Skip to content
OpenAdvisories

Archive

11 May 2018

Vulnerabilities first published on this day (UTC), newest first.

← April 2018 2018 / May /11 June 2018 →
  1. 131
  2. 263
  3. 313
  4. 435
  5. 55
  6. 64
  7. 719
  8. 829
  9. 9105
  10. 1049
  11. 1125
  12. 127
  13. 134
  14. 1450
  15. 1537
  16. 1628
  17. 17139
  18. 1831
  19. 1938
  20. 204
  21. 2113
  22. 2263
  23. 2332
  24. 2455
  25. 2546
  26. 2617
  27. 27 
  28. 2811
  29. 2980
  30. 3030
  31. 31101
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Unscored —
    CVE-2018-6023 Public exploit

    Fastweb FASTgate 0.00.47 devices are vulnerable to CSRF, with impacts including Wi-Fi password changing, Guest Wi-Fi ac…

  • Unscored —
    CVE-2018-10832 Public exploit

    ModbusPal 1.6b is vulnerable to an XML External Entity (XXE) attack. Projects are saved as .xmpp files and automations …

  • High 7.5
    CVE-2018-1259 Public exploit

    Spring Data Commons, used in combination with XMLBeam, contains a property binder vulnerability caused by improper restriction of XML external entity references

    Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a property binder vulnerability caused by improper restriction of XML external entity references as underlying li…

    Pivotal Spring Data Commons org.springframework.data:spring-data-commons Maven
  • Critical 9.8
    CVE-2018-1260 Public exploit EPSS 11%

    Spring Security OAuth vulnerable to remote code execution (RCE)

    Spring Security OAuth, versions 2.3 prior to 2.3.3, 2.2 prior to 2.2.2, 2.1 prior to 2.1.2, 2.0 prior to 2.0.15 and older unsupported versions contains a remote code execution vulnerability. A malicious user or attacker can craft an authorization request to t…

    Pivotal Spring Security OAuth org.springframework.security.oauth:spring-security-oauth2 Maven
  • Unscored —
    CVE-2018-10580 Public exploit

    The "Latest Posts on Profile" plugin 1.1 for MyBB has XSS because there is an added section in a user profile that disp…