Skip to content
OpenAdvisories

Archive

5 July 2018

Vulnerabilities first published on this day (UTC), newest first.

← June 2018 2018 / July /5 August 2018 →
  1. 18
  2. 266
  3. 3113
  4. 416
  5. 5133
  6. 696
  7. 78
  8. 89
  9. 9431
  10. 1087
  11. 1198
  12. 1235
  13. 1386
  14. 14 
  15. 1512
  16. 1644
  17. 1732
  18. 18253
  19. 1956
  20. 20157
  21. 211
  22. 223
  23. 2361
  24. 2449
  25. 2533
  26. 2644
  27. 2777
  28. 289
  29. 2910
  30. 3014
  31. 31129
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.1
    CVE-2018-13339

    Angular Redactor XSS Vulnerability

    Imperavi Redactor 3 in Angular Redactor 1.1.6, when HTML content mode is used, allows stored XSS, as demonstrated by an onerror attribute of an IMG element, a related issue to CVE-2018-7035.

    angular-redactor npm
  • Medium 6.5
    CVE-2018-12021

    Singularity Incorrect Access Control

    Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. When using the overlay option, a malicious user may access sensitive information by exploiting a few specific Singularity features.

    singularity-container github.com/hpcng/singularity Ubuntu Go
  • Medium 6.1
    CVE-2018-3769

    grape subject to Cross-site Scripting

    ruby-grape ruby gem suffers from a cross-site scripting (XSS) vulnerability via "format" parameter.

    Ruby Grape ruby-grape ruby gem grape ruby-grape Debian Ubuntu RubyGems
  • Medium 5.5
    CVE-2018-8026

    XML external entity expansion in org.apache.solr:solr-core

    This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion (XXE) in Solr config files (currency.xml, enumsConfig.xml referred from schema.xml, TIKA parsecontext config file). In addition, Xinclude functiona…

    Apache Software Foundation Apache Solr org.apache.solr:solr-core Maven
  • Medium 6.5
    CVE-2018-8928

    Cross-site scripting (XSS) vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows rem…

    Synology CardDAV Server
  • Medium 6.5
    CVE-2018-10885

    In atomic-openshift before version 3.10.9 a malicious network-policy configuration can cause Openshift Routing to crash…

    [UNKNOWN] atomic-openshift
  • Medium 6.5
    CVE-2017-16773

    Improper authorization vulnerability in Highlight Preview in Synology Universal Search before 1.0.5-0135 allows remote …

    Synology Universal Search