Skip to content
OpenAdvisories

Archive

10 July 2018

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2018-13849 Public exploit

    edit_requests.php in yTakkar Instagram-clone through 2018-04-23 has XSS via an onmouseover payload because of an inadeq…

  • Critical 9.8
    CVE-2018-13797 Public exploit

    Command Injection in macaddress

    The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec (rather than execFile) call.

  • High 7.5
    CVE-2016-10726 Public exploit

    High severity vulnerability that affects org.dspace:dspace-xmlui

    The XMLUI feature in DSpace before 3.6, 4.x before 4.5, and 5.x before 5.5 allows directory traversal via the themes/ path in an attack with two or more arbitrary characters and a colon before a pathname, as demonstrated by a themes/Reference/aa:etc/passwd UR…