Skip to content
OpenAdvisories

Archive

21 June 2018

Vulnerabilities first published on this day (UTC), newest first.

← May 2018 2018 / June /21 July 2018 →
  1. 1151
  2. 25
  3. 3 
  4. 4136
  5. 560
  6. 630
  7. 7237
  8. 896
  9. 91
  10. 101
  11. 11349
  12. 1256
  13. 1359
  14. 1471
  15. 1548
  16. 164
  17. 1726
  18. 1827
  19. 1948
  20. 2035
  21. 2141
  22. 2226
  23. 2310
  24. 244
  25. 2529
  26. 26144
  27. 2731
  28. 2820
  29. 2937
  30. 305
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2018-12581

    phpMyAdmin XSS Vulnerability

    An issue was discovered in js/designer/move.js in phpMyAdmin before 4.8.2. A Cross-Site Scripting vulnerability has been found where an attacker can use a crafted database name to trigger an XSS attack when that database is referenced from the Designer featur…

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin phpmyadmin Debian Ubuntu Alpine Packagist
  • Medium 6.5
    CVE-2018-1253

    Stored cross-site scripting vulnerability

    RSA Authentication Manager Operation Console, versions 8.3 P1 and earlier, contains a stored cross-site scripting vulnerability. A malicious Operations Console administrator could potentially exploit this vulnerability to store arbitrary HTML or JavaScript co…

    RSA Authentication Manager
  • Medium 5.3
    CVE-2018-12615

    Phusion Passenger incorrect permission assignment

    An issue was discovered in switchGroup() in agent/ExecHelper/ExecHelperMain.cpp in Phusion Passenger before 5.3.2. The set of groups (gidset) is not set correctly, leaving it up to randomness (i.e., uninitialized memory) which supplementary groups are actuall…

    passenger RubyGems
  • Medium 6.5
    CVE-2017-2672

    A flaw was found in foreman before version 1.15 in the logging of adding and registering images. An attacker with acces…

    [UNKNOWN] foreman