Skip to content
OpenAdvisories

Archive

24 August 2018

Vulnerabilities first published on this day (UTC), newest first.

← July 2018 2018 / August /24 September 2018 →
  1. 179
  2. 240
  3. 350
  4. 41
  5. 521
  6. 681
  7. 712
  8. 824
  9. 914
  10. 1028
  11. 11 
  12. 123
  13. 1336
  14. 1434
  15. 15109
  16. 1615
  17. 1729
  18. 188
  19. 19 
  20. 2067
  21. 2128
  22. 2225
  23. 2346
  24. 2434
  25. 2527
  26. 268
  27. 2727
  28. 2854
  29. 2946
  30. 3056
  31. 3113
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.4
    CVE-2018-14059 Public exploit

    Pimcore XSS Vulnerability

    Pimcore allows XSS via Users, Assets, Data Objects, Video Thumbnails, Image Thumbnails, Field-Collections, Objectbrick, Classification Store, Document Types, Predefined Properties, Predefined Asset Metadata, Quantity Value, and Static Routes functions.

    pimcore/pimcore Packagist
  • Unscored —
    CVE-2018-11502 Public exploit

    An issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB. It allows moderators to save notes and display …

  • Unscored —
    CVE-2018-15576 Public exploit

    An issue was discovered in EasyLogin Pro through 1.3.0. Encryptor.php contains an unserialize call that can be exploite…

  • Critical 9.8
    CVE-2018-3786 Public exploit EPSS 12%

    Command Injection in egg-scripts

    A command injection vulnerability in egg-scripts <v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line argument.

    Egg egg-scripts egg-scripts npm
  • Unscored —
    CVE-2018-15536 Public exploit

    /filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 does not properly validate file paths in ar…

  • Unscored —
    CVE-2018-15535 Public exploit Scanner template EPSS 45%

    /filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 uses external input to construct a pathname…

  • Unscored —
    CVE-2018-15120 Public exploit EPSS 11%

    libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a deni…

    pango1.0 pango pango1.0 Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-15499 Public exploit

    GEAR Software products that include GEARAspiWDM.sys, 2.2.5.0, allow local users to cause a denial of service (Race Cond…