Skip to content
OpenAdvisories

Archive

21 May 2018

Vulnerabilities first published on this day (UTC), newest first.

← April 2018 2018 / May /21 June 2018 →
  1. 131
  2. 263
  3. 313
  4. 435
  5. 55
  6. 64
  7. 719
  8. 829
  9. 9105
  10. 1049
  11. 1125
  12. 127
  13. 134
  14. 1450
  15. 1537
  16. 1628
  17. 17139
  18. 1831
  19. 1938
  20. 204
  21. 2113
  22. 2263
  23. 2332
  24. 2455
  25. 2546
  26. 2617
  27. 27 
  28. 2811
  29. 2980
  30. 3030
  31. 31101
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Medium 4.2
    CVE-2017-2607

    Improper Neutralization of Input During Web Page Generation in Jenkins

    jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting vulnerability in console notes (SECURITY-382). Jenkins allows plugins to annotate build logs, adding new content or changing the presentation of existing content while the …

    [UNKNOWN] jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • Unscored —
    CVE-2018-11330

    An issue was discovered in Pluck before 4.7.6. There is authenticated stored XSS because the character set for filename…

  • Unscored —
    CVE-2018-11331

    An issue was discovered in Pluck before 4.7.6. Remote PHP code execution is possible because the set of disallowed file…

  • Medium 5.9
    CVE-2018-1108

    kernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's implementation of random seed…

    kernel drivers linux-raspi2 linux-hwe Debian Ubuntu
  • High 7.8
    CVE-2018-7687

    Client for OES Elevation of Privilege via Buffer Overflow

    The Micro Focus Client for OES before version 2 SP4 IR8a has a vulnerability that could allow a local attacker to elevate privileges via a buffer overflow in ncfsd.sys.

    Micro Focus Client for Open Enterprise Server
  • High 7.5
    CVE-2018-8012

    Missing Authorization in Apache ZooKeeper

    No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta. As a result an arbitrary end point could join the cluster and begin propagating counterfeit changes to t…

    Apache Software Foundation Apache ZooKeeper zookeeper zookeeper Debian Ubuntu Maven
  • Medium 5.5
    CVE-2018-8010

    There is a XML external entity expansion (XXE) vulnerability in Apache Solr config files

    This vulnerability in Apache Solr 6.0.0 to 6.6.3, 7.0.0 to 7.3.0 relates to an XML external entity expansion (XXE) in Solr config files (solrconfig.xml, schema.xml, managed-schema). In addition, Xinclude functionality provided in these config files is also af…

    Apache Software Foundation Apache Solr org.apache.solr:solr-core Maven
  • Medium 5.4
    CVE-2018-1067

    Improper Neutralization of CRLF Sequences in HTTP Headers in Undertow

    In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and vali…

    [UNKNOWN] undertow undertow undertow Debian Ubuntu Maven
  • Unscored —
    CVE-2018-7268

    MagniComp SysInfo before 10-H81, as shipped with BMC BladeLogic Automation and other products, contains an information …

  • Unscored —
    CVE-2018-11092

    An issue was discovered in the Admin Notes plugin 1.1 for MyBB. CSRF allows an attacker to remotely delete all admin no…

  • Unscored —
    CVE-2018-11320

    In Octopus Deploy 2018.4.4 through 2018.5.1, Octopus variables that are sourced from the target do not have sensitive v…

  • Unscored —
    CVE-2018-11096

    Horse Market Sell & Rent Portal Script 1.5.7 has a CSRF vulnerability through which an attacker can change all of the t…

  • Unscored —
    CVE-2018-8142

    A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "Windows Security Fea…

    Microsoft Windows Server 2016 Windows 10 Windows 10 Servers Windows