Skip to content
OpenAdvisories

Archive

July 2018

Vulnerabilities first published in this month (UTC), newest first.

2,170 results · Feed

  • Unscored —
    CVE-2018-13050 EPSS 39%

    A SQL Injection vulnerability exists in Zoho ManageEngine Applications Manager 13.x before build 13800 via the j_userna…

  • Unscored —

    The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by …

  • Unscored —

    scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe YAML loading because Y…

  • Unscored —

    OpenSID 18.06-pasca has a CSRF vulnerability. This vulnerability can add an account (at the admin level) via the index.…

  • Unscored —

    OpenSID 18.06-pasca has an Unrestricted File Upload vulnerability via an Attachment Document in the article feature. Th…

  • Unscored —

    The mint function of a smart contract implementation for Link Platform (LNK), an Ethereum ERC20 token, has an integer o…

  • Unscored —

    OpenSID 18.06-pasca has reflected Cross Site Scripting (XSS) via the cari parameter, aka an index.php/first?cari= URI.

  • Unscored —

    An issue was discovered in jpeg-compressor 0.1. The bmp_load function in stb_image.c allows remote attackers to cause a…

  • Unscored —
    CVE-2018-13032 Public exploit

    ECESSA ShieldLink SL175EHQ 10.7.4 devices have CSRF to add superuser accounts via the cgi-bin/pl_web.cgi/util_configlog…

  • Unscored —

    The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to …