Skip to content
OpenAdvisories

Archive

5 September 2018

Vulnerabilities first published on this day (UTC), newest first.

← August 2018 2018 / September /5 October 2018 →
  1. 120
  2. 228
  3. 331
  4. 452
  5. 554
  6. 651
  7. 765
  8. 87
  9. 97
  10. 1047
  11. 1139
  12. 1269
  13. 13104
  14. 1431
  15. 159
  16. 1626
  17. 1738
  18. 1878
  19. 1957
  20. 2043
  21. 2163
  22. 226
  23. 2316
  24. 2427
  25. 2554
  26. 2663
  27. 2715
  28. 2862
  29. 292
  30. 306
All Critical High Medium Low Exploited only Public exploit

54 results · Feed

  • Unscored —
    CVE-2016-1000030

    Pidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of ret…

    pidgin Debian
  • Medium 5.3
    CVE-2016-1000232

    ReDoS via long string of semicolons in tough-cookie

    NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header parsing that can result in Denial of Service. This attack appear to be exploitable via Custom HTTP header passed by client. This vulnerability …

    tough-cookie npm
  • Unscored —
    CVE-2018-16518

    A directory traversal vulnerability with remote code execution in Prim'X Zed! FREE through 1.0 build 186 and Zed! Limit…

  • Unscored —
    CVE-2018-16521

    An XML External Entity (XXE) vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Applica…

  • Medium 6.1
    CVE-2018-16516

    Flask-Admin Cross-site Scripting vulnerability

    helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL.

    flask-admin PyPI
  • Unscored —
    CVE-2018-16513

    In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the…

    ghostscript ghostscript Debian Ubuntu
  • Unscored —
    CVE-2018-1353

    An information disclosure vulnerability in Fortinet FortiManager 6.0.1 and below versions allows a standard user with a…

    Fortinet FortiManager Network devices
  • Unscored —
    CVE-2018-9194

    A plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1.5 encryption may be p…

    Fortinet FortiOS Network devices
  • Unscored —
    CVE-2018-9192

    A plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1.5 encryption may be p…

    Fortinet FortiOS Network devices
  • Unscored —
    CVE-2018-0502

    An issue was discovered in zsh before 5.6. The beginning of a #! script file was mishandled, potentially leading to an …

    zsh zsh Debian Ubuntu
  • Unscored —
    CVE-2018-13259

    An issue was discovered in zsh before 5.6. Shebang lines exceeding 64 characters were truncated, potentially leading to…

    zsh zsh Debian Ubuntu
  • Unscored —
    CVE-2018-16511

    An issue was discovered in Artifex Ghostscript before 9.24. A type confusion in "ztype" could be used by remote attacke…

    ghostscript ghostscript Debian Ubuntu
  • Unscored —
    CVE-2018-16509 Public exploit EPSS 92%

    An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handli…

    ghostscript ghostscript Debian Ubuntu
  • Unscored —
    CVE-2018-16510

    An issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the "CS" and "SC" PDF prim…

    ghostscript ghostscript Debian Ubuntu