Skip to content
OpenAdvisories

Archive

July 2018

Vulnerabilities first published in this month (UTC), newest first.

← June 2018 2018 / July August 2018 →
  1. 18
  2. 266
  3. 3113
  4. 416
  5. 5133
  6. 696
  7. 78
  8. 89
  9. 9431
  10. 1087
  11. 1198
  12. 1235
  13. 1386
  14. 14 
  15. 1512
  16. 1644
  17. 1732
  18. 18253
  19. 1956
  20. 20157
  21. 211
  22. 223
  23. 2361
  24. 2449
  25. 2533
  26. 2644
  27. 2777
  28. 289
  29. 2910
  30. 3014
  31. 31129
All Critical High Medium Low Exploited only Public exploit

92 results · Clear filters · Feed

  • Unscored —
    CVE-2018-13405 Public exploit

    The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2018-13109 Public exploit EPSS 35%

    All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerabil…

  • Unscored —
    CVE-2018-12739 Public exploit

    In BEESCMS 4.0, CSRF allows administrators to be added arbitrarily, a related issue to CVE-2018-10266.

  • Unscored —
    CVE-2018-12520 Public exploit EPSS 10%

    An issue was discovered in ntopng 3.4 before 3.4.180617. The PRNG involved in the generation of session IDs is not seed…

    ntopng Ubuntu
  • Unscored —
    CVE-2018-8738 Public exploit

    Airties 5444 1.0.0.18 and 5444TT 1.0.0.18 devices allow XSS.

  • High —
    CVE-2018-8038 Public exploit EPSS 10%

    High severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, org.apache.cxf.fediz:fediz-spring, org.apache.cxf.fediz:fediz-spring2, and org.apache.cxf.fediz:fediz-spring3

    Versions of Apache CXF Fediz prior to 1.4.4 do not fully disable Document Type Declarations (DTDs) when either parsing the Identity Provider response in the application plugins, or in the Identity Provider itself when parsing certain XML-based parameters.

    Apache Software Foundation Apache CXF Fediz org.apache.cxf.fediz:fediz-spring2 org.apache.cxf.fediz:fediz-spring Maven
  • High 7.5
    CVE-2018-12018 Public exploit

    Go Ethereum LES protocol implementation vulnerable to Denial of Service

    The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation because of an integer signedness error for the array index, which allows attackers to launch a Denial of Service attack b…

    github.com/ethereum/go-ethereum Go
  • Unscored —
    CVE-2018-13134 Public exploit

    TP-Link Archer C1200 1.13 Build 2018/01/24 rel.52299 EU devices have XSS via the PATH_INFO to the /webpages/data URI.

  • Unscored —
    CVE-2018-7777 Public exploit EPSS 32%

    The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider El…

    Schneider Electric U.Motion ICS / OT
  • High 7.2
    CVE-2018-9276 Exploited Public exploit EPSS 87%

    An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administr…

    KEV Feb 4, 2025
  • High 8.1
    CVE-2018-8039 Public exploit

    Apache CXF TLS hostname verification does not work correctly with com.sun.net.ssl.*

    It is possible to configure Apache CXF to use the com.sun.net.ssl implementation via 'System.setProperty("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol");'. When this system property is set, CXF uses some reflection to try to make the Ho…

    Apache Software Foundation Apache CXF org.apache.cxf:apache-cxf org.apache.cxf:cxf-rt-transports-http Maven
  • Unscored —
    CVE-2018-13032 Public exploit

    ECESSA ShieldLink SL175EHQ 10.7.4 devices have CSRF to add superuser accounts via the cgi-bin/pl_web.cgi/util_configlog…