Skip to content
OpenAdvisories

Archive

10 July 2018

Vulnerabilities first published on this day (UTC), newest first.

← June 2018 2018 / July /10 August 2018 →
  1. 18
  2. 266
  3. 3113
  4. 416
  5. 5133
  6. 696
  7. 78
  8. 89
  9. 9431
  10. 1087
  11. 1198
  12. 1235
  13. 1386
  14. 14 
  15. 1512
  16. 1644
  17. 1732
  18. 18253
  19. 1956
  20. 20157
  21. 211
  22. 223
  23. 2361
  24. 2449
  25. 2533
  26. 2644
  27. 2777
  28. 289
  29. 2910
  30. 3014
  31. 31129
All Critical High Medium Low Exploited only Public exploit

87 results · Feed

  • Unscored —
    CVE-2018-10861

    A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can …

    Red Hat ceph ceph ceph Debian Ubuntu
  • Critical 9.8
    CVE-2018-1337

    Credential leak in org.apache.directory.api:apache-ldap-api

    In Apache Directory LDAP API before 1.0.2, a bug in the way the SSL Filter was setup made it possible for another thread to use the connection before the TLS layer has been established, if the connection has already been used and put back in a pool of connect…

    Apache Software Foundation Apache Directory apache-directory-api org.apache.directory.api:apache-ldap-api Debian Maven
  • Unscored —
    CVE-2018-13389

    The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content in th…

    Atlassian Confluence Web / CMS
  • Unscored —
    CVE-2018-13388

    The review attachment resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject…

    Atlassian Fisheye and Crucible
  • Critical 9.8
    CVE-2018-13797 Public exploit

    Command Injection in macaddress

    The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec (rather than execFile) call.

    macaddress node-macaddress node-macaddress Debian Ubuntu npm
  • Unscored —
    CVE-2018-12230

    An wrong logical check identified in the transferFrom function of a smart contract implementation for RemiCoin (RMC), a…

  • High 7.5
    CVE-2016-10726 Public exploit

    High severity vulnerability that affects org.dspace:dspace-xmlui

    The XMLUI feature in DSpace before 3.6, 4.x before 4.5, and 5.x before 5.5 allows directory traversal via the themes/ path in an attack with two or more arbitrary characters and a colon before a pathname, as demonstrated by a themes/Reference/aa:etc/passwd UR…

    org.dspace:dspace-xmlui Maven