Skip to content
OpenAdvisories

Archive

16 August 2018

Vulnerabilities first published on this day (UTC), newest first.

← July 2018 2018 / August /16 September 2018 →
  1. 179
  2. 240
  3. 350
  4. 41
  5. 521
  6. 681
  7. 712
  8. 824
  9. 914
  10. 1028
  11. 11 
  12. 123
  13. 1336
  14. 1434
  15. 15109
  16. 1615
  17. 1729
  18. 188
  19. 19 
  20. 2067
  21. 2128
  22. 2225
  23. 2346
  24. 2434
  25. 2527
  26. 268
  27. 2727
  28. 2854
  29. 2946
  30. 3056
  31. 3113
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Unscored —
    CVE-2018-11511 Public exploit Scanner template EPSS 11%

    The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3 has a SQL injection vulnerabilit…

  • Unscored —
    CVE-2018-11509 Public exploit EPSS 12%

    ASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin username and password as it does for the NAS itself for applica…

  • Unscored —
    CVE-2018-13446

    An issue was discovered in the LINE jp.naver.line application 8.8.1 for Android. The Passcode feature allows authentica…

  • Unscored —
    CVE-2018-13434

    An issue was discovered in the LINE jp.naver.line application 8.8.0 for iOS. The LAContext class for Biometric (TouchID…

  • Unscored —
    CVE-2018-13435

    An issue was discovered in the LINE jp.naver.line application 8.8.0 for iOS. The Passcode feature allows authentication…

  • Unscored —
    CVE-2018-12256

    admin/vqmods.app/vqmods.inc.php in LiteCart before 2.1.3 allows remote authenticated attackers to upload a malicious fi…

  • Unscored —
    CVE-2018-15122

    An issue found in Progress Telerik JustAssembly through 2018.1.323.2 and JustDecompile through 2018.2.605.0 makes it po…

  • Unscored —
    CVE-2018-14567

    libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a craft…

    libxml2 libxml2 libxml2 Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-9596

    libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause …

  • Unscored —
    CVE-2016-9598

    libxml2, as used in Red Hat JBoss Core Services, allows context-dependent attackers to cause a denial of service (out-o…

  • High 8.6
    CVE-2018-1712

    IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery. An attacker, u…

    IBM API Connect
  • Unscored —
    CVE-2018-10139

    The PAN-OS response for GlobalProtect Gateway in Palo Alto Networks PAN-OS 6.1.21 and earlier, PAN-OS 7.1.18 and earlie…

    Palo Alto Networks PAN-OS Network devices
  • Unscored —
    CVE-2018-10140

    The PAN-OS Management Web Interface in Palo Alto Networks PAN-OS 8.1.2 and earlier may allow an authenticated user to s…

    Palo Alto Networks PAN-OS Network devices
  • Medium 5.5
    CVE-2018-11771

    Moderate severity vulnerability that affects org.apache.commons:commons-compress

    When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17's ZipArchiveInputStream can fail to return the correct EOF indication after the end of the stream has been reached. When combined with a java.io.InputStreamRe…

    Apache Software Foundation Apache Commons Compress org.apache.commons:commons-compress libcommons-compress-java Debian Ubuntu Maven
  • Medium 5.4
    CVE-2018-1715

    IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to cross-site scripting. This vulnerability allows users to…

    IBM Maximo Asset Management