Skip to content
OpenAdvisories

Archive

10 July 2018

Vulnerabilities first published on this day (UTC), newest first.

← June 2018 2018 / July /10 August 2018 →
  1. 18
  2. 266
  3. 3113
  4. 416
  5. 5133
  6. 696
  7. 78
  8. 89
  9. 9431
  10. 1087
  11. 1198
  12. 1235
  13. 1386
  14. 14 
  15. 1512
  16. 1644
  17. 1732
  18. 18253
  19. 1956
  20. 20157
  21. 211
  22. 223
  23. 2361
  24. 2449
  25. 2533
  26. 2644
  27. 2777
  28. 289
  29. 2910
  30. 3014
  31. 31129
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.5
    CVE-2018-13863

    js-bson vulnerable to REDoS

    The MongoDB bson JavaScript module (also known as js-bson) versions 0.5.0 to 1.0.x before 1.0.5 is vulnerable to a Regular Expression Denial of Service (ReDoS) in lib/bson/decimal128.js. The flaw is triggered when the Decimal128.fromString() function is calle…

    node-mongodb bson Debian npm
  • High 8.8
    CVE-2018-1331

    Code execution in org.apache.storm:storm-core

    In Apache Storm 0.10.0 through 0.10.2, 1.0.0 through 1.0.6, 1.1.0 through 1.1.2, and 1.2.0 through 1.2.1, an attacker with access to a secure storm cluster in some cases could execute arbitrary code as a different user.

    Apache Software Foundation Apache Storm org.apache.storm:storm-core Maven
  • High 8.4
    CVE-2018-1487

    IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5 and 11.1 binaries load shared librari…

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • High 8.4
    CVE-2018-1566

    IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to…

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • High 7.4
    CVE-2018-1458

    IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10,1, 10.5 and 11.1 could allow a local user to …

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • High 7.5
    CVE-2016-10726 Public exploit

    High severity vulnerability that affects org.dspace:dspace-xmlui

    The XMLUI feature in DSpace before 3.6, 4.x before 4.5, and 5.x before 5.5 allows directory traversal via the themes/ path in an attack with two or more arbitrary characters and a colon before a pathname, as demonstrated by a themes/Reference/aa:etc/passwd UR…

    org.dspace:dspace-xmlui Maven