Skip to content
OpenAdvisories

Archive

11 April 2018

Vulnerabilities first published on this day (UTC), newest first.

← March 2018 2018 / April /11 May 2018 →
  1. 18
  2. 225
  3. 3170
  4. 4163
  5. 557
  6. 614
  7. 710
  8. 85
  9. 914
  10. 1050
  11. 1188
  12. 12112
  13. 1346
  14. 148
  15. 157
  16. 1641
  17. 1731
  18. 18282
  19. 19200
  20. 2036
  21. 2110
  22. 2210
  23. 2327
  24. 2497
  25. 2547
  26. 2636
  27. 2729
  28. 283
  29. 2915
  30. 3029
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.3
    CVE-2018-0019

    Junos: Denial of service vulnerability in SNMP MIB-II subagent daemon (mib2d).

    A vulnerability in Junos OS SNMP MIB-II subagent daemon (mib2d) may allow a remote network based attacker to cause the mib2d process to crash resulting in a denial of service condition (DoS) for the SNMP subsystem. While a mib2d process crash can disrupt the …

    Juniper Networks Junos OS Network devices
  • Medium 5.5
    CVE-2018-0023

    Junos Snapshot Administrator (JSNAPy) world writeable default configuration file permission

    JSNAPy is an open source python version of Junos Snapshot Administrator developed by Juniper available through github. The default configuration and sample files of JSNAPy automation tool versions prior to 1.3.0 are created world writable. This insecure file …

    Juniper Networks Junos Snapshot Administrator (JSNAPy) jsnapy Network devices PyPI
  • Medium 6.1
    CVE-2018-1483

    IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…

    IBM WebSphere Portal
  • Medium 5.4
    CVE-2017-2599

    Incorrect Authorization in Jenkins

    Jenkins before versions 2.44 and 2.32.2 is vulnerable to an insufficient permission check. This allows users with permissions to create new items (e.g. jobs) to overwrite existing items they don't have access to (SECURITY-321).

    [UNKNOWN] jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • Medium 5.4
    CVE-2017-18259

    Dolibarr ERP and CRM contain XSS Vulnerability

    Dolibarr ERP/CRM is affected by stored Cross-Site Scripting (XSS) in versions through 7.0.0.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Medium 5.4
    CVE-2017-9838

    Dolibarr Cross-Site Scripting (XSS) vulnerability

    Dolibarr ERP/CRM is affected by multiple reflected Cross-Site Scripting (XSS) vulnerabilities in versions before 5.0.4: index.php (leftmenu parameter), core/ajax/box.php (PATH_INFO), product/stats/card.php (type parameter), holiday/list.php (month_create, mon…

    dolibarr dolibarr/dolibarr Ubuntu Packagist