Skip to content
OpenAdvisories

Archive

28 August 2018

Vulnerabilities first published on this day (UTC), newest first.

← July 2018 2018 / August /28 September 2018 →
  1. 179
  2. 240
  3. 350
  4. 41
  5. 521
  6. 681
  7. 712
  8. 824
  9. 914
  10. 1028
  11. 11 
  12. 123
  13. 1336
  14. 1434
  15. 15109
  16. 1615
  17. 1729
  18. 188
  19. 19 
  20. 2067
  21. 2128
  22. 2225
  23. 2346
  24. 2434
  25. 2527
  26. 268
  27. 2727
  28. 2854
  29. 2946
  30. 3056
  31. 3113
All Critical High Medium Low Exploited only Public exploit

54 results · Feed

  • Unscored —
    CVE-2018-15839 Public exploit EPSS 45%

    D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header.

  • Unscored —
    CVE-2018-15529

    A command injection vulnerability in maintenance.cgi in Mutiny "Monitoring Appliance" before 6.1.0-5263 allows authenti…

  • Unscored —
    CVE-2014-4932

    Cross-site scripting (XSS) vulnerability in the Wordfence Security plugin before 5.1.5 for WordPress allows remote atta…

  • Unscored —
    CVE-2014-6046 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyFAQ before 2.8.13 allow remote attackers to hijack t…

  • Unscored —
    CVE-2014-6045 Public exploit

    SQL injection vulnerability in phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to exe…

  • Unscored —
    CVE-2014-6047 Public exploit

    phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leve…

  • Unscored —
    CVE-2014-6050 Public exploit

    phpMyFAQ before 2.8.13 allows remote attackers to bypass the CAPTCHA protection mechanism by replaying the request.

  • Unscored —
    CVE-2014-6048 Public exploit

    phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request.

  • Unscored —
    CVE-2014-6049 Public exploit

    phpMyFAQ before 2.8.13 allows remote authenticated users with admin privileges to bypass authorization via a crafted in…

  • Unscored —
    CVE-2018-13391

    The ProfileLinkUserFormat component of Jira Server before version 7.6.8, from version 7.7.0 before version 7.7.5, from …

    Atlassian Jira Web / CMS
  • Unscored —
    CVE-2018-13395

    Various resources in Atlassian Jira before version 7.6.8, from version 7.7.0 before version 7.7.5, from version 7.8.0 b…

    Atlassian Jira Web / CMS
  • Medium 6.5
    CVE-2018-1705

    IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 contain an information discl…

    IBM Spectrum Symphony Platform Symphony
  • Medium 5.3
    CVE-2018-15919

    Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existen…

    openssh openssh openssh-ssh1 Debian Ubuntu
  • Unscored —
    CVE-2018-15911

    In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memo…

    ghostscript ghostscript ghostscript Debian Ubuntu Alpine