Skip to content
OpenAdvisories

Archive

August 2018

Vulnerabilities first published in this month (UTC), newest first.

← July 2018 2018 / August September 2018 →
  1. 179
  2. 240
  3. 350
  4. 41
  5. 521
  6. 681
  7. 712
  8. 824
  9. 914
  10. 1028
  11. 11 
  12. 123
  13. 1336
  14. 1434
  15. 15109
  16. 1615
  17. 1729
  18. 188
  19. 19 
  20. 2067
  21. 2128
  22. 2225
  23. 2346
  24. 2434
  25. 2527
  26. 268
  27. 2727
  28. 2854
  29. 2946
  30. 3056
  31. 3113
All Critical High Medium Low Exploited only Public exploit

90 results · Clear filters · Feed

  • Unscored —
    CVE-2017-15358 Public exploit

    Race condition in the Charles Proxy Settings suid binary in Charles Proxy before 4.2.1 allows local users to gain privi…

  • Unscored —
    CVE-2018-13416 Public exploit EPSS 20%

    In Universal Media Server (UMS) 7.1.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML Exter…

  • Unscored —
    CVE-2018-14497 Public exploit

    Tenda D152 ADSL routers allow XSS via a crafted SSID.

  • Unscored —
    CVE-2018-14417 Public exploit EPSS 89%

    A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3. In particu…

  • Medium 6.1
    CVE-2018-8032 Public exploit EPSS 11%

    Moderate severity vulnerability that affects apache axis

    Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.

    Apache Software Foundation Apache Axis axis org.apache.axis:axis Debian Ubuntu Maven
  • High 7.5
    CVE-2018-10920 Public exploit

    Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison …

    CZ.NIC knot-resolver knot-resolver knot-resolver Debian Ubuntu
  • Critical 9.1
    CVE-2018-14847 Exploited Public exploit EPSS 96%

    MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated…

    KEV Dec 1, 2021
  • Medium 6.1
    CVE-2018-14840 Public exploit

    Subrion CMS Cross-site Scripting

    uploads/.htaccess in Subrion CMS 4.2.1 allows XSS because it does not block .html file uploads (but does block, for example, .htm file uploads).

    intelliants/subrion Packagist
  • Unscored —
    CVE-2018-10618 Public exploit

    Davolink DVW-3200N all version prior to Version 1.00.06. The device generates a weak password hash that is easily crack…

    Davolink DVW-3200N
  • Medium 6.7
    CVE-2016-8641 Public exploit

    A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary fi…

    Nagios Enterprises, LLC. nagios