Skip to content
OpenAdvisories

Archive

26 June 2018

Vulnerabilities first published on this day (UTC), newest first.

← May 2018 2018 / June /26 July 2018 →
  1. 1151
  2. 25
  3. 3 
  4. 4136
  5. 560
  6. 630
  7. 7237
  8. 896
  9. 91
  10. 101
  11. 11349
  12. 1256
  13. 1359
  14. 1471
  15. 1548
  16. 164
  17. 1726
  18. 1827
  19. 1948
  20. 2035
  21. 2141
  22. 2226
  23. 2310
  24. 244
  25. 2529
  26. 26144
  27. 2731
  28. 2820
  29. 2937
  30. 305
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Unscored —
    CVE-2018-12895 Public exploit EPSS 62%

    WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin…

    wordpress wordpress Debian Ubuntu
  • Unscored —
    CVE-2018-10594 Public exploit EPSS 68%

    Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVP…

    ICS-CERT Delta Industrial Automation COMMGR and accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1)
  • High 7.5
    CVE-2018-3760 Public exploit Scanner template EPSS 26%

    Sprockets path traversal leads to information leak

    There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests can be used to access files that exists on the filesystem that is outside an application's root di…

    HackerOne Sprockets ruby-sprockets sprockets Debian Ubuntu RubyGems
  • Unscored —
    CVE-2018-10662 Public exploit EPSS 79%

    An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface.

  • Unscored —
    CVE-2018-10661 Public exploit EPSS 86%

    An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.

  • Unscored —
    CVE-2018-10660 Public exploit EPSS 82%

    An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection.

  • Unscored —
    CVE-2018-1000542 Public exploit

    netbeans-mmd-plugin version <= 1.4.3 contains a XML External Entity (XXE) vulnerability in MMD file import that can res…

  • Unscored —
    CVE-2018-1000533 Public exploit Scanner template EPSS 73%

    klaussilveira GitList version <= 0.6 contains a Passing incorrectly sanitized input to system function vulnerability in…

  • Medium 6.1
    CVE-2018-1000529 Public exploit

    Stored Cross Site Scripting in Grails Fields Plugin

    Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8.

    org.grails:grails-core org.grails.plugins:fields Maven
  • Unscored —
    CVE-2018-1000531 Public exploit

    inversoft prime-jwt version prior to commit abb0d479389a2509f939452a6767dc424bb5e6ba contains a CWE-20 vulnerability in…