Skip to content
OpenAdvisories

Archive

29 August 2018

Vulnerabilities first published on this day (UTC), newest first.

46 results · Feed

  • Unscored —

    Adobe Creative Cloud Desktop Application before 4.5.5.342 (installer) has an insecure library loading (dll hijacking) v…

  • Unscored —

    dwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial…

  • Unscored —

    An issue was discovered in Joomla! before 3.8.12. Inadequate checks regarding disabled fields can lead to an ACL violat…

  • Unscored —

    An issue was discovered in Joomla! before 3.8.12. Inadequate checks in the InputFilter class could allow specifically p…

  • High 8.8

    Auth0-ASPNET and Auth0-ASPNET-Owin vulnerable to Cross-Site Request Forgery

    An issue was discovered in Auth0 auth0-aspnet and auth0-aspnet-owin. Affected packages do not use or validate the state parameter of the OAuth 2.0 and OpenID Connect protocols. This leaves applications vulnerable to CSRF attacks during authentication and auth…

  • Unscored —

    An issue was discovered in Joomla! before 3.8.12. Inadequate output filtering on the user profile page could lead to a …