Skip to content
OpenAdvisories

Archive

17 July 2018

Vulnerabilities first published on this day (UTC), newest first.

← June 2018 2018 / July /17 August 2018 →
  1. 18
  2. 266
  3. 3113
  4. 416
  5. 5133
  6. 696
  7. 78
  8. 89
  9. 9431
  10. 1087
  11. 1198
  12. 1235
  13. 1386
  14. 14 
  15. 1512
  16. 1644
  17. 1732
  18. 18253
  19. 1956
  20. 20157
  21. 211
  22. 223
  23. 2361
  24. 2449
  25. 2533
  26. 2644
  27. 2777
  28. 289
  29. 2910
  30. 3014
  31. 31129
All Critical High Medium Low Exploited only Public exploit

32 results · Feed

  • Unscored —
    CVE-2018-14354

    An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute …

    mutt mutt neomutt neomutt Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-14352

    An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not …

    mutt mutt neomutt neomutt Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-14358

    An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer ov…

    mutt mutt neomutt neomutt Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-14356

    An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID.

    mutt mutt neomutt neomutt Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-14363

    An issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/' characters that may have …

    mutt neomutt neomutt Debian Ubuntu
  • Unscored —
    CVE-2018-14349

    An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a NO response wi…

    mutt mutt neomutt neomutt Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-14351

    An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a long IMAP stat…

    mutt mutt neomutt neomutt Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-14361

    An issue was discovered in NeoMutt before 2018-07-16. nntp.c proceeds even if memory allocation fails for messages data.

    mutt neomutt neomutt Debian Ubuntu
  • Unscored —
    CVE-2018-14357

    An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute …

    mutt mutt neomutt neomutt Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-14355

    An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory trav…

    mutt mutt neomutt neomutt Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-14362

    An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may …

    mutt mutt neomutt neomutt Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-14359

    An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 dat…

    mutt mutt neomutt neomutt Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-14350

    An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer ov…

    mutt mutt neomutt neomutt Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-14353

    An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c has an in…

    mutt mutt neomutt neomutt Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-14360

    An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow beca…

    mutt neomutt neomutt Debian Ubuntu
  • Medium 5.8
    CVE-2018-1612 Public exploit EPSS 56%

    IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and…

    IBM QRadar SIEM
  • Unscored —
    CVE-2018-14346

    GNU Libextractor before 1.7 has a stack-based buffer overflow in ec_read_file_func (unzip.c).

    libextractor libextractor Debian Ubuntu
  • Unscored —
    CVE-2018-14347

    GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTOR_mpeg_extract_method (mpeg_extractor.c).

    libextractor libextractor Debian Ubuntu
  • Unscored —
    CVE-2018-13859 Public exploit EPSS 17%

    MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34 build 13381 - 12.07.18, al…

  • Unscored —
    CVE-2018-13860

    MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34 build 13381 - 12.07.18 all…

  • Unscored —
    CVE-2018-13861

    Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allows unauthorized remote attack…

  • Unscored —
    CVE-2018-13862 Public exploit EPSS 49%

    Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allow unauthorized remote attacke…

  • Unscored —
    CVE-2018-13858

    MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional allows unauthorized remote attackers to…

  • Unscored —
    CVE-2018-14345

    An issue was discovered in SDDM through 0.17.0. If configured with ReuseSession=true, the password is not checked for u…

    sddm sddm Debian Ubuntu
  • Medium 5.5
    CVE-2018-6681

    SB10244 - Network Security Management (NSM) - Abuse of Functionality vulnerability

    Abuse of Functionality vulnerability in the web interface in McAfee Network Security Management (NSM) 9.1.7.11 and earlier allows authenticated users to allow arbitrary HTML code to be reflected in the response web page via appliance web interface.

    McAfee Network Security Management (NSM)
  • High 7.5
    CVE-2018-13864 Public exploit

    Play Framework's Assets controller vulnerable to directory traversal

    A directory traversal vulnerability has been found in the Assets controller in Play Framework 2.6.12 through 2.6.15 (fixed in 2.6.16) when running on Windows. It allows a remote attacker to download arbitrary files from the target server via specially crafted…

    com.typesafe.play:play_2.12 Maven
  • Unscored —
    CVE-2018-14338

    samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple…

    exiv2 Debian
  • Unscored —
    CVE-2018-14337

    The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly lead…

    mruby mruby Debian Ubuntu
  • Unscored —
    CVE-2018-14333

    TeamViewer through 13.1.1548 stores a password in Unicode format within TeamViewer.exe process memory between "[00 88] …

  • Unscored —
    CVE-2018-14329

    In HTSlib 1.8, a race condition in cram/cram_io.c might allow local users to overwrite arbitrary files via a symlink at…

    htslib htslib Debian Ubuntu
  • Unscored —
    CVE-2018-14331

    An issue was discovered in XiaoCms X1 v20140305. There is a CSRF vulnerability to change the administrator account pass…

  • Unscored —
    CVE-2018-14334

    manager/editor/upload.php in joyplus-cms 1.6.0 allows arbitrary file upload because detection of a prohibited file exte…