Skip to content
OpenAdvisories

Archive

12 July 2018

Vulnerabilities first published on this day (UTC), newest first.

← June 2018 2018 / July /12 August 2018 →
  1. 18
  2. 266
  3. 3113
  4. 416
  5. 5133
  6. 696
  7. 78
  8. 89
  9. 9431
  10. 1087
  11. 1198
  12. 1235
  13. 1386
  14. 14 
  15. 1512
  16. 1644
  17. 1732
  18. 18253
  19. 1956
  20. 20157
  21. 211
  22. 223
  23. 2361
  24. 2449
  25. 2533
  26. 2644
  27. 2777
  28. 289
  29. 2910
  30. 3014
  31. 31129
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    GHSA-hxxf-q3w9-4xgw

    Malicious Package in eslint-scope

    Version 3.7.2 of `eslint-scope` was published without authorization and was found to contain malicious code. This code would read the users `.npmrc` file and send any found authentication tokens to 2 remote servers. ## Recommendation The best course of action…

    eslint-config-eslint eslint-scope npm
  • Critical 9.8
    CVE-2018-14009 Public exploit EPSS 38%

    Codiad remote code execution vulnerability

    Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.

    codiad/codiad Packagist
  • Critical 9.3
    CVE-2018-10895

    Qutebrowser CSRF Vulnerability

    qutebrowser before version 1.4.1 is vulnerable to a cross-site request forgery flaw that allows websites to access 'qute://*' URLs. A malicious website could exploit this to load a 'qute://settings/set' URL, which then sets 'editor.command' to a bash script, …

    qutebrowser cross-site request forgery flaw allows sites to access 'qute qutebrowser qutebrowser Debian Ubuntu PyPI