Skip to content
OpenAdvisories

Archive

1 June 2018

Vulnerabilities first published on this day (UTC), newest first.

← May 2018 2018 / June /1 July 2018 →
  1. 1151
  2. 25
  3. 3 
  4. 4136
  5. 560
  6. 630
  7. 7237
  8. 896
  9. 91
  10. 101
  11. 11349
  12. 1256
  13. 1359
  14. 1471
  15. 1548
  16. 164
  17. 1726
  18. 1827
  19. 1948
  20. 2035
  21. 2141
  22. 2226
  23. 2310
  24. 244
  25. 2529
  26. 26144
  27. 2731
  28. 2820
  29. 2937
  30. 305
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Unscored —
    CVE-2018-11522 Public exploit

    Yosoro 1.0.4 has stored XSS.

  • Medium 4.8
    CVE-2018-11564 Public exploit

    Pagekit Stored Cross-site Scripting

    Stored XSS in YOOtheme Pagekit 1.0.13 and earlier allows a user to upload malicious code via the picture upload feature. A user with elevated privileges could upload a photo to the system in an SVG format. This file will be uploaded to the system and it will …

    pagekit/pagekit Packagist
  • Unscored —
    CVE-2018-11538 Public exploit EPSS 12%

    servlet/UserServlet in SearchBlox 8.6.6 has CSRF via the u_name, u_passwd1, u_passwd2, role, and X-XSRF-TOKEN POST para…

  • Unscored —
    CVE-2018-11581 Public exploit

    Cross-site scripting (XSS) vulnerability on Brother HL series printers allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2018-11671 Public exploit

    An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that can add an admin account via index.ph…

  • Unscored —
    CVE-2018-11670 Public exploit

    An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that allows attackers to execute arbitrary…

  • Unscored —
    CVE-2018-11652 Public exploit EPSS 23%

    CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the …

    nikto nikto nikto Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-11628 Public exploit

    Data input into EMS Master Calendar before 8.0.0.201805210 via URL parameters is not properly sanitized, allowing malic…

  • Unscored —
    CVE-2018-11646 Public exploit EPSS 68%

    webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFavico…

    qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu