Skip to content
OpenAdvisories

Archive

25 May 2018

Vulnerabilities first published on this day (UTC), newest first.

← April 2018 2018 / May /25 June 2018 →
  1. 131
  2. 263
  3. 313
  4. 435
  5. 55
  6. 64
  7. 719
  8. 829
  9. 9105
  10. 1049
  11. 1125
  12. 127
  13. 134
  14. 1450
  15. 1537
  16. 1628
  17. 17139
  18. 1831
  19. 1938
  20. 204
  21. 2113
  22. 2263
  23. 2332
  24. 2455
  25. 2546
  26. 2617
  27. 27 
  28. 2811
  29. 2980
  30. 3030
  31. 31101
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.3
    CVE-2018-1467

    The IBM Storwize V7000 Unified management Web interface 1.6 exposes internal cluster details to unauthenticated users. …

    IBM Storwize V7000 Unified (2073)
  • Medium 5.8
    CVE-2018-6664

    SB10233 - Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 - Application Protections Bypass vulnerability

    Application Protections Bypass vulnerability in Microsoft Windows in McAfee Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 allows authenticated users to bypass the product block action via a command-line utility.

    McAfee Data Loss Prevention (DLP) Endpoint
  • Medium 6.8
    CVE-2018-6674

    Privilege escalation vulnerability in McAfee VSE when McTray run with elevated privileges

    Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13 allows local users to spawn unrelated processes with elevated privileges via the system administrator granting McTray.exe el…

    McAfee VirusScan Enterprise (VSE)
  • Medium 4.3
    CVE-2018-1136

    Moodle Cross-site Scripting

    An issue was discovered in Moodle 3.x. An authenticated user is allowed to add HTML blocks containing scripts to their Dashboard; this is normally not a security issue because a personal dashboard is visible to this user only. Through this security vulnerabil…

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 6.5
    CVE-2018-1135

    Moodle Portfolio forum caller class allows a user to download any file

    An issue was discovered in Moodle 3.x. Students who posted on forums and exported the posts to portfolios can download any stored Moodle file by changing the download URL.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 6.5
    CVE-2018-1134

    Moodle Improper Privilege Management

    An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL.

    moodle/moodle moodle Web / CMS Ubuntu Packagist