Skip to content
OpenAdvisories

Archive

29 May 2018

Vulnerabilities first published on this day (UTC), newest first.

← April 2018 2018 / May /29 June 2018 →
  1. 131
  2. 263
  3. 313
  4. 435
  5. 55
  6. 64
  7. 719
  8. 829
  9. 9105
  10. 1049
  11. 1125
  12. 127
  13. 134
  14. 1450
  15. 1537
  16. 1628
  17. 17139
  18. 1831
  19. 1938
  20. 204
  21. 2113
  22. 2263
  23. 2332
  24. 2455
  25. 2546
  26. 2617
  27. 27 
  28. 2811
  29. 2980
  30. 3030
  31. 31101
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical —
    CVE-2015-9235 Public exploit

    Verification Bypass in jsonwebtoken

    In jsonwebtoken node module before 4.2.2 it is possible for an attacker to bypass verification when a token digitally signed with an asymmetric key (RS/ES family) of algorithms but instead the attacker send a token digitally signed with a symmetric algorithm …

    HackerOne jsonwebtoken node module jsonwebtoken npm
  • Unscored —
    CVE-2018-10751 Public exploit

    A malformed OMACP WAP push message can cause memory corruption on a Samsung S7 Edge device when processing the String E…

  • Unscored —
    CVE-2018-1235 Public exploit EPSS 42%

    Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command inj…

    DELL EMC Dell EMC RecoverPoint Virtual Machine (VM) Dell EMC RecoverPoint
  • Unscored —
    CVE-2018-11532 Public exploit

    An issue was discovered in the ChangUonDyU Advanced Statistics plugin 1.0.2 for MyBB. changstats.php has XSS, as demons…

  • Unscored —
    CVE-2018-11535 Public exploit

    An issue was discovered in SITEMAKIN SLAC (Site Login and Access Control) v1.0. The parameter "my_item_search" in users…

  • Unscored —
    CVE-2018-11523 Public exploit

    upload.php on NUUO NVRmini 2 devices allows Arbitrary File Upload, such as upload of .php files.