Skip to content
OpenAdvisories

Archive

26 May 2018

Vulnerabilities first published on this day (UTC), newest first.

← April 2018 2018 / May /26 June 2018 →
  1. 131
  2. 263
  3. 313
  4. 435
  5. 55
  6. 64
  7. 719
  8. 829
  9. 9105
  10. 1049
  11. 1125
  12. 127
  13. 134
  14. 1450
  15. 1537
  16. 1628
  17. 17139
  18. 1831
  19. 1938
  20. 204
  21. 2113
  22. 2263
  23. 2332
  24. 2455
  25. 2546
  26. 2617
  27. 27 
  28. 2811
  29. 2980
  30. 3030
  31. 31101
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2018-11505 Public exploit

    The Werewolf Online application 0.8.8 for Android allows attackers to discover the Firebase token by reading logcat out…

  • Unscored —
    CVE-2018-6411 Public exploit

    An issue was discovered in Appnitro MachForm before 4.2.3. When the form is set to filter a blacklist, it automatically…

  • Unscored —
    CVE-2018-6409 Public exploit EPSS 14%

    An issue was discovered in Appnitro MachForm before 4.2.3. The module in charge of serving stored files gets the path f…

  • Unscored —
    CVE-2018-6410 Public exploit

    An issue was discovered in Appnitro MachForm before 4.2.3. There is a download.php SQL injection via the q parameter.

  • Unscored —
    CVE-2018-11503

    The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of …

    discount discount Debian Ubuntu
  • Unscored —
    CVE-2018-11501

    PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via user_submit.php?upd=2, with resultant XSS.

  • Unscored —
    CVE-2018-11504

    The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of serv…

    discount discount Debian Ubuntu
  • Unscored —
    CVE-2018-11500

    An issue was discovered in PublicCMS V4.0.20180210. There is a CSRF vulnerability in "admin/sysUser/save.do?callbackTyp…

  • Unscored —
    CVE-2018-11496

    In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in read_stream in stream.c, because decompress_file in l…

    lrzip lrzip Debian Ubuntu
  • High 8.0
    CVE-2018-11494

    OpenCart Path Traversal

    The "program extension upload" feature in OpenCart through 3.0.2.0 has a six-step process (upload, install, unzip, move, xml, remove) that allows attackers to execute arbitrary code if the remove step is skipped, because the attacker can discover a secret tem…

    opencart/opencart Packagist
  • Unscored —
    CVE-2018-11499

    A use-after-free vulnerability exists in handle_error() in sass_context.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 th…

    libsass libsass Debian Ubuntu
  • Unscored —
    CVE-2018-11498

    In Lizard v1.0 and LZ5 v2.0 (the prior release, before the product was renamed), there is an unchecked buffer size duri…

  • Medium 4.9
    CVE-2018-11495

    OpenCart Path Traversal

    OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the download_id. For example, an attacker can download ../../config.php.

    opencart/opencart Packagist
  • Unscored —
    CVE-2018-11493

    An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can add a friendship link via index.php?…

  • Unscored —
    CVE-2018-11489

    The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0…

    giflib Debian
  • Unscored —
    CVE-2018-11487

    PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or about.php.

  • Unscored —
    CVE-2018-11490

    The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0…

    giflib giflib Debian Ubuntu