Skip to content
OpenAdvisories

Archive

7 June 2018

Vulnerabilities first published on this day (UTC), newest first.

← May 2018 2018 / June /7 July 2018 →
  1. 1151
  2. 25
  3. 3 
  4. 4136
  5. 560
  6. 630
  7. 7237
  8. 896
  9. 91
  10. 101
  11. 11349
  12. 1256
  13. 1359
  14. 1471
  15. 1548
  16. 164
  17. 1726
  18. 1827
  19. 1948
  20. 2035
  21. 2141
  22. 2226
  23. 2310
  24. 244
  25. 2529
  26. 26144
  27. 2731
  28. 2820
  29. 2937
  30. 305
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Unscored —
    CVE-2018-10619 Public exploit

    An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3…

    ICS-CERT Rockwell Automation RSLinx Classic and FactoryTalk Linx Gateway
  • High 7.8
    CVE-2018-12036 Public exploit

    Path Traversal in OWASP Dependency-Check

    OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames.

    org.owasp:dependency-check-maven Maven
  • Unscored —
    CVE-2018-12031 Public exploit Scanner template EPSS 19%

    Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgra…

  • High 7.5
    CVE-2018-0296 Exploited Public exploit Scanner template EPSS 100%

    A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, rem…

    KEV Nov 3, 2021
  • Critical 10.0
    CVE-2017-16088 Public exploit

    Sandbox Breakout in safe-eval

    The safe-eval module describes itself as a safer version of eval. By accessing the object constructors, un-sanitized user input can access the entire standard library and effectively break out of the sandbox.

    HackerOne safe-eval node module safe-eval npm
  • High —
    CVE-2017-16086 Public exploit

    ReDoS via long UserAgent header in ua-parser

    ua-parser is a port of Browserscope's user agent parser. ua-parser is vulnerable to a ReDoS (Regular Expression Denial of Service) attack when given a specially crafted UserAgent header.

    HackerOne ua-parser node module ua-parser npm
  • Critical 9.8
    CVE-2017-16082 Public exploit EPSS 10%

    Remote Code Execution in pg

    A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 likely scenarios in which one would likely be vulnerable. 1) Executing unsafe, user-supplied sql whic…

    HackerOne pg node module node-postgres pg Debian Ubuntu npm