Archive

5 July 2018

Vulnerabilities first published on this day (UTC), newest first.

← June 2018 2018 / July /5 August 2018 →

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

Unscored —

CVE-2018-12739 Public exploit

In BEESCMS 4.0, CSRF allows administrators to be added arbitrarily, a related issue to CVE-2018-10266.

Jul 5, 2018
Unscored —

CVE-2018-12520 Public exploit EPSS 10%

An issue was discovered in ntopng 3.4 before 3.4.180617. The PRNG involved in the generation of session IDs is not seed…

ntopng Ubuntu

Jul 5, 2018
Unscored —

CVE-2018-8738 Public exploit

Airties 5444 1.0.0.18 and 5444TT 1.0.0.18 devices allow XSS.

Jul 5, 2018
High —

CVE-2018-8038 Public exploit EPSS 10%

High severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, org.apache.cxf.fediz:fediz-spring, org.apache.cxf.fediz:fediz-spring2, and org.apache.cxf.fediz:fediz-spring3

Versions of Apache CXF Fediz prior to 1.4.4 do not fully disable Document Type Declarations (DTDs) when either parsing the Identity Provider response in the application plugins, or in the Identity Provider itself when parsing certain XML-based parameters.

Apache Software Foundation Apache CXF Fediz org.apache.cxf.fediz:fediz-spring2 org.apache.cxf.fediz:fediz-spring Maven

Jul 5, 2018
High 7.5

CVE-2018-12018 Public exploit

Go Ethereum LES protocol implementation vulnerable to Denial of Service

The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation because of an integer signedness error for the array index, which allows attackers to launch a Denial of Service attack b…

github.com/ethereum/go-ethereum Go

Jul 5, 2018