Skip to content
OpenAdvisories

Archive

25 May 2018

Vulnerabilities first published on this day (UTC), newest first.

← April 2018 2018 / May /25 June 2018 →
  1. 131
  2. 263
  3. 313
  4. 435
  5. 55
  6. 64
  7. 719
  8. 829
  9. 9105
  10. 1049
  11. 1125
  12. 127
  13. 134
  14. 1450
  15. 1537
  16. 1628
  17. 17139
  18. 1831
  19. 1938
  20. 204
  21. 2113
  22. 2263
  23. 2332
  24. 2455
  25. 2546
  26. 2617
  27. 27 
  28. 2811
  29. 2980
  30. 3030
  31. 31101
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Unscored —
    CVE-2018-11479 Public exploit

    The VPN component in Windscribe 1.81 uses the OpenVPN client for connections. Also, it creates a WindScribeService.exe …

  • Unscored —
    CVE-2018-11444 Public exploit

    A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0.

  • Unscored —
    CVE-2018-11442 Public exploit

    A CSRF issue was discovered in EasyService Billing 1.0, which was triggered via a quotation-new3-new2.php?add=true&id= …

  • Unscored —
    CVE-2018-11443 Public exploit

    The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0.

  • Unscored —
    CVE-2018-11445 Public exploit

    A CSRF issue was discovered on the User Add/System Settings Page (system-settings-user-new2.php) in EasyService Billing…

  • High 8.8
    CVE-2018-1133 Public exploit EPSS 31%

    Moodle calculated question type allows remote code execution by Question authors

    An issue was discovered in Moodle 3.x. A Teacher creating a Calculated question can intentionally cause remote code execution on the server, aka eval injection.

    moodle/moodle moodle Web / CMS Ubuntu Packagist