Skip to content
OpenAdvisories

Archive

15 April 2018

Vulnerabilities first published on this day (UTC), newest first.

← March 2018 2018 / April /15 May 2018 →
  1. 18
  2. 225
  3. 3170
  4. 4163
  5. 557
  6. 614
  7. 710
  8. 85
  9. 914
  10. 1050
  11. 1188
  12. 12112
  13. 1346
  14. 148
  15. 157
  16. 1641
  17. 1731
  18. 18282
  19. 19200
  20. 2036
  21. 2110
  22. 2210
  23. 2327
  24. 2497
  25. 2547
  26. 2636
  27. 2729
  28. 283
  29. 2915
  30. 3029
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Unscored —
    CVE-2018-10121

    plugins/box/pages/pages.admin.php in Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to th…

  • Unscored —
    CVE-2018-10119

    sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type…

    libreoffice libreoffice Debian Ubuntu
  • Unscored —
    CVE-2018-10120

    The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0…

    libreoffice libreoffice Debian Ubuntu
  • Unscored —
    CVE-2018-9153

    The plugin upload component in Z-BlogPHP 1.5.1 allows remote attackers to execute arbitrary PHP code via the app_id par…

  • Unscored —
    CVE-2018-9169

    Z-BlogPHP 1.5.1 has XSS via the zb_users/plugin/AppCentre/plugin_edit.php app_id parameter. The component must be acces…

  • Unscored —
    CVE-2018-10118 Public exploit

    Monstra CMS 3.0.4 has Stored XSS via the Name field on the Create New Page screen under the admin/index.php?id=pages UR…

  • Unscored —
    CVE-2018-10117

    An issue was discovered in idreamsoft iCMS V7.0.7. There is a CSRF vulnerability that can add an admin account via admi…