Skip to content
OpenAdvisories

Archive

8 September 2018

Vulnerabilities first published on this day (UTC), newest first.

← August 2018 2018 / September /8 October 2018 →
  1. 120
  2. 228
  3. 331
  4. 452
  5. 554
  6. 651
  7. 765
  8. 87
  9. 97
  10. 1047
  11. 1139
  12. 1269
  13. 13104
  14. 1431
  15. 159
  16. 1626
  17. 1738
  18. 1878
  19. 1957
  20. 2043
  21. 2163
  22. 226
  23. 2316
  24. 2427
  25. 2554
  26. 2663
  27. 2715
  28. 2862
  29. 292
  30. 306
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Unscored —
    CVE-2018-16730

    \upload\plugins\sys\Install.php in CScms 4.1 has XSS via the site name.

  • Unscored —
    CVE-2018-16724

    An issue is discovered in baijiacms V4. Blind SQL Injection exists via the order parameter in an index.php?act=index re…

  • Unscored —
    CVE-2018-16725

    An issue is discovered in baijiacms V4. XSS exists via the assets/weengine/components/zclip/ZeroClipboard.swf id parame…

  • Unscored —
    CVE-2018-16731

    CScms 4.1 allows arbitrary file upload by (for example) adding the php extension to the default filetype list (gif, jpg…

  • Unscored —
    CVE-2018-16732

    \upload\plugins\sys\admin\Setting.php in CScms 4.1 allows CSRF via admin.php/setting/ftp_save.

  • High 7.5
    CVE-2018-16733

    Go Ethereum Improper Input Validation

    In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api_tracer.go does not verify that the end block is after the start block.

    github.com/ethereum/go-ethereum Go
  • Unscored —
    CVE-2018-16715

    An issue was discovered in Absolute Software CTES Windows Agent through 1.0.0.1479. The security permissions on the %Pr…