —
    CVE-2018-7665 Public exploit EPSS 16%

    An issue was discovered in ClipBucket before 4.0.0 Release 4902. A malicious file can be uploaded via the name paramete…

  • Unscored —
    CVE-2018-7668

    TestLink through 1.9.16 allows remote attackers to read arbitrary attachments via a modified ID field to /lib/attachmen…

  • Unscored —
    CVE-2018-7664

    An issue was discovered in ClipBucket before 4.0.0 Release 4902. Any OS commands can be injected via shell metacharacte…

  • Medium —
    CVE-2018-7667

    vrana/adminer vulnerable to SSRF by connecting to privileged ports

    Adminer through 4.3.1 has SSRF via the server parameter.

    adminer adminer vrana/adminer Debian Ubuntu Packagist
  • Unscored —
    CVE-2018-7666

    An issue was discovered in ClipBucket before 4.0.0 Release 4902. SQL injection vulnerabilities exist in the actions/vot…

  • Unscored —
    CVE-2018-7663

    An issue was discovered in resources/views/layouts/app.blade.php in Voten.co before 2017-08-25. An unescaped template l…