Skip to content
OpenAdvisories

Archive

21 April 2018

Vulnerabilities first published on this day (UTC), newest first.

← March 2018 2018 / April /21 May 2018 →
  1. 18
  2. 225
  3. 3170
  4. 4163
  5. 557
  6. 614
  7. 710
  8. 85
  9. 914
  10. 1050
  11. 1188
  12. 12112
  13. 1346
  14. 148
  15. 157
  16. 1641
  17. 1731
  18. 18282
  19. 19200
  20. 2036
  21. 2110
  22. 2210
  23. 2327
  24. 2497
  25. 2547
  26. 2636
  27. 2729
  28. 283
  29. 2915
  30. 3029
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Unscored —
    CVE-2018-10126

    ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a ce…

    tiff libjpeg-turbo libjpeg6b libjpeg9 Debian Ubuntu
  • Unscored —
    CVE-2017-15640

    app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter.

  • Unscored —
    CVE-2018-10284

    Adaltech G-Ticket v70 EME104 has SQL Injection via the mobile-loja/mensagem.asp eve_cod parameter.

  • Unscored —
    CVE-2018-10283

    CliqueMania loja virtual 14 has SQL Injection via the patch/remote.php id parameter in a recomendar action.

  • Unscored —
    CVE-2018-10265

    An issue was discovered in HongCMS v3.0.0. There is a CSRF vulnerability that can add an administrator account via the …

  • Unscored —
    CVE-2018-10266

    BEESCMS 4.0 has a CSRF vulnerability to add an administrator account via the admin/admin_admin.php?nav=list_admin_user&…

  • Unscored —
    CVE-2018-10267

    WTCMS 1.0 has a CSRF vulnerability to add an administrator account via the index.php?admin&m=user&a=add_post URI.

  • Unscored —
    CVE-2018-10268

    An issue was discovered in FastAdmin V1.0.0.20180417_beta. There is XSS via the application\api\controller\User.php ava…

  • Unscored —
    CVE-2018-10254

    Netwide Assembler (NASM) 2.13 has a stack-based buffer over-read in the disasm function of the disasm/disasm.c file. Re…

    nasm nasm Debian Ubuntu
  • Unscored —
    CVE-2018-10253 Public exploit

    Paessler PRTG Network Monitor before 18.1.39.1648 mishandles stack memory during unspecified API calls.