Skip to content
OpenAdvisories

Archive

24 July 2018

Vulnerabilities first published on this day (UTC), newest first.

← June 2018 2018 / July /24 August 2018 →
  1. 18
  2. 266
  3. 3113
  4. 416
  5. 5133
  6. 696
  7. 78
  8. 89
  9. 9431
  10. 1087
  11. 1198
  12. 1235
  13. 1386
  14. 14 
  15. 1512
  16. 1644
  17. 1732
  18. 18253
  19. 1956
  20. 20157
  21. 211
  22. 223
  23. 2361
  24. 2449
  25. 2533
  26. 2644
  27. 2777
  28. 289
  29. 2910
  30. 3014
  31. 31129
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2018-11047

    Cloud Foundry UAA accepts refresh token as access token on admin endpoints

    Cloud Foundry UAA, versions 4.19 prior to 4.19.2 and 4.12 prior to 4.12.4 and 4.10 prior to 4.10.2 and 4.7 prior to 4.7.6 and 4.5 prior to 4.5.7, incorrectly authorizes requests to admin endpoints by accepting a valid refresh token in lieu of an access token.…

    Cloud Foundry Cloud Foundry UAA org.cloudfoundry.identity:cloudfoundry-identity-server Maven
  • High 8.2
    CVE-2018-11059

    RSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerability. A remote authenticated mali…

    DELL EMC RSA Archer
  • High 8.8
    CVE-2018-11060

    RSA Archer, versions prior to 6.4.0.1, contain an authorization bypass vulnerability in the REST API. A remote authenti…

    DELL EMC RSA Archer
  • High 7.5
    CVE-2018-5387

    Wizkunde SAMLBase SAML Bypass

    Wizkunde SAMLBase may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially by…

    Wizkunde SAMLBase gogentooss/samlbase Packagist
  • High 7.8
    CVE-2018-10905

    CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby component of CloudForms.…

    [UNKNOWN] CFME