Skip to content
OpenAdvisories

Archive

9 August 2018

Vulnerabilities first published on this day (UTC), newest first.

← July 2018 2018 / August /9 September 2018 →
  1. 179
  2. 240
  3. 350
  4. 41
  5. 521
  6. 681
  7. 712
  8. 824
  9. 914
  10. 1028
  11. 11 
  12. 123
  13. 1336
  14. 1434
  15. 15109
  16. 1615
  17. 1729
  18. 188
  19. 19 
  20. 2067
  21. 2128
  22. 2225
  23. 2346
  24. 2434
  25. 2527
  26. 268
  27. 2727
  28. 2854
  29. 2946
  30. 3056
  31. 3113
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • Unscored —
    CVE-2018-7686

    Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage.

    Micro Focus eDirectory (ZDI)
  • Unscored —
    CVE-2018-7692

    Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1.

    Micro Focus NetIQ eDirectory Versions prior to 9.1.1 HF1
  • High 7.1
    CVE-2018-10925

    It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check aut…

    PostgreSQL Global Development Group PostgreSQL postgresql15 postgresql-9.5 Ubuntu Alpine
  • Unscored —
    CVE-2018-0429

    Stack-based buffer overflow in the Cisco Thor decoder before commit 18de8f9f0762c3a542b1122589edb8af859d9813 allows loc…

  • Critical 9.8
    CVE-2018-10931 EPSS 68%

    Cobbler has Exposed Dangerous Method or Function

    It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC. A remote, unauthenticated attacker could use this flaw to gain high privileges within cobbler, upload files to arbitrary location in the context of the da…

    The cobbler Project cobbler cobbler cobbler Ubuntu PyPI
  • High 8.5
    CVE-2018-10915

    A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its inte…

    PostgreSQL Global Development Group PostgreSQL postgresql-9.3 postgresql15 Ubuntu Alpine
  • Unscored —
    CVE-2018-14735

    An Information Exposure issue was discovered in Hitachi Command Suite 8.5.3. A remote attacker may be able to exploit a…

  • Unscored —
    CVE-2018-15184

    PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to …

  • High 8.1
    CVE-2018-15133 Exploited Public exploit EPSS 77%

    Laravel Framework RCE Vulnerability

    In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value. This involves the decrypt method in Illuminate/Encryption/Encrypter.php and Pendi…

    laravel/framework Packagist
    KEV Jan 16, 2024
  • Unscored —
    CVE-2018-15182

    PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields.

  • Unscored —
    CVE-2018-15181 Public exploit

    JioFi 4G Hotspot M2S devices allow attackers to cause a denial of service (secure configuration outage) via an XSS payl…

  • Unscored —
    CVE-2018-15183

    PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the Full Name and Title field…

  • Medium 6.5
    CVE-2018-10908

    It was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without limiting resources. By uploa…

    [UNKNOWN] vdsm
  • Unscored —
    CVE-2018-6922

    One of the data structures that holds TCP segments in all versions of FreeBSD prior to 11.2-RELEASE-p1, 11.1-RELEASE-p1…

    FreeBSD FreeBSD