Skip to content
OpenAdvisories

Archive

August 2018

Vulnerabilities first published in this month (UTC), newest first.

← July 2018 2018 / August September 2018 →
  1. 179
  2. 240
  3. 350
  4. 41
  5. 521
  6. 681
  7. 712
  8. 824
  9. 914
  10. 1028
  11. 11 
  12. 123
  13. 1336
  14. 1434
  15. 15109
  16. 1615
  17. 1729
  18. 188
  19. 19 
  20. 2067
  21. 2128
  22. 2225
  23. 2346
  24. 2434
  25. 2527
  26. 268
  27. 2727
  28. 2854
  29. 2946
  30. 3056
  31. 3113
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2018-15727 Public exploit EPSS 63%

    Grafana Authentication Bypass

    Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie knowing only a username of an LDAP or OAuth user.

    grafana github.com/grafana/grafana Ubuntu Go
  • Critical 9.8
    CVE-2018-3786 Public exploit EPSS 12%

    Command Injection in egg-scripts

    A command injection vulnerability in egg-scripts <v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line argument.

    Egg egg-scripts egg-scripts npm
  • Critical 9.8
    CVE-2018-3783 Public exploit

    Privilege Escalation due to Blind NoSQL Injection in flintcms

    A privilege escalation detected in flintcms versions <= 1.1.9 allows account takeover due to blind MongoDB injection in password reset.

    https://github.com/JasonEtco flintcms flintcms npm
  • Critical 9.8
    CVE-2018-14933 Exploited Public exploit Scanner template EPSS 95%

    upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir pa…

    KEV Dec 18, 2024
  • Critical 9.1
    CVE-2018-14847 Exploited Public exploit EPSS 96%

    MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated…

    KEV Dec 1, 2021