Archive
29 August 2018
Vulnerabilities first published on this day (UTC), newest first.
46 results · Feed
-
Unscored —
Adobe Creative Cloud Desktop Application before 4.5.5.342 (installer) has an insecure library loading (dll hijacking) v…
-
Unscored —
dwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial…
-
Unscored —
An issue was discovered in Joomla! before 3.8.12. Inadequate checks regarding disabled fields can lead to an ACL violat…
-
Unscored —
An issue was discovered in Joomla! before 3.8.12. Inadequate checks in the InputFilter class could allow specifically p…
-
High 8.8
Auth0-ASPNET and Auth0-ASPNET-Owin vulnerable to Cross-Site Request Forgery
An issue was discovered in Auth0 auth0-aspnet and auth0-aspnet-owin. Affected packages do not use or validate the state parameter of the OAuth 2.0 and OpenID Connect protocols. This leaves applications vulnerable to CSRF attacks during authentication and auth…
-
Unscored —
An issue was discovered in Joomla! before 3.8.12. Inadequate output filtering on the user profile page could lead to a …