Skip to content
OpenAdvisories

Archive

2 August 2018

Vulnerabilities first published on this day (UTC), newest first.

← July 2018 2018 / August /2 September 2018 →
  1. 179
  2. 240
  3. 350
  4. 41
  5. 521
  6. 681
  7. 712
  8. 824
  9. 914
  10. 1028
  11. 11 
  12. 123
  13. 1336
  14. 1434
  15. 15109
  16. 1615
  17. 1729
  18. 188
  19. 19 
  20. 2067
  21. 2128
  22. 2225
  23. 2346
  24. 2434
  25. 2527
  26. 268
  27. 2727
  28. 2854
  29. 2946
  30. 3056
  31. 3113
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 5.4
    CVE-2017-6213

    paypal/invoice-sdk-php reflected XSS

    paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution.

    paypal/invoice-sdk-php Packagist
  • Medium 5.4
    CVE-2017-6215

    paypal/permissions-sdk-php reflected Cross-site Scripting (XSS)

    paypal/permissions-sdk-php is vulnerable to reflected XSS in the samples/GetAccessToken.php verification_code parameter, resulting in code execution.

    paypal/permissions-sdk-php Packagist
  • Medium 6.4
    CVE-2017-16349

    An exploitable XML external entity vulnerability exists in the reporting functionality of SAP BPC. A specially crafted …

    Insteon SAP
  • Medium 5.4
    CVE-2017-14445

    An exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server imple…

    Insteon Insteon
  • Medium 4.3
    CVE-2018-10921

    Certain input files may trigger an integer overflow in ttembed input file processing. This overflow could potentially l…

    [UNKNOWN] ttembed
  • Medium 5.4
    CVE-2018-1554

    IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra…

    IBM Maximo Asset Management
  • Medium 5.9
    CVE-2018-8037 EPSS 11%

    Apache Tomcat Race Condition vulnerability

    If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for a different user. An additional issue was present in the NI…

    Apache Software Foundation Apache Tomcat tomcat8 org.apache.tomcat.embed:tomcat-embed-core Ubuntu Maven
  • Medium 6.1
    CVE-2018-8032 Public exploit EPSS 11%

    Moderate severity vulnerability that affects apache axis

    Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.

    Apache Software Foundation Apache Axis axis org.apache.axis:axis Debian Ubuntu Maven
  • Medium 6.1
    CVE-2018-14840 Public exploit

    Subrion CMS Cross-site Scripting

    uploads/.htaccess in Subrion CMS 4.2.1 allows XSS because it does not block .html file uploads (but does block, for example, .htm file uploads).

    intelliants/subrion Packagist
  • Medium 5.4
    CVE-2018-14835

    Subrion CMS XSS

    Subrion CMS v4.2.1 is vulnerable to Stored XSS because of no escaping added to the tooltip information being displayed in multiple areas.

    intelliants/subrion Packagist