Skip to content
OpenAdvisories

Archive

15 July 2018

Vulnerabilities first published on this day (UTC), newest first.

← June 2018 2018 / July /15 August 2018 →
  1. 18
  2. 266
  3. 3113
  4. 416
  5. 5133
  6. 696
  7. 78
  8. 89
  9. 9431
  10. 1087
  11. 1198
  12. 1235
  13. 1386
  14. 14 
  15. 1512
  16. 1644
  17. 1732
  18. 18253
  19. 1956
  20. 20157
  21. 211
  22. 223
  23. 2361
  24. 2449
  25. 2533
  26. 2644
  27. 2777
  28. 289
  29. 2910
  30. 3014
  31. 31129
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Unscored —
    CVE-2018-14073

    libsixel 1.8.1 has a memory leak in sixel_allocator_new in allocator.c.

    libsixel libsixel Debian Ubuntu
  • Unscored —
    CVE-2018-14072

    libsixel 1.8.1 has a memory leak in sixel_decoder_decode in decoder.c, image_buffer_resize in fromsixel.c, and sixel_de…

    libsixel libsixel Debian Ubuntu
  • Unscored —
    CVE-2018-14069

    An issue was discovered in SRCMS V2.3.1. There is a CSRF vulnerability that can add a user account via admin.php?m=Admi…

  • Unscored —
    CVE-2018-14068

    An issue was discovered in SRCMS V2.3.1. There is a CSRF vulnerability that can add an admin account via admin.php?m=Ad…

  • Unscored —
    CVE-2018-14066

    The content://wappush content provider in com.android.provider.telephony, as found in some custom ROMs for Android phon…

  • Critical 9.8
    CVE-2018-14065

    PHPOffice Common Improper Restriction of XML External Entity Reference

    XMLReader.php in PHPOffice Common before 0.2.9 allows XXE.

    phpoffice/common Packagist
  • Unscored —
    CVE-2018-14063

    The increaseApproval function of a smart contract implementation for Tracto (TRCT), an Ethereum ERC20 token, has an int…

  • Unscored —
    CVE-2018-14064 Public exploit Scanner template EPSS 37%

    The uc-http service 1.0.0 on VelotiSmart WiFi B-380 camera devices allows Directory Traversal, as demonstrated by /../.…

  • Unscored —
    CVE-2018-14010

    OS command injection in the guest Wi-Fi settings feature in /cgi-bin/luci on Xiaomi R3P before 2.14.5, R3C before 2.12.…

  • Unscored —
    CVE-2018-14060

    OS command injection in the AP mode settings feature in /cgi-bin/luci /api/misystem/set_router_wifiap on Xiaomi R3D bef…

  • Unscored —
    CVE-2018-14056

    ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intend…

    znc znc znc Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-14055

    ZNC before 1.7.1-rc1 does not properly validate untrusted lines coming from the network, allowing a non-admin user to e…

    znc znc znc Debian Ubuntu Alpine