Skip to content
OpenAdvisories

Archive

5 May 2018

Vulnerabilities first published on this day (UTC), newest first.

← April 2018 2018 / May /5 June 2018 →
  1. 131
  2. 263
  3. 313
  4. 435
  5. 55
  6. 64
  7. 719
  8. 829
  9. 9105
  10. 1049
  11. 1125
  12. 127
  13. 134
  14. 1450
  15. 1537
  16. 1628
  17. 17139
  18. 1831
  19. 1938
  20. 204
  21. 2113
  22. 2263
  23. 2332
  24. 2455
  25. 2546
  26. 2617
  27. 27 
  28. 2811
  29. 2980
  30. 3030
  31. 31101
All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Unscored —
    CVE-2018-10723

    Directus 6.4.9 has a hardcoded admin password for the Admin account because of an INSERT statement in api/schema.sql.

  • Unscored —
    CVE-2018-10757 Public exploit

    CSP MySQL User Manager 2.3.1 allows SQL injection, and resultant Authentication Bypass, via a crafted username during a…

  • Unscored —
    CVE-2018-10758

    The edit/ URI in Datenstrom Yellow 0.7.3 has CSRF via a delete action that can delete articles.

  • Unscored —
    CVE-2018-10753

    Stack-based buffer overflow in the delayed_output function in music.c in abcm2ps through 8.13.20 allows remote attacker…

    abcm2ps abcm2ps Debian Ubuntu
  • Unscored —
    CVE-2018-10752 Public exploit

    The Tagregator plugin 0.6 for WordPress has stored XSS via the title field in an Add New action.