Skip to content
OpenAdvisories

Archive

9 July 2018

Vulnerabilities first published on this day (UTC), newest first.

← June 2018 2018 / July /9 August 2018 →
  1. 18
  2. 266
  3. 3113
  4. 416
  5. 5133
  6. 696
  7. 78
  8. 89
  9. 9431
  10. 1087
  11. 1198
  12. 1235
  13. 1386
  14. 14 
  15. 1512
  16. 1644
  17. 1732
  18. 18253
  19. 1956
  20. 20157
  21. 211
  22. 223
  23. 2361
  24. 2449
  25. 2533
  26. 2644
  27. 2777
  28. 289
  29. 2910
  30. 3014
  31. 31129
All Critical High Medium Low Exploited only Public exploit

431 results · Feed

  • Unscored —
    CVE-2018-13787

    Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Regio…

  • Unscored —
    CVE-2018-12977

    A SQL injection vulnerability in the SoftExpert (SE) Excellence Suite 2.0 allows remote authenticated users to perform …

  • Unscored —
    CVE-2018-6856

    Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vuln…

  • Unscored —
    CVE-2018-6852

    Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vuln…

  • Unscored —
    CVE-2018-6854

    Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vuln…

  • Unscored —
    CVE-2018-6857

    Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vuln…

  • Unscored —
    CVE-2018-6851

    Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vuln…

  • Unscored —
    CVE-2018-6853

    Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vuln…

  • Unscored —
    CVE-2018-6855

    Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vuln…

  • Unscored —
    CVE-2013-3000

    SQL injection vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to execut…

  • Unscored —
    CVE-2013-3001

    Directory traversal vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to …

  • Unscored —
    CVE-2013-3017

    IBM Tivoli Application Dependency Discovery Manager (TADDM) before 7.2.1.5 and 7.2.x before 7.2.2 make it easier for re…

  • Unscored —
    CVE-2013-2999

    Cross-site scripting (XSS) vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attack…

  • Unscored —
    CVE-2018-6830

    Directory traversal vulnerability in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P …

  • Unscored —
    CVE-2018-6831

    The setSystemTime function in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9…

  • Unscored —
    CVE-2018-6832

    Stack-based buffer overflow in the getSWFlag function in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 a…

  • Unscored —
    CVE-2017-7471

    Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs) support, is vulnerabl…

    qemu Debian
  • High 7.8
    CVE-2018-1000401

    Jenkins AWS CodePipeline Plugin has Insufficiently Protected Credentials

    Jenkins project Jenkins AWS CodePipeline Plugin version 0.36 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSCodePipelineSCM.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file ac…

    com.amazonaws:aws-codepipeline Maven
  • High 7.8
    CVE-2018-1000403

    AWS CodeDeploy Plugin stored AWS Secret Key in plain text

    Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSCodeDeployPublisher.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file …

    com.amazonaws:codedeploy Maven
  • Medium 4.3
    CVE-2018-1000402

    Jenkins AWS CodeDeploy Plugin has Insufficiently Protected Credentials

    Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a File and Directory Information Exposure vulnerability in AWSCodeDeployPublisher.java that can result in Disclosure of environment variables. This vulnerability appears to have b…

    com.amazonaws:codedeploy Maven
  • High 7.8
    CVE-2018-1000404

    Insufficiently Protected Credentials in Jenkins AWS CodeBuild Plugin

    Jenkins project Jenkins AWS CodeBuild Plugin version 0.26 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSClientFactory.java, CodeBuilder.java that can result in Credentials Disclosure. This attack appear to be exploitable via …

    com.amazonaws:aws-codebuild Maven
  • Medium 4.3
    CVE-2018-1548

    IBM API Connect 2018.1.0.0, 2018.2.1, 2018.2.2, 2018.2.3, and 2018.2.4 contains a vulnerability that could allow an aut…

    IBM API Connect
  • Medium 6.5
    CVE-2018-13785

    In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an …

    openjdk8 openjdk7 libpng1.6 libpng1.6 Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-11542

    A Remote Command Execution (RCE) vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows for…

  • Unscored —
    CVE-2018-11543

    A Local File Inclusion (LFI) vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows for the…

  • Unscored —
    CVE-2018-11541

    A root privilege escalation vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows unauthor…

  • Unscored —
    CVE-2018-13256

    PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter.

  • Unscored —
    CVE-2017-16890

    SWFTools 0.9.2 has a divide-by-zero error in the wav_convert2mono function in lib/wav.c because the align value may be …

    swftools Ubuntu
  • Unscored —
    CVE-2018-13784 Public exploit EPSS 16%

    PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowf…

  • Unscored —
    CVE-2018-13519

    The mint function of a smart contract implementation for DigitalCloudToken, an Ethereum token, has an integer overflow …

  • Unscored —
    CVE-2018-13694

    The mintToken function of a smart contract implementation for GMile, an Ethereum token, has an integer overflow that al…

  • Unscored —
    CVE-2018-13520

    The mintToken function of a smart contract implementation for TopscoinAdvanced, an Ethereum token, has an integer overf…

  • Unscored —
    CVE-2018-13676

    The mintToken function of a smart contract implementation for Orderbook Presale Token (OBP), an Ethereum token, has an …

  • Unscored —
    CVE-2018-13592

    The mintToken function of a smart contract implementation for RajTest, an Ethereum token, has an integer overflow that …

  • Unscored —
    CVE-2018-13670

    The mintToken function of a smart contract implementation for GFCB, an Ethereum token, has an integer overflow that all…

  • Unscored —
    CVE-2018-13712

    The mintToken function of a smart contract implementation for PMET, an Ethereum token, has an integer overflow that all…

  • Unscored —
    CVE-2018-13751

    The mintToken function of a smart contract implementation for JustWallet, an Ethereum token, has an integer overflow th…

  • Unscored —
    CVE-2018-13715

    The mintToken function of a smart contract implementation for BpsToken, an Ethereum token, has an integer overflow that…

  • Unscored —
    CVE-2018-13549

    The mintToken function of a smart contract implementation for NeuroToken, an Ethereum token, has an integer overflow th…

  • Unscored —
    CVE-2018-13669

    The mintToken function of a smart contract implementation for NCU, an Ethereum token, has an integer overflow that allo…