Skip to content
OpenAdvisories

Archive

13 July 2018

Vulnerabilities first published on this day (UTC), newest first.

← June 2018 2018 / July /13 August 2018 →
  1. 18
  2. 266
  3. 3113
  4. 416
  5. 5133
  6. 696
  7. 78
  8. 89
  9. 9431
  10. 1087
  11. 1198
  12. 1235
  13. 1386
  14. 14 
  15. 1512
  16. 1644
  17. 1732
  18. 18253
  19. 1956
  20. 20157
  21. 211
  22. 223
  23. 2361
  24. 2449
  25. 2533
  26. 2644
  27. 2777
  28. 289
  29. 2910
  30. 3014
  31. 31129
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Unscored —
    CVE-2016-6563 Public exploit EPSS 80%

    D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action

    Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products…

    D-Link DIR-868L DIR-895L DIR-890L Network devices
  • Unscored —
    CVE-2016-6566 Public exploit EPSS 12%

    The Sungard eTRAKiT3 software version 3.2.1.17 may be vulnerable to SQL injection which may allow a remote unauthenticated attacker to run a subset of SQL commands against the back-end database

    The valueAsString parameter inside the JSON payload contained by the ucLogin_txtLoginId_ClientStat POST parameter of the Sungard eTRAKiT3 software version 3.2.1.17 is not properly validated. An unauthenticated remote attacker may be able to modify the POST re…

    Sungard eTRAKiT3
  • Unscored —
    CVE-2018-10018 Public exploit

    The GDASPAMLib.AntiSpam ActiveX control ASK\GDASpam.dll in G DATA Total Security 25.4.0.3 has a buffer overflow via a l…

  • Medium 6.1
    CVE-2018-14042 Public exploit

    Bootstrap Cross-site Scripting vulnerability

    In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.

    ceph fluent-bit pytorch twitter-bootstrap3 Debian Ubuntu Azure Linux npm Packagist Maven NuGet RubyGems
  • Medium 6.1
    CVE-2018-14041 Public exploit

    Bootstrap Cross-site Scripting vulnerability

    In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.

    typo3/cms typo3/cms-core bootstrap twbs/bootstrap npm Packagist Maven NuGet RubyGems
  • Medium 6.1
    CVE-2018-14040 Public exploit

    Bootstrap vulnerable to Cross-Site Scripting (XSS)

    In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.

    reaper bootstrap twitter-bootstrap3 twitter-bootstrap3 Debian Ubuntu Azure Linux npm Packagist Maven NuGet RubyGems
  • Unscored —
    CVE-2018-14029 Public exploit

    CSRF vulnerability in admin/user/edit in Creatiwity wityCMS 0.6.2 allows an attacker to take over a user account, as de…