Skip to content
OpenAdvisories

Archive

12 July 2018

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Unscored —
    CVE-2018-13441 Public exploit

    qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows att…

  • Unscored —
    CVE-2018-13458 Public exploit

    qh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers t…

  • Unscored —
    CVE-2018-13457 Public exploit

    qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers t…

  • Unscored —
    CVE-2018-12979 Public exploit

    An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. Weak permission…

  • Unscored —
    CVE-2018-12981 Public exploit

    An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerabili…

  • Unscored —
    CVE-2018-12980 Public exploit EPSS 30%

    An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerabili…

  • High 7.3
    CVE-2018-12463 Public exploit EPSS 14%

    MFSBGN03811 rev.1 - Fortify Software Security Center (SSC), Multiple vulnerabilities

    An XML external entity (XXE) vulnerability in Fortify Software Security Center (SSC), version 17.1, 17.2, 18.1 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML reques…

  • Critical 9.8
    CVE-2018-14009 Public exploit EPSS 38%

    Codiad remote code execution vulnerability

    Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.

  • High —
    CVE-2018-12540 Public exploit

    High severity vulnerability that affects io.vertx:vertx-web

    In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form parameter. This allows replay attacks with previously issued tokens which are not expired yet.