Skip to content
OpenAdvisories

Archive

7 May 2018

Vulnerabilities first published on this day (UTC), newest first.

← April 2018 2018 / May /7 June 2018 →
  1. 131
  2. 263
  3. 313
  4. 435
  5. 55
  6. 64
  7. 719
  8. 829
  9. 9105
  10. 1049
  11. 1125
  12. 127
  13. 134
  14. 1450
  15. 1537
  16. 1628
  17. 17139
  18. 1831
  19. 1938
  20. 204
  21. 2113
  22. 2263
  23. 2332
  24. 2455
  25. 2546
  26. 2617
  27. 27 
  28. 2811
  29. 2980
  30. 3030
  31. 31101
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • High 8.1
    CVE-2018-1256

    Issuer validation regression in Spring Cloud SSO Connector

    Spring Cloud SSO Connector, version 2.1.2, contains a regression which disables issuer validation in resource servers that are not bound to the SSO service. In PCF deployments with multiple SSO service plans, a remote attacker can authenticate to unbound reso…

    Pivotal Spring Cloud SSO Connector io.pivotal.spring.cloud:spring-cloud-sso-connector Maven
  • Unscored —
    CVE-2018-10796

    In 2345 Security Guard 3.7, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD…

  • Unscored —
    CVE-2018-10799

    A hang issue was discovered in Brave before 0.14.0 (on, for example, Linux). This vulnerability is caused by the mishan…

  • Unscored —
    CVE-2018-10798

    A hang issue was discovered in Brave before 0.14.0 (on, for example, Linux). The vulnerability is caused by mishandling…

  • Unscored —
    CVE-2017-17539

    The presence of a hardcoded account in Fortinet FortiWLC 7.0.11 and earlier allows attackers to gain unauthorized read/…

    Fortinet FortiWLC Network devices
  • Unscored —
    CVE-2017-17540

    The presence of a hardcoded account in Fortinet FortiWLC 8.3.3 allows attackers to gain unauthorized read/write access …

    Fortinet FortiWLC Network devices
  • Unscored —
    CVE-2018-1413

    IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…

    IBM Cognos Analytics
  • Medium 5.3
    CVE-2018-1313 Public exploit

    Improper Access Control in Apache Derby

    In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control. If the Derby Network Server is not running with a Java Secur…

    Apache Software Foundation Apache Derby org.apache.derby:derby derby Debian Ubuntu Maven
  • Unscored —
    CVE-2018-10795

    Liferay 6.2.x and before has an FCKeditor configuration that allows an attacker to upload or transfer files of dangerou…

  • Unscored —
    CVE-2018-10775

    NULL pointer dereference in the _fields_add function in fields.c in libbibcore.a in bibutils through 6.2 allows remote …

    bibutils bibutils Debian Ubuntu
  • Unscored —
    CVE-2018-10780

    Exiv2::Image::byteSwap2 in image.cpp in Exiv2 0.26 has a heap-based buffer over-read.

  • Unscored —
    CVE-2018-10776

    The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of ser…

    mp3gain Debian
  • Unscored —
    CVE-2018-10774

    Read access violation in the isiin_keyword function in isiin.c in libbibutils.a in bibutils through 6.2 allows remote a…

    bibutils bibutils Debian Ubuntu
  • Unscored —
    CVE-2018-10778

    Read access violation in the III_dequantize_sample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 allows re…

    mp3gain Debian
  • Unscored —
    CVE-2018-10779

    TIFFWriteScanline in tif_write.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff.

    tiff tiff tiff Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-10773

    NULL pointer deference in the addsn function in serialno.c in libbibcore.a in bibutils through 6.2 allows remote attack…

    bibutils bibutils Debian Ubuntu
  • Unscored —
    CVE-2018-10777

    Buffer overflow in the WriteMP3GainAPETag function in apetag.c in mp3gain through 1.5.2-r2 allows remote attackers to c…

    mp3gain Debian
  • Unscored —
    CVE-2018-10772

    The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service (…

  • Unscored —
    CVE-2018-10771

    Stack-based buffer overflow in the get_key function in parse.c in abcm2ps through 8.13.20 allows remote attackers to ca…

    abcm2ps abcm2ps Debian Ubuntu