Archive
14 April 2018
Vulnerabilities first published on this day (UTC), newest first.
8 results · Feed
-
Unscored —
An issue was discovered in GEGL through 0.3.32. The process function in operations/external/ppm-load.c has unbounded me…
-
Unscored —
An issue was discovered in GEGL through 0.3.32. The gegl_buffer_iterate_read_simple function in buffer/gegl-buffer-acce…
-
Unscored —
An issue was discovered in GEGL through 0.3.32. The render_rectangle function in process/gegl-processor.c has unbounded…
-
Unscored —
An issue was discovered in GEGL through 0.3.32. The gegl_tile_backend_swap_constructed function in buffer/gegl-tile-bac…
-
Unscored —
Before WordPress 4.9.5, the version string was not escaped in the get_the_generator function, and could lead to XSS in …
-
Unscored —
Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPre…
-
Unscored —CVE-2018-10109 Public exploit
Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload…
-
Unscored —
Before WordPress 4.9.5, the redirection URL for the login page was not validated or sanitized if forced to use HTTPS.