Skip to content
OpenAdvisories

Archive

22 May 2018

Vulnerabilities first published on this day (UTC), newest first.

← April 2018 2018 / May /22 June 2018 →
  1. 131
  2. 263
  3. 313
  4. 435
  5. 55
  6. 64
  7. 719
  8. 829
  9. 9105
  10. 1049
  11. 1125
  12. 127
  13. 134
  14. 1450
  15. 1537
  16. 1628
  17. 17139
  18. 1831
  19. 1938
  20. 204
  21. 2113
  22. 2263
  23. 2332
  24. 2455
  25. 2546
  26. 2617
  27. 27 
  28. 2811
  29. 2980
  30. 3030
  31. 31101
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.1
    CVE-2018-10095 Scanner template EPSS 87%

    Dolibarr Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Medium 4.7
    CVE-2018-6492

    MFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerabilities

    Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be …

    Micro Focus Network Operations Management Ultimate Network Automation
  • Medium 6.1
    CVE-2018-11093

    Cross-Site Scripting in @ckeditor/ckeditor5-link

    Cross-site scripting (XSS) vulnerability in the Link package for CKEditor 5 before 10.0.1 allows remote attackers to inject arbitrary web script through a crafted href attribute of a link (A) element.

    @ckeditor/ckeditor5-link npm
  • Medium 6.4
    CVE-2018-6494

    MFSBGN03807 rev.1 - HP Service Manager Software, Multiple Vulnerabilities

    Remote SQL Injection against the HP Service Manager Software Web Tier, version 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, may lead to unauthorized disclosure of data.

    Micro Focus HP Service Manager Software
  • Medium 4.3
    CVE-2017-2609

    Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

    jenkins before versions 2.44, 2.32.2 is vulnerable to an information disclosure vulnerability in search suggestions (SECURITY-385). The autocomplete feature on the search box discloses the names of the views in its suggestions, including the ones for which th…

    [UNKNOWN] jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • Medium 4.8
    CVE-2018-11326

    Joomla! XSS Vulnerability

    An issue was discovered in Joomla! Core before 3.8.8. Inadequate input filtering leads to a multiple XSS vulnerabilities. Additionally, the default filtering settings could potentially allow users of the default Administrator user group to perform a XSS attac…

    joomla/joomla-cms Packagist
  • Medium 5.5
    CVE-2018-3639 Public exploit EPSS 60%

    Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addre…

    Intel Multiple linux-raspi2 linux-hwe Debian Ubuntu Alpine