Skip to content
OpenAdvisories

Archive

9 July 2018

Vulnerabilities first published on this day (UTC), newest first.

← June 2018 2018 / July /9 August 2018 →
  1. 18
  2. 266
  3. 3113
  4. 416
  5. 5133
  6. 696
  7. 78
  8. 89
  9. 9431
  10. 1087
  11. 1198
  12. 1235
  13. 1386
  14. 14 
  15. 1512
  16. 1644
  17. 1732
  18. 18253
  19. 1956
  20. 20157
  21. 211
  22. 223
  23. 2361
  24. 2449
  25. 2533
  26. 2644
  27. 2777
  28. 289
  29. 2910
  30. 3014
  31. 31129
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.8
    CVE-2018-4990 Exploited EPSS 36%

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlie…

    KEV Jun 8, 2022
  • High 7.8
    CVE-2018-5002 Exploited EPSS 24%

    Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploit…

    flashplugin-nonfree Ubuntu
    KEV May 23, 2022
  • High 7.8
    CVE-2018-1000401

    Jenkins AWS CodePipeline Plugin has Insufficiently Protected Credentials

    Jenkins project Jenkins AWS CodePipeline Plugin version 0.36 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSCodePipelineSCM.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file ac…

    com.amazonaws:aws-codepipeline Maven
  • High 7.8
    CVE-2018-1000403

    AWS CodeDeploy Plugin stored AWS Secret Key in plain text

    Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSCodeDeployPublisher.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file …

    com.amazonaws:codedeploy Maven
  • High 7.8
    CVE-2018-1000404

    Insufficiently Protected Credentials in Jenkins AWS CodeBuild Plugin

    Jenkins project Jenkins AWS CodeBuild Plugin version 0.26 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSClientFactory.java, CodeBuilder.java that can result in Credentials Disclosure. This attack appear to be exploitable via …

    com.amazonaws:aws-codebuild Maven