Skip to content
OpenAdvisories

Archive

23 July 2018

Vulnerabilities first published on this day (UTC), newest first.

← June 2018 2018 / July /23 August 2018 →
  1. 18
  2. 266
  3. 3113
  4. 416
  5. 5133
  6. 696
  7. 78
  8. 89
  9. 9431
  10. 1087
  11. 1198
  12. 1235
  13. 1386
  14. 14 
  15. 1512
  16. 1644
  17. 1732
  18. 18253
  19. 1956
  20. 20157
  21. 211
  22. 223
  23. 2361
  24. 2449
  25. 2533
  26. 2644
  27. 2777
  28. 289
  29. 2910
  30. 3014
  31. 31129
All Critical High Medium Low Exploited only Public exploit

61 results · Feed

  • Medium 4.3
    CVE-2018-1503

    IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a remotely authenticated attacker to to send invalid or malformed header…

    IBM WebSphere MQ
  • Medium 5.4
    CVE-2018-1513 Public exploit

    IBM Sterling B2B Integrator Standard Edition 5.2.0 through 5.2.6 is vulnerable to cross-site scripting. This vulnerabil…

    IBM Sterling B2B Integrator
  • High 7.6
    CVE-2018-6677

    McAfee Web Gateway (MWG) - Directory Traversal vulnerability

    Directory Traversal vulnerability in the administrative user interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to gain elevated privileges via unspecified vectors.

    McAfee McAfee Web Gateway (MWG)
  • Low 3.4
    CVE-2018-6678

    McAfee Web Gateway (MWG) - Configuration/Environment manipulation vulnerability

    Configuration/Environment manipulation vulnerability in the administrative interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to execute arbitrary commands via unspecified vectors.

    McAfee McAfee Web Gateway (MWG)
  • High 8.8
    CVE-2018-14522

    Aubio is vulnerable to denial of service via aubio_pitch_set_unit function

    An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_pitch_set_unit in pitch/pitch.c, as demonstrated by aubionotes.

    aubio aubio aubio Debian Ubuntu PyPI
  • Unscored —
    CVE-2018-14512

    An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject …

  • Unscored —
    CVE-2018-14531

    An issue was discovered in Bento4 1.5.1-624. There is an unspecified "heap-buffer-overflow" crash in the AP4_HvccAtom c…

    kodi-inputstream-adaptive Ubuntu
  • High 8.8
    CVE-2018-14521

    Aubio is vulnerable to denial of service via aubio_source_avcodec_readframe function

    An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_source_avcodec_readframe in io/source_avcodec.c, as demonstrated by aubiomfcc.

    aubio aubio aubio Debian Ubuntu PyPI
  • Unscored —
    CVE-2018-14514

    An SSRF vulnerability was discovered in idreamsoft iCMS V7.0.9 that allows attackers to read sensitive files, access an…

  • High 8.8
    CVE-2018-14523

    Aubio is vulnerable to out of bound read when samplerate > 50kHz

    An issue was discovered in aubio 0.4.6. A buffer over-read can occur in new_aubio_pitchyinfft in pitch/pitchyinfft.c, as demonstrated by aubionotes.

    aubio aubio aubio Debian Ubuntu PyPI
  • Unscored —
    CVE-2018-14513

    An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject …

  • Unscored —
    CVE-2018-14527

    Feedback.asp in Xiao5uCompany 1.7 has XSS because the XSS protection mechanism in Safe.asp is insufficient (for example…

  • Unscored —
    CVE-2018-14551

    The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory co…

    imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-14549

    An issue has been found in libwav through 2017-04-20. It is a SEGV in the function wav_write in libwav.c.

  • Unscored —
    CVE-2018-14532

    An issue was discovered in Bento4 1.5.1-624. There is a heap-based buffer over-read in AP4_Mpeg2TsVideoSampleStream::Wr…

    kodi-inputstream-adaptive Ubuntu
  • Unscored —
    CVE-2018-14545

    There exists one invalid memory read bug in AP4_SampleDescription::GetType() in Ap4SampleDescription.h in Bento4 1.5.1-…

    kodi-inputstream-adaptive Ubuntu
  • Unscored —
    CVE-2018-14515

    A SQL injection was discovered in WUZHI CMS 4.1.0 that allows remote attackers to inject a malicious SQL statement via …

  • Unscored —
    CVE-2018-14524

    dwg_decode_eed in decode.c in GNU LibreDWG before 0.6 leads to a double free (in dwg_free_eed in free.c) because it doe…

  • Unscored —
    CVE-2018-14543

    There exists one NULL pointer dereference vulnerability in AP4_JsonInspector::AddField in Ap4Atom.cpp in Bento4 1.5.1-6…

    kodi-inputstream-adaptive Ubuntu
  • Unscored —
    CVE-2018-14544

    There exists one invalid memory read bug in AP4_SampleDescription::GetFormat() in Ap4SampleDescription.h in Bento4 1.5.…

    kodi-inputstream-adaptive Ubuntu
  • Unscored —
    CVE-2018-14517

    SeaCMS 6.61 has two XSS issues in the admin_config.php file via certain form fields.