Skip to content
OpenAdvisories

Archive

7 September 2018

Vulnerabilities first published on this day (UTC), newest first.

← August 2018 2018 / September /7 October 2018 →
  1. 120
  2. 228
  3. 331
  4. 452
  5. 554
  6. 651
  7. 765
  8. 87
  9. 97
  10. 1047
  11. 1139
  12. 1269
  13. 13104
  14. 1431
  15. 159
  16. 1626
  17. 1738
  18. 1878
  19. 1957
  20. 2043
  21. 2163
  22. 226
  23. 2316
  24. 2427
  25. 2554
  26. 2663
  27. 2715
  28. 2862
  29. 292
  30. 306
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.3
    CVE-2018-16704

    Gleez CMS Vulnerability Allows Forced Browsing to Profile Page of Other Users

    An issue was discovered in Gleez CMS v1.2.0. Because of an Insecure Direct Object Reference vulnerability, it is possible for attackers (logged in users) to view profile page of other users, as demonstrated by navigating to user/3 on demo.gleezcms.org.

    gleez/cms Packagist
  • Medium 5.3
    CVE-2018-1757

    IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 could allow an attacker to obtain sensitive informa…

    IBM Security Identity Governance and Intelligence
  • Medium 5.4
    CVE-2017-1115

    IBM Campaign 9.1, 9.1.2, and 10 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, wh…

    IBM Campaign
  • Medium 5.4
    CVE-2017-1114

    IBM Campaign 9.1, 9.1.2, and 10 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra…

    IBM Campaign
  • Medium 6.2
    CVE-2016-9040

    An exploitable denial of service exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system. The vulnera…

    Joyent SmartOS