Skip to content
OpenAdvisories

Archive

2 July 2018

Vulnerabilities first published on this day (UTC), newest first.

← June 2018 2018 / July /2 August 2018 →
  1. 18
  2. 266
  3. 3113
  4. 416
  5. 5133
  6. 696
  7. 78
  8. 89
  9. 9431
  10. 1087
  11. 1198
  12. 1235
  13. 1386
  14. 14 
  15. 1512
  16. 1644
  17. 1732
  18. 18253
  19. 1956
  20. 20157
  21. 211
  22. 223
  23. 2361
  24. 2449
  25. 2533
  26. 2644
  27. 2777
  28. 289
  29. 2910
  30. 3014
  31. 31129
All Critical High Medium Low Exploited only Public exploit

66 results · Feed

  • Unscored —
    CVE-2018-12426

    The WP Live Chat Support Pro plugin before 8.0.07 for WordPress is vulnerable to unauthenticated Remote Code Execution …

  • Unscored —
    CVE-2018-12893

    An issue was discovered in Xen through 4.10.x. One of the fixes in XSA-260 added some safety checks to help prevent Xen…

    xen xen xen Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-12891

    An issue was discovered in Xen through 4.10.x. Certain PV MMU operations may take a long time to process. For that reas…

    xen xen xen Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-12892

    An issue was discovered in Xen 4.7 through 4.10.x. libxl fails to pass the readonly flag to qemu when setting up a SCSI…

    xen xen xen Debian Ubuntu Alpine
  • High 8.5
    CVE-2018-10843

    source-to-image component of Openshift Container Platform before versions atomic-openshift 3.7.53, atomic-openshift 3.9…

    [UNKNOWN] source-to-image
  • Unscored —
    CVE-2018-12529

    An issue was discovered on Intex N150 devices. The router firmware suffers from multiple CSRF injection point vulnerabi…

  • Unscored —
    CVE-2018-12576

    TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking.

  • Unscored —
    CVE-2018-12574

    CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.…

  • Unscored —
    CVE-2018-12528

    An issue was discovered on Intex N150 devices. The backup/restore option does not check the file extension uploaded for…

  • Unscored —
    CVE-2018-12577

    The Ping and Traceroute features on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices a…

  • Unscored —
    CVE-2018-12575

    On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n devices, all actions in the web interface …

  • Unscored —
    CVE-2018-12499

    The Motorola MBP853 firmware does not correctly validate server certificates. This allows for a Man in The Middle (MiTM…

  • High 7.2
    CVE-2018-9276 Exploited Public exploit EPSS 87%

    An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administr…

    KEV Feb 4, 2025
  • Unscored —
    CVE-2018-10075

    Cross-site scripting (XSS) vulnerability in Zoho ManageEngine EventLog Analyzer 11.12 allows remote attackers to inject…

  • Unscored —
    CVE-2018-10076

    An issue was discovered in Zoho ManageEngine EventLog Analyzer 11.12. A Cross-Site Scripting vulnerability allows a rem…

  • Unscored —
    CVE-2018-13056

    An issue was discovered on zzcms 8.3. There is a vulnerability at /user/del.php that can delete any file by placing its…

  • Unscored —
    CVE-2018-13054

    An issue was discovered in Cinnamon 1.9.2 through 3.8.6. The cinnamon-settings-users.py GUI runs as root and allows con…

    cinnamon cinnamon Debian Ubuntu
  • High 8.1
    CVE-2018-8039 Public exploit

    Apache CXF TLS hostname verification does not work correctly with com.sun.net.ssl.*

    It is possible to configure Apache CXF to use the com.sun.net.ssl implementation via 'System.setProperty("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol");'. When this system property is set, CXF uses some reflection to try to make the Ho…

    Apache Software Foundation Apache CXF org.apache.cxf:apache-cxf org.apache.cxf:cxf-rt-transports-http Maven
  • High 7.8
    CVE-2018-10874

    Ansible Improper Input Validation vulnerability

    In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.

    [UNKNOWN] ansible ansible ansible Debian Ubuntu PyPI
  • Unscored —
    CVE-2017-17175

    Short Message Service (SMS) module of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.354(C00) …

    Huawei Mate 9 Pro Network devices
  • Unscored —
    CVE-2017-17316

    Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00;…

    Huawei DP300,RP200,TE30,TE40,TE50,TE60 Network devices
  • Unscored —
    CVE-2017-17317

    Common Open Policy Service Protocol (COPS) module in Huawei USG6300 V100R001C10; V100R001C20; V100R001C30; V500R001C00;…

    Huawei DP300; IPS Module; NGFW Module; RP200; Secospace USG6300; Secospace USG6500; Secospace USG6600; TE30; TE40; TE50; TE60 Network devices
  • Medium 6.1
    CVE-2018-0499

    xapian-core Cross-site Scripting vulnerability

    A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet().

    xapian-core xapian-core xapian-core xapian-core Debian Ubuntu Alpine RubyGems
  • Unscored —
    CVE-2018-13053

    The alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an integer overflow …

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2018-13050 EPSS 39%

    A SQL Injection vulnerability exists in Zoho ManageEngine Applications Manager 13.x before build 13800 via the j_userna…

  • Unscored —
    CVE-2018-13049

    The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by …