Skip to content
OpenAdvisories

Archive

5 August 2018

Vulnerabilities first published on this day (UTC), newest first.

← July 2018 2018 / August /5 September 2018 →
  1. 179
  2. 240
  3. 350
  4. 41
  5. 521
  6. 681
  7. 712
  8. 824
  9. 914
  10. 1028
  11. 11 
  12. 123
  13. 1336
  14. 1434
  15. 15109
  16. 1615
  17. 1729
  18. 188
  19. 19 
  20. 2067
  21. 2128
  22. 2225
  23. 2346
  24. 2434
  25. 2527
  26. 268
  27. 2727
  28. 2854
  29. 2946
  30. 3056
  31. 3113
All Critical High Medium Low Exploited only Public exploit

21 results · Feed

  • Unscored —
    CVE-2018-14958

    An issue was discovered in WeaselCMS v0.3.5. CSRF can update the website settings (such as the theme, title, and descri…

  • Unscored —
    CVE-2018-14959

    An issue was discovered in WeaselCMS v0.3.5. CSRF can create new pages via an index.php?b=pages&a=new URI.

  • Unscored —
    CVE-2018-14939

    The get_app_path function in desktop/unx/source/start.c in LibreOffice through 6.0.5 mishandles the realpath function i…

  • Unscored —
    CVE-2018-14951

    The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<form action='data:text" attack.

    squirrelmail Ubuntu
  • Unscored —
    CVE-2018-14944

    An issue has been found in jpeg_encoder through 2015-11-27. It is a SEGV in the function readFromBMP in jpeg_encoder.cp…

  • Unscored —
    CVE-2018-14952

    The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math><maction xlink:href=" attack.

    squirrelmail Ubuntu
  • Unscored —
    CVE-2018-14948

    An issue has been found in dilawar sound through 2017-11-27. The end of openWavFile in wav-file.cc has Mismatched Memor…

  • Unscored —
    CVE-2018-14943

    Harmonic NSG 9000 devices have a default password of nsgadmin for the admin account, a default password of nsgguest for…

  • Unscored —
    CVE-2018-14955

    The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate to attribute).

    squirrelmail Ubuntu
  • Unscored —
    CVE-2018-14946

    An issue has been found in PDF2JSON 0.69. The HtmlString class in ImgOutputDev.cc has Mismatched Memory Management Rout…

  • Unscored —
    CVE-2018-14945

    An issue has been found in jpeg_encoder through 2015-11-27. It is a heap-based buffer overflow in the function readFrom…

  • Unscored —
    CVE-2018-14953

    The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math xlink:href=" attack.

    squirrelmail Ubuntu
  • Unscored —
    CVE-2018-14950

    The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<svg><a xlink:href=" attack.

    squirrelmail Ubuntu
  • Unscored —
    CVE-2018-14942

    Harmonic NSG 9000 devices allow remote authenticated users to conduct directory traversal attacks, as demonstrated by "…

  • Unscored —
    CVE-2018-14940

    PHPCMS 9 allows remote attackers to cause a denial of service (resource consumption) via large font_size, height, and w…

  • Unscored —
    CVE-2018-14941

    Harmonic NSG 9000 devices allow remote authenticated users to read the webapp.py source code via a direct request for t…

  • Unscored —
    CVE-2018-14947

    An issue has been found in PDF2JSON 0.69. XmlFontAccu::CSStyle in XmlFonts.cc has Mismatched Memory Management Routines…

  • Unscored —
    CVE-2018-14954

    The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute.

    squirrelmail Ubuntu
  • Unscored —
    CVE-2018-14938

    An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the fu…

    tcpflow tcpflow tcpflow Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-14937

    The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field.

  • Unscored —
    CVE-2018-14936

    The Add page option in my little forum 2.4.12 allows XSS via the Title field.