Skip to content
OpenAdvisories

Archive

1 August 2018

Vulnerabilities first published on this day (UTC), newest first.

← July 2018 2018 / August /1 September 2018 →
  1. 179
  2. 240
  3. 350
  4. 41
  5. 521
  6. 681
  7. 712
  8. 824
  9. 914
  10. 1028
  11. 11 
  12. 123
  13. 1336
  14. 1434
  15. 15109
  16. 1615
  17. 1729
  18. 188
  19. 19 
  20. 2067
  21. 2128
  22. 2225
  23. 2346
  24. 2434
  25. 2527
  26. 268
  27. 2727
  28. 2854
  29. 2946
  30. 3056
  31. 3113
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • High 8.8
    CVE-2018-3924 EPSS 44%

    An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader versio…

    Foxit Foxit
  • High 8.0
    CVE-2018-3939

    An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1…

    Foxit Foxit
  • High 8.8
    CVE-2018-3847

    Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality of the CFITSIO library versio…

    nasa CFITSIO cfitsio cfitsio Debian Ubuntu
  • High 7.5
    CVE-2018-8034 EPSS 21%

    The host name verification missing in Apache Tomcat

    The host name verification when using TLS with the WebSocket client was missing. It is now enabled by default. Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.9, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, and 7.0.35 to 7.0.88.

    Apache Software Foundation Apache Tomcat tomcat8 tomcat7 Ubuntu Maven
  • High 8.8
    CVE-2018-1595

    IBM Spectrum Symphony and Platform Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to execute arbitrary co…

    IBM Spectrum Symphony
  • High 8.8
    CVE-2018-10897

    A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remot…

    The RPM Project yum-utils:
  • High 7.8
    CVE-2016-8654

    A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too smal…

    The Jasper Project jasper jasper Ubuntu
  • High 8.8
    CVE-2018-3922

    A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54. A specially…

    Computerinsel Computerinsel Photoline
  • High 8.8
    CVE-2018-3923

    A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.54. A specially…

    Computerinsel Computerinsel Photoline
  • High 8.8
    CVE-2018-3921

    A memory corruption vulnerability exists in the PSD-parsing functionality of Computerinsel Photoline 20.54. A specially…

    Computerinsel Computerinsel Photoline
  • High 7.2
    CVE-2016-8648

    It was found that the Karaf container used by Red Hat JBoss Fuse 6.x, and Red Hat JBoss A-MQ 6.x, deserializes objects …

    Apache Software Foundation Karaf
  • High 8.8
    CVE-2018-1999040

    Exposure of Sensitive Information in Jenkins Kubernetes Plugin

    An exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.10.1 and earlier in KubernetesCloud.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.

    org.csanchez.jenkins.plugins:kubernetes Maven
  • High 7.4
    CVE-2018-1999035

    Jenkins Inedo BuildMaster Plugin globally and unconditionally disabled SSL/TLS certificate validation

    A man in the middle vulnerability exists in Jenkins Inedo BuildMaster Plugin 1.3 and earlier in BuildMasterConfiguration.java, BuildMasterConfig.java, BuildMasterApi.java that allows attackers to impersonate any service that Jenkins connects to.

    com.inedo.buildmaster:inedo-buildmaster Maven
  • High 7.4
    CVE-2018-1999034

    Jenkins Inedo ProGet Plugin globally and unconditionally disabled SSL/TLS certificate validation

    A man in the middle vulnerability exists in Jenkins Inedo ProGet Plugin 0.8 and earlier in ProGetApi.java, ProGetConfig.java, ProGetConfiguration.java that allows attackers to impersonate any service that Jenkins connects to.

    com.inedo.proget:inedo-proget Maven
  • High 8.8
    CVE-2018-1999028

    Jenkins Accurev Plugin CSRF vulnerability and missing permission checks

    An exposure of sensitive information vulnerability exists in Jenkins Accurev Plugin 0.7.16 and earlier in AccurevSCM.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.

    org.jenkins-ci.plugins:accurev Maven
  • High 7.4
    CVE-2018-1999025

    Jenkins TraceTronic ECU-TEST Plugin Man in the middle vulnerability

    A man in the middle vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublisher.java, ATXValidator.java that allows attackers to impersonate any service that Jenkins connects to.

    de.tracetronic.jenkins.plugins:ecutest Maven