Skip to content
OpenAdvisories

Archive

2 July 2018

Vulnerabilities first published on this day (UTC), newest first.

← June 2018 2018 / July /2 August 2018 →
  1. 18
  2. 266
  3. 3113
  4. 416
  5. 5133
  6. 696
  7. 78
  8. 89
  9. 9431
  10. 1087
  11. 1198
  12. 1235
  13. 1386
  14. 14 
  15. 1512
  16. 1644
  17. 1732
  18. 18253
  19. 1956
  20. 20157
  21. 211
  22. 223
  23. 2361
  24. 2449
  25. 2533
  26. 2644
  27. 2777
  28. 289
  29. 2910
  30. 3014
  31. 31129
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 4.8
    CVE-2018-1113

    setup before version 2.11.4-1.fc28 in Fedora and Red Hat Enterprise Linux added /sbin/nologin and /usr/sbin/nologin to …

    [UNKNOWN] setup
  • Medium 6.2
    CVE-2018-8868

    Medtronic MyCareLink Patient Monitor Exposed Dangerous Method or Function

    Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains debug code meant to test the functionality of the monitor's communication interfaces, including the interface between the monitor and implantable cardiac device. An attacker with physica…

    Medtronic 24952 MyCareLink Monitor 24950 MyCareLink Monitor
  • Medium 6.4
    CVE-2018-8870

    Medtronic MyCareLink Patient Monitor Use of Hard-coded Password

    Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An attacker with physical access can remove the case of the device, connect to the debug port, and use the password to gain privileged access to t…

    Medtronic 24952 MyCareLink Monitor 24950 MyCareLink Monitor
  • Medium 5.9
    CVE-2018-10855

    Ansible exposes sensitive data in log files and on the terminal

    Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the no_log task flag for failed tasks. When the no_log flag has been used to protect sensitive data passed to a task from being logged, and that task does not run successfully, Ansible will expo…

    [UNKNOWN] ansible ansible ansible Debian Ubuntu Alpine PyPI
  • Medium 5.3
    CVE-2018-10856

    Podman Elevated Container Privileges

    It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user. This results in unnecessary privileges being granted to the container.

    [UNKNOWN] podman github.com/containers/podman/v3 github.com/containers/podman/v4 Go
  • Medium 5.5
    CVE-2017-2615

    Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access iss…

    QEMU display qemu xen Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2018-1249

    iDRAC9 versions prior to 3.21.21.21 did not enforce the use of TLS/SSL for a connection to iDRAC web server for certain URLs

    Dell EMC iDRAC9 versions prior to 3.21.21.21 did not enforce the use of TLS/SSL for a connection to iDRAC web server for certain URLs. A man-in-the-middle attacker could use this vulnerability to strip the SSL/TLS protection from a connection between a client…

    DELL EMC iDRAC9
  • Medium 6.1
    CVE-2018-0499

    xapian-core Cross-site Scripting vulnerability

    A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet().

    xapian-core xapian-core xapian-core xapian-core Debian Ubuntu Alpine RubyGems