Skip to content
OpenAdvisories

Archive

20 July 2018

Vulnerabilities first published on this day (UTC), newest first.

← June 2018 2018 / July /20 August 2018 →
  1. 18
  2. 266
  3. 3113
  4. 416
  5. 5133
  6. 696
  7. 78
  8. 89
  9. 9431
  10. 1087
  11. 1198
  12. 1235
  13. 1386
  14. 14 
  15. 1512
  16. 1644
  17. 1732
  18. 18253
  19. 1956
  20. 20157
  21. 211
  22. 223
  23. 2361
  24. 2449
  25. 2533
  26. 2644
  27. 2777
  28. 289
  29. 2910
  30. 3014
  31. 31129
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.5
    CVE-2018-3770

    Remote Code Execution in markdown-pdf

    A path traversal exists in markdown-pdf version <9.0.0 that allows a user to insert a malicious html code that can result in reading the local files.

    HackerOne markdown-pdf markdown-pdf npm
  • Medium 6.1
    CVE-2018-3771

    statics-server Cross-site Scripting vulnerability

    An XSS in statics-server <= 0.0.9 can be used via injected iframe in the filename when statics-server displays directory index in the browser.

    HackerOne statics-server statics-server npm
  • Medium 5.3
    CVE-2018-1679

    IBM Sterling B2B Integrator Standard Edition 5.2 through 5.2.6 could allow an unauthenticated user to obtain sensitive …

    IBM Sterling B2B Integrator
  • Medium 5.3
    CVE-2018-1398

    IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote attacker to download certain files that could contai…

    IBM Sterling File Gateway
  • Medium 4.4
    CVE-2018-1564

    IBM Sterling B2B Integrator Standard Edition 5.2 through 5.2.6 could allow a local user with administrator privileges t…

    IBM Sterling B2B Integrator
  • Medium 4.3
    CVE-2018-1470

    IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote authenticated attacker to obtain sensitive informati…

    IBM Sterling File Gateway
  • Medium 5.4
    CVE-2018-1563 Public exploit

    IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) is vulnerable to cross-sit…

    IBM Sterling File Gateway
  • Medium 5.1
    CVE-2017-1575

    IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) uses weaker than expected …

    IBM Sterling File Gateway
  • Medium 4.3
    CVE-2017-1633

    IBM Sterling B2B Integrator 5.2 through 5.2.6 could allow an authenticated attacker to obtain sensitive variable name i…

    IBM Sterling B2B Integrator