Skip to content
OpenAdvisories

Archive

14 April 2018

Vulnerabilities first published on this day (UTC), newest first.

8 results · Feed

  • Unscored —

    An issue was discovered in GEGL through 0.3.32. The process function in operations/external/ppm-load.c has unbounded me…

  • Unscored —

    An issue was discovered in GEGL through 0.3.32. The gegl_buffer_iterate_read_simple function in buffer/gegl-buffer-acce…

  • Unscored —

    An issue was discovered in GEGL through 0.3.32. The render_rectangle function in process/gegl-processor.c has unbounded…

  • Unscored —

    An issue was discovered in GEGL through 0.3.32. The gegl_tile_backend_swap_constructed function in buffer/gegl-tile-bac…

  • Unscored —

    Before WordPress 4.9.5, the version string was not escaped in the get_the_generator function, and could lead to XSS in …

  • Unscored —

    Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPre…

  • Unscored —
    CVE-2018-10109 Public exploit

    Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload…

  • Unscored —

    Before WordPress 4.9.5, the redirection URL for the login page was not validated or sanitized if forced to use HTTPS.