Skip to content
OpenAdvisories

Archive

22 May 2018

Vulnerabilities first published on this day (UTC), newest first.

← April 2018 2018 / May /22 June 2018 →
  1. 131
  2. 263
  3. 313
  4. 435
  5. 55
  6. 64
  7. 719
  8. 829
  9. 9105
  10. 1049
  11. 1125
  12. 127
  13. 134
  14. 1450
  15. 1537
  16. 1628
  17. 17139
  18. 1831
  19. 1938
  20. 204
  21. 2113
  22. 2263
  23. 2332
  24. 2455
  25. 2546
  26. 2617
  27. 27 
  28. 2811
  29. 2980
  30. 3030
  31. 31101
All Critical High Medium Low Exploited only Public exploit

63 results · Feed

  • Unscored —
    CVE-2018-11322

    An issue was discovered in Joomla! Core before 3.8.8. Depending on the server configuration, PHAR files might be handle…

  • Medium 4.8
    CVE-2018-11326

    Joomla! XSS Vulnerability

    An issue was discovered in Joomla! Core before 3.8.8. Inadequate input filtering leads to a multiple XSS vulnerabilities. Additionally, the default filtering settings could potentially allow users of the default Administrator user group to perform a XSS attac…

    joomla/joomla-cms Packagist
  • Unscored —
    CVE-2018-11321

    An issue was discovered in com_fields in Joomla! Core before 3.8.8. Inadequate filtering allows users authorised to cre…

  • Unscored —
    CVE-2018-6378

    In Joomla! Core before 3.8.8, inadequate filtering of file and folder names leads to various XSS attack vectors in the …

  • Unscored —
    CVE-2018-11366

    init.php in the Loginizer plugin 1.3.8 through 1.3.9 for WordPress has Unauthenticated Stored Cross-Site Scripting (XSS…

  • Unscored —
    CVE-2018-11367

    An issue was discovered in CppCMS before 1.2.1. There is a denial of service in the JSON parser module.

  • Unscored —
    CVE-2018-1583

    IBM StoredIQ 7.6 could allow an authenticated attacker to bypass certain security restrictions. By sending a specially-…

    IBM StoredIQ
  • Unscored —
    CVE-2018-6963

    VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabilit…

    VMware Workstation Fusion
  • Unscored —
    CVE-2018-6962

    VMware Fusion (10.x before 10.1.2) contains a signature bypass vulnerability which may lead to a local privilege escala…

    VMware Fusion
  • Unscored —
    CVE-2018-3640

    Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may…

    Intel Multiple intel-microcode intel-microcode Debian Ubuntu
  • Medium 5.5
    CVE-2018-3639 Public exploit EPSS 60%

    Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addre…

    Intel Multiple linux-raspi2 linux-hwe Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-11329

    The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take…

  • Unscored —
    CVE-2018-11363

    jpeg_size in pdfgen.c in PDFGen before 2018-04-09 has a heap-based buffer over-read.

  • Unscored —
    CVE-2018-11364

    sav_parse_machine_integer_info_record in spss/readstat_sav_read.c in libreadstat.a in ReadStat 0.1.1 has a memory leak …

    r-cran-haven r-cran-haven Debian Ubuntu
  • Unscored —
    CVE-2018-11365

    sas/readstat_sas7bcat_read.c in libreadstat.a in ReadStat 0.1.1 has an infinite loop.

    r-cran-haven r-cran-haven Debian Ubuntu
  • Unscored —
    CVE-2018-11344

    A path traversal vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to arbitrarily specif…

  • Unscored —
    CVE-2018-11341

    Directory traversal in importuser.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to navigate the file system vi…

  • Unscored —
    CVE-2018-11339 Public exploit

    An XSS issue was discovered in Frappe ERPNext v11.x.x-develop b1036e5 via a comment.

  • Unscored —
    CVE-2018-11345

    An unrestricted file upload vulnerability in upload.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to upload su…

  • Unscored —
    CVE-2018-11343

    A persistent cross site scripting vulnerability in playlistmanger.cgi in the ASUSTOR SoundsGood application allows atta…

  • Unscored —
    CVE-2018-11340

    An unrestricted file upload vulnerability in importuser.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to uploa…

  • Unscored —
    CVE-2018-11346

    An insecure direct object reference vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows the ability …

  • Unscored —
    CVE-2018-11342

    A path traversal vulnerability in fileExplorer.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to arbitrarily sp…