Skip to content
OpenAdvisories

Archive

15 August 2018

Vulnerabilities first published on this day (UTC), newest first.

← July 2018 2018 / August /15 September 2018 →
  1. 179
  2. 240
  3. 350
  4. 41
  5. 521
  6. 681
  7. 712
  8. 824
  9. 914
  10. 1028
  11. 11 
  12. 123
  13. 1336
  14. 1434
  15. 15109
  16. 1615
  17. 1729
  18. 188
  19. 19 
  20. 2067
  21. 2128
  22. 2225
  23. 2346
  24. 2434
  25. 2527
  26. 268
  27. 2727
  28. 2854
  29. 2946
  30. 3056
  31. 3113
All Critical High Medium Low Exploited only Public exploit

109 results · Feed

  • Unscored —
    CVE-2018-8345 EPSS 15%

    A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file…

    Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows
  • High 8.8
    CVE-2018-8414 Exploited Public exploit EPSS 73%

    A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows…

    Microsoft Windows 10 Windows 10 Servers Windows
    KEV Mar 25, 2022
  • High 7.5
    CVE-2018-8380 EPSS 15%

    ChakraCore remote code execution vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2018-8253

    An elevation of privilege vulnerability exists when Microsoft Cortana allows arbitrary website browsing on the lockscre…

    Microsoft Windows Server 2016 Windows 10 Windows
  • Unscored —
    CVE-2018-8400

    An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obj…

    Microsoft Windows 10 Windows 10 Servers Windows
  • Unscored —
    CVE-2018-8379 EPSS 18%

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…

    Microsoft Microsoft Excel
  • Unscored —
    CVE-2018-8351

    An information disclosure vulnerability exists when affected Microsoft browsers improperly allow cross-frame interactio…

    Microsoft Microsoft Edge Internet Explorer 11 Internet Explorer 10 Browsers
  • High 7.5
    CVE-2018-8385 EPSS 15%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft…

    Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet
  • Unscored —
    CVE-2018-8399

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

    Microsoft Windows 10 Windows 10 Servers Windows
  • Unscored —
    CVE-2018-8358

    A security feature bypass vulnerability exists when Microsoft Edge improperly handles redirect requests, aka "Microsoft…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-15150

    SQL injection vulnerability in interface/de_identification_forms/de_identification_screen2.php in versions of OpenEMR b…

  • Unscored —
    CVE-2018-15148

    SQL injection vulnerability in interface/patient_file/encounter/search_code.php in versions of OpenEMR before 5.0.1.4 a…

  • Unscored —
    CVE-2018-15155 EPSS 10%

    OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute …

  • Unscored —
    CVE-2018-15156 EPSS 10%

    OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute …

  • Unscored —
    CVE-2018-15172 Public exploit

    TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header.

  • Unscored —
    CVE-2018-15152 Public exploit EPSS 25%

    Authentication bypass vulnerability in portal/account/register.php in versions of OpenEMR before 5.0.1.4 allows a remot…

  • Unscored —
    CVE-2018-15153 EPSS 61%

    OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute …

  • Unscored —
    CVE-2018-15146

    SQL injection vulnerability in interface/de_identification_forms/find_immunization_popup.php in versions of OpenEMR bef…

  • Unscored —
    CVE-2018-15147

    SQL injection vulnerability in interface/forms_admin/forms_admin.php from library/registry.inc in versions of OpenEMR b…

  • Unscored —
    CVE-2018-15149

    SQL injection vulnerability in interface/forms/eye_mag/php/Anything_simple.php from library/forms.inc in versions of Op…

  • Unscored —
    CVE-2018-15138 Scanner template EPSS 13%

    Ericsson-LG iPECS NMS 30M allows directory traversal via ipecs-cm/download?filename=../ URIs.

  • Unscored —
    CVE-2018-15151

    SQL injection vulnerability in interface/de_identification_forms/find_code_popup.php in versions of OpenEMR before 5.0.…

  • Unscored —
    CVE-2018-15154 EPSS 10%

    OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute …

  • Medium 6.8
    CVE-2018-10917

    pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repo…

    [UNKNOWN] pulp
  • Unscored —
    CVE-2018-10369

    A Cross-site scripting (XSS) vulnerability was discovered on Intelbras Win 240 V1.1.0 devices. An attacker can change t…

  • Medium 4.3
    CVE-2018-1455

    IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site request forgery which cou…

    IBM Tivoli Application Dependency Discovery Manager
  • Unscored —
    CVE-2018-13393

    The convertCommentToAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Conf…

    Atlassian Confluence Questions Web / CMS
  • Unscored —
    CVE-2018-13394

    The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Que…

    Atlassian Confluence Questions Web / CMS
  • Unscored —
    CVE-2018-6973

    VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds write vulnerability in…

    VMware Workstation Fusion