Skip to content
OpenAdvisories

Archive

1 September 2018

Vulnerabilities first published on this day (UTC), newest first.

← August 2018 2018 / September /1 October 2018 →
  1. 120
  2. 228
  3. 331
  4. 452
  5. 554
  6. 651
  7. 765
  8. 87
  9. 97
  10. 1047
  11. 1139
  12. 1269
  13. 13104
  14. 1431
  15. 159
  16. 1626
  17. 1738
  18. 1878
  19. 1957
  20. 2043
  21. 2163
  22. 226
  23. 2316
  24. 2427
  25. 2554
  26. 2663
  27. 2715
  28. 2862
  29. 292
  30. 306
All Critical High Medium Low Exploited only Public exploit

20 results · Feed

  • Unscored —
    CVE-2018-16325

    There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field.

  • Unscored —
    CVE-2018-16329

    In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the GetMagickProperty function in MagickCore/proper…

    imagemagick6 Alpine
  • Medium 4.8
    CVE-2018-16327

    Subrion Cross-site Scripting (XSS)

    There is Stored XSS in Subrion 4.2.1 via the admin panel URL configuration.

    intelliants/subrion Packagist
  • Unscored —
    CVE-2018-16328

    In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the CheckEventLogging function in MagickCore/log.c.

    imagemagick Debian
  • Unscored —
    CVE-2018-16308

    The Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection.

  • Unscored —
    CVE-2018-16323 Public exploit EPSS 49%

    ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that h…

    imagemagick imagemagick Debian Ubuntu
  • Unscored —
    CVE-2018-16315

    In waimai Super Cms 20150505, there is a CSRF vulnerability that can change the configuration via admin.php?m=Config&a=…

  • Unscored —
    CVE-2018-16313

    Bludit 2.3.4 allows XSS via a user name.

  • Unscored —
    CVE-2018-16324

    In IceWarp Server 12.0.3.1 and before, there is XSS in the /webmail/ username field.

  • Unscored —
    CVE-2018-16320

    idreamsoft iCMS 7.0.11 allows admincp.php?app=config Directory Traversal, resulting in execution of arbitrary PHP code …

  • Unscored —
    CVE-2018-16314

    An issue was discovered in admincp.php in idreamsoft iCMS 7.0.11. When verifying CSRF_TOKEN, if CSRF_TOKEN does not exi…

  • Unscored —
    CVE-2018-16316

    A stored Cross-site scripting (XSS) vulnerability in Portainer through 1.19.1 allows remote authenticated users to inje…

  • Unscored —
    CVE-2018-16303

    PDF-XChange Editor through 7.0.326.1 allows remote attackers to cause a denial of service (resource consumption) via a …

  • Unscored —
    CVE-2018-16302 Public exploit

    MediaComm Zip-n-Go before 4.95 has a Buffer Overflow via a crafted file.

  • Unscored —
    CVE-2018-15161

    The libesedb_key_append_data function in libesedb_key.c in libesedb through 2018-04-01 allows remote attackers to cause…

  • Unscored —
    CVE-2018-15160

    The libesedb_catalog_definition_read function in libesedb_catalog_definition.c in libesedb through 2018-04-01 allows re…

  • Unscored —
    CVE-2018-15158

    The libesedb_page_read_values function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cau…

  • Unscored —
    CVE-2018-15159

    The libesedb_page_read_tags function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause…

  • Unscored —
    CVE-2018-15157

    The libfsclfs_block_read function in libfsclfs_block.c in libfsclfs before 2018-07-25 allows remote attackers to cause …

  • Unscored —
    CVE-2018-15514

    HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 (edge) and before 18.06.0-ce-win72 (stable) deseri…