Skip to content
OpenAdvisories

Archive

April 2018

Vulnerabilities first published in this month (UTC), newest first.

← March 2018 2018 / April May 2018 →
  1. 18
  2. 225
  3. 3170
  4. 4163
  5. 557
  6. 614
  7. 710
  8. 85
  9. 914
  10. 1050
  11. 1188
  12. 12112
  13. 1346
  14. 148
  15. 157
  16. 1641
  17. 1731
  18. 18282
  19. 19200
  20. 2036
  21. 2110
  22. 2210
  23. 2327
  24. 2497
  25. 2547
  26. 2636
  27. 2729
  28. 283
  29. 2915
  30. 3029
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2018-10366 Public exploit

    User Plugin for October CSS Allows XSS

    An issue was discovered in the Users (aka Front-end user management) plugin 1.4.5 for October CMS. XSS exists in the name field.

    rainlab/user-plugin Packagist
  • Medium 6.6
    CVE-2016-9587 Public exploit EPSS 17%

    Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems

    Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible…

    ansible ansible ansible ansible Debian Ubuntu Alpine PyPI
  • Medium 4.8
    CVE-2018-6905 Public exploit

    Typo3 XSS Vulnerability

    The page module in TYPO3 before 8.7.11, and 9.1.0, has XSS via $GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename'], as demonstrated by an admin entering a crafted site name during the installation process.

    typo3/cms Packagist