Skip to content
OpenAdvisories

Archive

3 August 2018

Vulnerabilities first published on this day (UTC), newest first.

← July 2018 2018 / August /3 September 2018 →
  1. 179
  2. 240
  3. 350
  4. 41
  5. 521
  6. 681
  7. 712
  8. 824
  9. 914
  10. 1028
  11. 11 
  12. 123
  13. 1336
  14. 1434
  15. 15109
  16. 1615
  17. 1729
  18. 188
  19. 19 
  20. 2067
  21. 2128
  22. 2225
  23. 2346
  24. 2434
  25. 2527
  26. 268
  27. 2727
  28. 2854
  29. 2946
  30. 3056
  31. 3113
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2018-13055

    MantisBT allows XSS via View Filters page

    A cross-site scripting (XSS) vulnerability in the View Filters page (view_filters_page.php) in MantisBT 2.1.0 through 2.15.0 allows remote attackers to inject arbitrary code (if CSP settings permit it) through a crafted PATH_INFO.

    mantisbt/mantisbt Packagist
  • Medium 6.1
    CVE-2018-14504

    MantisBT allows XSS on the Edit Filter page via crafted filter name

    An issue was discovered in manage_filter_edit_page.php in MantisBT 2.x through 2.15.0. A cross-site scripting (XSS) vulnerability in the Edit Filter page allows execution of arbitrary code (if CSP settings permit it) when displaying a filter with a crafted na…

    mantisbt/mantisbt Packagist
  • Medium 6.1
    CVE-2018-14574 Scanner template EPSS 25%

    Django open redirect

    django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect.

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • Medium 6.5
    CVE-2018-14773 EPSS 58%

    Symfony HTTP Foundation web cache poisoning

    An issue was discovered in Http Foundation in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. It arises from support for a (legacy) IIS header that lets users overr…

    symfony/symfony symfony symfony symfony/http-foundation Debian Ubuntu Packagist