Skip to content
OpenAdvisories

Archive

July 2018

Vulnerabilities first published in this month (UTC), newest first.

← June 2018 2018 / July August 2018 →
  1. 18
  2. 266
  3. 3113
  4. 416
  5. 5133
  6. 696
  7. 78
  8. 89
  9. 9431
  10. 1087
  11. 1198
  12. 1235
  13. 1386
  14. 14 
  15. 1512
  16. 1644
  17. 1732
  18. 18253
  19. 1956
  20. 20157
  21. 211
  22. 223
  23. 2361
  24. 2449
  25. 2533
  26. 2644
  27. 2777
  28. 289
  29. 2910
  30. 3014
  31. 31129
All Critical High Medium Low Exploited only Public exploit

2,170 results · Feed

  • Unscored —
    CVE-2018-4856

    A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with …

    Siemens SICLOCK TC100, SICLOCK TC400 ICS / OT
  • Unscored —
    CVE-2018-4854

    A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with …

    Siemens SICLOCK TC100, SICLOCK TC400 ICS / OT
  • High 8.6
    CVE-2018-11746

    Puppet Discovery can leak authentication information

    In Puppet Discovery prior to 1.2.0, when running Discovery against Windows hosts, WinRM connections can fall back to using basic auth over insecure channels if a HTTPS server is not available. This can expose the login credentials being used by Puppet Discove…

    Puppet Puppet Discovery
  • Unscored —
    CVE-2018-13065

    ModSecurity 3.0.0 has XSS via an onerror attribute of an IMG element. NOTE: a third party has disputed this issue becau…

  • Unscored —
    CVE-2018-13101

    KioskSimpleService.exe in RedSwimmer KioskSimple 1.4.7.0 suffers from a privilege escalation vulnerability in the WCF e…

  • Unscored —
    CVE-2018-12255

    An XSS issue was discovered in InvoicePlane 1.5.10 via the "Quote PDF Password(Optional)" field.

  • Unscored —
    CVE-2018-13094

    An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a co…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2018-13095

    An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.17.3. A denial of service (memor…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2018-13093

    An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference …

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2018-13097

    An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3. There is an out-of-bounds read or a divi…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2018-13100

    An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3, which does not properly validate secs_pe…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2018-13099

    An issue was discovered in fs/f2fs/inline.c in the Linux kernel through 4.4. A denial of service (out-of-bounds memory …

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2018-13096

    An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.14. A denial of service (out-of-bounds memory …

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2018-13098

    An issue was discovered in fs/f2fs/inode.c in the Linux kernel through 4.17.3. A denial of service (slab out-of-bounds …

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2018-11314

    The External Control API in Roku and Roku TV products allow unauthorized access via a DNS Rebind attack. This can resul…

  • Unscored —
    CVE-2018-13113

    The transfer and transferFrom functions of a smart contract implementation for Easy Trading Token (ETT), an Ethereum to…

  • Unscored —
    CVE-2018-13083

    The mintToken function of a smart contract implementation for Plaza Token (PLAZA), an Ethereum token, has an integer ov…

  • Unscored —
    CVE-2018-13080

    The mintToken function of a smart contract implementation for Goutex (GTX), an Ethereum token, has an integer overflow …

  • Unscored —
    CVE-2018-13087

    The mintToken function of a smart contract implementation for Coinstar (CSTR), an Ethereum token, has an integer overfl…

  • Unscored —
    CVE-2018-13088

    The mintToken function of a smart contract implementation for Futures Pease (FP), an Ethereum token, has an integer ove…

  • Unscored —
    CVE-2018-13077

    The mintToken function of a smart contract implementation for CTB, an Ethereum token, has an integer overflow that allo…

  • Unscored —
    CVE-2018-13084

    The mintToken function of a smart contract implementation for Good Time Coin (GTY), an Ethereum token, has an integer o…

  • Unscored —
    CVE-2018-13085

    The mintToken function of a smart contract implementation for FreeCoin (FREE), an Ethereum token, has an integer overfl…

  • Unscored —
    CVE-2018-13079

    The mintToken function of a smart contract implementation for GoodTo (GTO), an Ethereum token, has an integer overflow …

  • Unscored —
    CVE-2018-13092

    The mintToken function of a smart contract implementation for Reimburse Token (REIM), an Ethereum token, has an integer…

  • Unscored —
    CVE-2018-13074

    The mintToken function of a smart contract implementation for FIBToken (FIB), an Ethereum token, has an integer overflo…

  • Unscored —
    CVE-2018-13090

    The mintToken function of a smart contract implementation for YiTongCoin (YTC), an Ethereum token, has an integer overf…

  • Unscored —
    CVE-2018-13071

    The mintToken function of a smart contract implementation for CCindex10 (T10), an Ethereum token, has an integer overfl…

  • Unscored —
    CVE-2018-13072

    The mintToken function of a smart contract implementation for Coffeecoin (COFFEE), an Ethereum token, has an integer ov…

  • Unscored —
    CVE-2018-13089

    The mintToken function of a smart contract implementation for Universal Coin (UCOIN), an Ethereum token, has an integer…

  • Unscored —
    CVE-2018-13070

    The mintToken function of a smart contract implementation for EncryptedToken (ECC), an Ethereum token, has an integer o…

  • Unscored —
    CVE-2018-13091

    The mintToken function of a smart contract implementation for sumocoin (SUMO), an Ethereum token, has an integer overfl…

  • Unscored —
    CVE-2018-13082

    The mintToken function of a smart contract implementation for MODI Token (MODI), an Ethereum token, has an integer over…

  • Unscored —
    CVE-2018-13081

    The mintToken function of a smart contract implementation for GZS Token (GZS), an Ethereum token, has an integer overfl…

  • Unscored —
    CVE-2018-13086

    The mintToken function of a smart contract implementation for IADOWR Coin (IAD), an Ethereum token, has an integer over…

  • Unscored —
    CVE-2018-13069

    The mintToken function of a smart contract implementation for DYchain (DYC), an Ethereum token, has an integer overflow…

  • Unscored —
    CVE-2018-13073

    The mintToken function of a smart contract implementation for ETHEREUMBLACK (ETCBK), an Ethereum token, has an integer …

  • Unscored —
    CVE-2018-13068

    The mintToken function of a smart contract implementation for AzurionToken (AZU), an Ethereum token, has an integer ove…

  • Unscored —
    CVE-2018-13078

    The mintToken function of a smart contract implementation for Jitech (JTH), an Ethereum token, has an integer overflow …

  • Unscored —
    CVE-2018-13076

    The mintToken function of a smart contract implementation for Betcash (BC), an Ethereum token, has an integer overflow …