Skip to content
OpenAdvisories

Archive

22 June 2018

Vulnerabilities first published on this day (UTC), newest first.

← May 2018 2018 / June /22 July 2018 →
  1. 1151
  2. 25
  3. 3 
  4. 4136
  5. 560
  6. 630
  7. 7237
  8. 896
  9. 91
  10. 101
  11. 11349
  12. 1256
  13. 1359
  14. 1471
  15. 1548
  16. 164
  17. 1726
  18. 1827
  19. 1948
  20. 2035
  21. 2141
  22. 2226
  23. 2310
  24. 244
  25. 2529
  26. 26144
  27. 2731
  28. 2820
  29. 2937
  30. 305
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2018-12538

    Access and integrity issue within Eclipse Jetty

    In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a malicious user to access/hijack other HttpSessions and even delete unmatched HttpSes…

    The Eclipse Foundation Eclipse Jetty org.eclipse.jetty:jetty-server Maven
  • High 7.8
    CVE-2018-1000201

    Ruby-ffi has a DLL loading issue

    ruby-ffi version 1.9.23 and earlier has a DLL loading issue which can be hijacked on Windows OS, when a Symbol is used as DLL name instead of a String This vulnerability appears to have been fixed in v1.9.24 and later.

    ffi RubyGems
  • High 8.0
    CVE-2017-7466

    Ansible Arbitrary Code Execution

    Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the ability to send facts back to the Ansible server, could use this…

    [UNKNOWN] ansible ansible ansible Debian Ubuntu PyPI
  • High 7.5
    CVE-2018-12642

    Froxlor Incorrect Access Control

    Froxlor through 0.9.39.5 has Incorrect Access Control for tickets not owned by the current user.

    froxlor/froxlor Packagist