Skip to content
OpenAdvisories

Archive

20 August 2018

Vulnerabilities first published on this day (UTC), newest first.

← July 2018 2018 / August /20 September 2018 →
  1. 179
  2. 240
  3. 350
  4. 41
  5. 521
  6. 681
  7. 712
  8. 824
  9. 914
  10. 1028
  11. 11 
  12. 123
  13. 1336
  14. 1434
  15. 15109
  16. 1615
  17. 1729
  18. 188
  19. 19 
  20. 2067
  21. 2128
  22. 2225
  23. 2346
  24. 2434
  25. 2527
  26. 268
  27. 2727
  28. 2854
  29. 2946
  30. 3056
  31. 3113
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.4
    CVE-2018-1656

    The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 ,…

    IBM SDK, Java Technology Edition
  • High 7.5
    CVE-2018-1000632

    Dom4j contains a XML Injection vulnerability

    dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable vi…

    dom4j dom4j org.dom4j:dom4j dom4j:dom4j Debian Ubuntu Maven
  • High 7.5
    CVE-2018-1000656

    Flask is vulnerable to Denial of Service via incorrect encoding of JSON data

    The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provid…

    flask flask flask Debian Ubuntu PyPI
  • High 7.5
    CVE-2011-2765

    Insecure temporary file handling

    pyro before 3.15 unsafely handles pid files in temporary directory locations and opening the pid file as root. An attacker can use this flaw to overwrite arbitrary files via symlinks.

    pyro PyPI
  • High 7.5
    CVE-2018-15560

    PyCryptodome integer overflow vulnerability

    PyCryptodome before 3.6.6 has an integer overflow in the data_len variable in AESNI.c, related to the AESNI_encrypt and AESNI_decrypt functions, leading to the mishandling of messages shorter than 16 bytes.

    pycryptodome PyPI