Skip to content
OpenAdvisories

Archive

8 July 2018

Vulnerabilities first published on this day (UTC), newest first.

← June 2018 2018 / July /8 August 2018 →
  1. 18
  2. 266
  3. 3113
  4. 416
  5. 5133
  6. 696
  7. 78
  8. 89
  9. 9431
  10. 1087
  11. 1198
  12. 1235
  13. 1386
  14. 14 
  15. 1512
  16. 1644
  17. 1732
  18. 18253
  19. 1956
  20. 20157
  21. 211
  22. 223
  23. 2361
  24. 2449
  25. 2533
  26. 2644
  27. 2777
  28. 289
  29. 2910
  30. 3014
  31. 31129
All Critical High Medium Low Exploited only Public exploit

9 results · Feed

  • Unscored —
    CVE-2018-13444

    An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add an admin account via adm1n/admin_man…

  • Critical 9.8
    CVE-2018-13447

    Dolibarr SQL injection vulnerability in product/card.php

    SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut parameter.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Critical 9.8
    CVE-2018-13448

    Dolibarr SQL injection vulnerability in product/card.php

    SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the country_id parameter.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Critical 9.8
    CVE-2018-13450

    Dolibarr SQL injection vulnerability in product/card.php

    SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the status_batch parameter.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Unscored —
    CVE-2018-13440

    The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.…

    audiofile audiofile Debian Ubuntu
  • Critical 9.8
    CVE-2018-13449

    Dolibarr SQL injection vulnerability in product/card.php

    SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut_buy parameter.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Unscored —
    CVE-2018-13445

    An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add a user account via adm1n/admin_manag…

  • High 7.5
    CVE-2018-13439

    WeChat Pay Java SDK allows XXE

    WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL.

    com.github.wxpay:wxpay-sdk Maven
  • Unscored —
    CVE-2018-13433

    Boostnote v0.11.7 allows XSS during highlighting of Markdown text, as demonstrated by an onerror attribute of an IMG el…