Skip to content
OpenAdvisories

Archive

24 August 2018

Vulnerabilities first published on this day (UTC), newest first.

← July 2018 2018 / August /24 September 2018 →
  1. 179
  2. 240
  3. 350
  4. 41
  5. 521
  6. 681
  7. 712
  8. 824
  9. 914
  10. 1028
  11. 11 
  12. 123
  13. 1336
  14. 1434
  15. 15109
  16. 1615
  17. 1729
  18. 188
  19. 19 
  20. 2067
  21. 2128
  22. 2225
  23. 2346
  24. 2434
  25. 2527
  26. 268
  27. 2727
  28. 2854
  29. 2946
  30. 3056
  31. 3113
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.4
    CVE-2018-14059 Public exploit

    Pimcore XSS Vulnerability

    Pimcore allows XSS via Users, Assets, Data Objects, Video Thumbnails, Image Thumbnails, Field-Collections, Objectbrick, Classification Store, Document Types, Predefined Properties, Predefined Asset Metadata, Quantity Value, and Static Routes functions.

    pimcore/pimcore Packagist
  • Medium 6.1
    CVE-2018-15605

    phpMyAdmin Cross-site Scripting (XSS) in the import dialog

    An issue was discovered in phpMyAdmin before 4.8.3. A Cross-Site Scripting vulnerability has been found where an attacker can use a crafted file to manipulate an authenticated user who loads that file through the import feature.

    phpmyadmin/phpmyadmin phpmyadmin Alpine Packagist
  • Medium 5.9
    CVE-2018-1755

    IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by incor…

    IBM WebSphere Application Server
  • Medium 6.3
    CVE-2018-1699

    IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to SQL injection. A remote attacker could send specially-cr…

    IBM Maximo Asset Management