Skip to content
OpenAdvisories

Archive

23 July 2018

Vulnerabilities first published on this day (UTC), newest first.

← June 2018 2018 / July /23 August 2018 →
  1. 18
  2. 266
  3. 3113
  4. 416
  5. 5133
  6. 696
  7. 78
  8. 89
  9. 9431
  10. 1087
  11. 1198
  12. 1235
  13. 1386
  14. 14 
  15. 1512
  16. 1644
  17. 1732
  18. 18253
  19. 1956
  20. 20157
  21. 211
  22. 223
  23. 2361
  24. 2449
  25. 2533
  26. 2644
  27. 2777
  28. 289
  29. 2910
  30. 3014
  31. 31129
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.5
    CVE-2018-1999002 Public exploit EPSS 87%

    Improper Input Validation in Jenkins

    A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framework's org/kohsuke/stapler/Stapler.java that allows attackers to send crafted HTTP requests returning the contents of any file on the Jenkins …

    org.jenkins-ci.main:jenkins-core Maven
  • High 8.8
    CVE-2018-1999001 EPSS 18%

    Improper Input Validation in Jenkins

    A unauthorized modification of configuration vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in User.java that allows attackers to provide crafted login credentials that cause Jenkins to move the config.xml file from the Jenkins home di…

    org.jenkins-ci.main:jenkins-core Maven
  • High 8.1
    CVE-2018-1999009

    October CMS Local File Inclusion

    October CMS version prior to Build 437 contains a Local File Inclusion vulnerability in modules/system/traits/ViewMaker.php#244 (makeFileContents function) that can result in Sensitive information disclosure and remote code execution. This attack appear to be…

    october/october Packagist
  • High 7.2
    CVE-2018-6683

    - Data Loss Prevention (DLP) for Windows - Exploiting Incorrectly Configured Access Control Security Levels vulnerability

    Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing of local policy files when offline.

    McAfee Data Loss Prevention (DLP) for Windows Windows
  • High 7.6
    CVE-2018-6677

    McAfee Web Gateway (MWG) - Directory Traversal vulnerability

    Directory Traversal vulnerability in the administrative user interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to gain elevated privileges via unspecified vectors.

    McAfee McAfee Web Gateway (MWG)
  • High 8.8
    CVE-2018-14522

    Aubio is vulnerable to denial of service via aubio_pitch_set_unit function

    An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_pitch_set_unit in pitch/pitch.c, as demonstrated by aubionotes.

    aubio aubio aubio Debian Ubuntu PyPI
  • High 8.8
    CVE-2018-14521

    Aubio is vulnerable to denial of service via aubio_source_avcodec_readframe function

    An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_source_avcodec_readframe in io/source_avcodec.c, as demonstrated by aubiomfcc.

    aubio aubio aubio Debian Ubuntu PyPI
  • High 8.8
    CVE-2018-14523

    Aubio is vulnerable to out of bound read when samplerate > 50kHz

    An issue was discovered in aubio 0.4.6. A buffer over-read can occur in new_aubio_pitchyinfft in pitch/pitchyinfft.c, as demonstrated by aubionotes.

    aubio aubio aubio Debian Ubuntu PyPI