Skip to content
OpenAdvisories

Archive

17 August 2018

Vulnerabilities first published on this day (UTC), newest first.

← July 2018 2018 / August /17 September 2018 →
  1. 179
  2. 240
  3. 350
  4. 41
  5. 521
  6. 681
  7. 712
  8. 824
  9. 914
  10. 1028
  11. 11 
  12. 123
  13. 1336
  14. 1434
  15. 15109
  16. 1615
  17. 1729
  18. 188
  19. 19 
  20. 2067
  21. 2128
  22. 2225
  23. 2346
  24. 2434
  25. 2527
  26. 268
  27. 2727
  28. 2854
  29. 2946
  30. 3056
  31. 3113
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Unscored —
    CVE-2018-6622 Public exploit

    An issue was discovered that affects all producers of BIOS firmware who make a certain realistic interpretation of an o…

  • High 8.8
    CVE-2018-14057 Public exploit

    Pimcore CSRF Vulnerability

    Pimcore before 5.3.0 allows remote attackers to conduct cross-site request forgery (CSRF) attacks by leveraging validation of the X-pimcore-csrf-token anti-CSRF token only in the "Settings > Users / Roles" function.

    pimcore/pimcore Packagist
  • Medium 6.5
    CVE-2018-14058 Public exploit EPSS 29%

    Pimcore SQLi Vulnerability

    Pimcore before 5.3.0 allows SQL Injection via the REST web service API.

    pimcore/pimcore Packagist
  • Critical 9.8
    CVE-2018-3783 Public exploit

    Privilege Escalation due to Blind NoSQL Injection in flintcms

    A privilege escalation detected in flintcms versions <= 1.1.9 allows account takeover due to blind MongoDB injection in password reset.

    https://github.com/JasonEtco flintcms flintcms npm
  • Medium 5.9
    CVE-2018-15473 Public exploit EPSS 99%

    OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticat…

    openssh openssh openssh Debian Ubuntu Alpine