Skip to content
OpenAdvisories

Archive

August 2018

Vulnerabilities first published in this month (UTC), newest first.

← July 2018 2018 / August September 2018 →
  1. 179
  2. 240
  3. 350
  4. 41
  5. 521
  6. 681
  7. 712
  8. 824
  9. 914
  10. 1028
  11. 11 
  12. 123
  13. 1336
  14. 1434
  15. 15109
  16. 1615
  17. 1729
  18. 188
  19. 19 
  20. 2067
  21. 2128
  22. 2225
  23. 2346
  24. 2434
  25. 2527
  26. 268
  27. 2727
  28. 2854
  29. 2946
  30. 3056
  31. 3113
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.4
    CVE-2018-14059 Public exploit

    Pimcore XSS Vulnerability

    Pimcore allows XSS via Users, Assets, Data Objects, Video Thumbnails, Image Thumbnails, Field-Collections, Objectbrick, Classification Store, Document Types, Predefined Properties, Predefined Asset Metadata, Quantity Value, and Static Routes functions.

    pimcore/pimcore Packagist
  • Medium 6.5
    CVE-2018-14058 Public exploit EPSS 29%

    Pimcore SQLi Vulnerability

    Pimcore before 5.3.0 allows SQL Injection via the REST web service API.

    pimcore/pimcore Packagist
  • Medium 5.9
    CVE-2018-15473 Public exploit EPSS 99%

    OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticat…

    openssh openssh openssh Debian Ubuntu Alpine
  • Medium —
    CVE-2018-12537 Public exploit

    Moderate severity vulnerability that affects io.vertx:vertx-core

    In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters from the header value. This allow unfiltered values to inject a new header in the client request or s…

    The Eclipse Foundation Eclipse Vert.x io.vertx:vertx-core Maven
  • Medium 4.2
    CVE-2018-11770 Public exploit EPSS 66%

    org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 Improper Authentication vulnerability

    From version 1.3.0 onward, Apache Spark's standalone master exposes a REST API for job submission, in addition to the submission mechanism used by spark-submit. In standalone, the config property 'spark.authenticate.secret' establishes a shared secret for aut…

    Apache Software Foundation Apache Spark org.apache.spark:spark-core_2.11 org.apache.spark:spark-core_2.10 Maven
  • Medium 6.1
    CVE-2018-8032 Public exploit EPSS 11%

    Moderate severity vulnerability that affects apache axis

    Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.

    Apache Software Foundation Apache Axis axis org.apache.axis:axis Debian Ubuntu Maven
  • Medium 6.1
    CVE-2018-14840 Public exploit

    Subrion CMS Cross-site Scripting

    uploads/.htaccess in Subrion CMS 4.2.1 allows XSS because it does not block .html file uploads (but does block, for example, .htm file uploads).

    intelliants/subrion Packagist
  • Medium 6.7
    CVE-2016-8641 Public exploit

    A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary fi…

    Nagios Enterprises nagios