Skip to content
OpenAdvisories

Archive

2 July 2018

Vulnerabilities first published on this day (UTC), newest first.

← June 2018 2018 / July /2 August 2018 →
  1. 18
  2. 266
  3. 3113
  4. 416
  5. 5133
  6. 696
  7. 78
  8. 89
  9. 9431
  10. 1087
  11. 1198
  12. 1235
  13. 1386
  14. 14 
  15. 1512
  16. 1644
  17. 1732
  18. 18253
  19. 1956
  20. 20157
  21. 211
  22. 223
  23. 2361
  24. 2449
  25. 2533
  26. 2644
  27. 2777
  28. 289
  29. 2910
  30. 3014
  31. 31129
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.5
    CVE-2018-1080

    Dogtag PKI, through version 10.6.1, has a vulnerability in AAclAuthz.java that, under certain configurations, causes th…

    [UNKNOWN] pki-core dogtag-pki dogtag-pki Debian Ubuntu
  • High 7.1
    CVE-2018-10596

    Medtronic 2090 Carelink Programmer Improper Restriction of Communication Channel to Intended Endpoints

    Medtronic 2090 CareLink Programmer uses a virtual private network connection to securely download updates. It does not verify it is still connected to this virtual private network before downloading updates. The affected products initially establish an encaps…

    Medtronic 29901 Encore Programmer 2090 CareLink Programmer
  • High 8.8
    CVE-2018-1244

    iDRAC7/iDRAC8/iDrac9 contains a command injection vulnerability in the SNMP agent.

    Dell EMC iDRAC7/iDRAC8, versions prior to 2.60.60.60, and iDRAC9 versions prior to 3.21.21.21 contain a command injection vulnerability in the SNMP agent. A remote authenticated malicious iDRAC user with configuration privileges could potentially exploit this…

    DELL EMC iDRAC7 iDRAC9 iDRAC8
  • High 8.8
    CVE-2018-1212

    Authenticated remote code execution in iDRAC 6

    The web-based diagnostics console in Dell EMC iDRAC6 (Monolithic versions prior to 2.91 and Modular all versions) contains a command injection vulnerability. A remote authenticated malicious iDRAC user with access to the diagnostics console could potentially …

    DELL EMC iDRAC6 (Monolithic) iDRAC6 (Modular)
  • High 7.5
    CVE-2018-1243

    iDRAC6/iDRAC7/iDRAC8 - Weak CGI session ID vulnerability

    Dell EMC iDRAC6, versions prior to 2.91, iDRAC7/iDRAC8, versions prior to 2.60.60.60 and iDRAC9, versions prior to 3.21.21.21, contain a weak CGI session ID vulnerability. The sessions invoked via CGI binaries use 96-bit numeric-only session ID values, which …

    DELL EMC iDRAC8 iDRAC7 iDRAC6
  • High 8.8
    CVE-2018-13067

    OpenCart Cross-Site Request Forgery (CSRF)

    /upload/catalog/controller/account/password.php in OpenCart through 3.0.2.0 has CSRF via the index.php?route=account/password URI to change a user's password.

    opencart/opencart Packagist
  • High 8.5
    CVE-2018-10843

    source-to-image component of Openshift Container Platform before versions atomic-openshift 3.7.53, atomic-openshift 3.9…

    [UNKNOWN] source-to-image
  • High 7.2
    CVE-2018-9276 Exploited Public exploit EPSS 87%

    An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administr…

    KEV Feb 4, 2025
  • High 8.1
    CVE-2018-8039 Public exploit

    Apache CXF TLS hostname verification does not work correctly with com.sun.net.ssl.*

    It is possible to configure Apache CXF to use the com.sun.net.ssl implementation via 'System.setProperty("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol");'. When this system property is set, CXF uses some reflection to try to make the Ho…

    Apache Software Foundation Apache CXF org.apache.cxf:apache-cxf org.apache.cxf:cxf-rt-transports-http Maven
  • High 7.8
    CVE-2018-10874

    Ansible Improper Input Validation vulnerability

    In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.

    [UNKNOWN] ansible ansible ansible Debian Ubuntu PyPI