Skip to content
OpenAdvisories

Archive

24 May 2018

Vulnerabilities first published on this day (UTC), newest first.

← April 2018 2018 / May /24 June 2018 →
  1. 131
  2. 263
  3. 313
  4. 435
  5. 55
  6. 64
  7. 719
  8. 829
  9. 9105
  10. 1049
  11. 1125
  12. 127
  13. 134
  14. 1450
  15. 1537
  16. 1628
  17. 17139
  18. 1831
  19. 1938
  20. 204
  21. 2113
  22. 2263
  23. 2332
  24. 2455
  25. 2546
  26. 2617
  27. 27 
  28. 2811
  29. 2980
  30. 3030
  31. 31101
All Critical High Medium Low Exploited only Public exploit

55 results · Feed

  • Unscored —
    CVE-2018-1000155

    OpenFlow version 1.0 onwards contains a Denial of Service and Improper authorization vulnerability in OpenFlow handshak…

  • Unscored —
    CVE-2018-1000300

    curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in d…

    curl curl curl Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-1000038

    In Artifex MuPDF 1.12.0 and earlier, a stack buffer overflow in function pdf_lookup_cmap_full in pdf/pdf-cmap.c could a…

    mupdf mupdf Debian Ubuntu
  • Medium 6.3
    CVE-2018-1000039

    In Artifex MuPDF 1.12.0 and earlier, multiple heap use after free bugs in the PDF parser could allow an attacker to exe…

    mupdf mupdf Debian Ubuntu
  • Unscored —
    CVE-2018-9920

    Server side request forgery exists in the runtime application in K2 smartforms 4.6.11 via a modified hostname in an htt…

  • Unscored —
    CVE-2017-9421

    Authentication Bypass vulnerability in Accellion kiteworks before 2017.01.00 allows remote attackers to execute certain…

  • Unscored —
    CVE-2018-11411

    The transferFrom function of a smart contract implementation for DimonCoin (FUD), an Ethereum ERC20 token, allows attac…

  • Unscored —
    CVE-2018-11403 Public exploit

    DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter.

  • Unscored —
    CVE-2018-11404 Public exploit

    DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter.

  • Unscored —
    CVE-2018-11405

    Kliqqi 2.0.2 has CSRF in admin/admin_users.php.

  • Unscored —
    CVE-2018-11410

    An issue was discovered in Liblouis 3.5.0. A invalid free in the compileRule function in compileTranslationTable.c allo…

    liblouis liblouis Debian Ubuntu
  • Unscored —
    CVE-2018-11400

    In SimpliSafe Original, the Base Station fails to detect tamper attempts: it does not send a notification if a physical…

  • Unscored —
    CVE-2018-11399

    SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potenti…

  • Unscored —
    CVE-2018-11402

    SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the P…

  • Unscored —
    CVE-2018-11401

    In SimpliSafe Original, RF Interference (e.g., an extremely strong 433.92 MHz signal) by a physically proximate attacke…