Skip to content
OpenAdvisories

Archive

9 September 2018

Vulnerabilities first published on this day (UTC), newest first.

← August 2018 2018 / September /9 October 2018 →
  1. 120
  2. 228
  3. 331
  4. 452
  5. 554
  6. 651
  7. 765
  8. 87
  9. 97
  10. 1047
  11. 1139
  12. 1269
  13. 13104
  14. 1431
  15. 159
  16. 1626
  17. 1738
  18. 1878
  19. 1957
  20. 2043
  21. 2163
  22. 226
  23. 2316
  24. 2427
  25. 2554
  26. 2663
  27. 2715
  28. 2862
  29. 292
  30. 306
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Unscored —
    CVE-2018-16762

    FUEL CMS 1.4.1 allows SQL Injection via the layout, published, or search_term parameter to pages/items.

  • Unscored —
    CVE-2018-16761 Scanner template

    Eventum before 3.4.0 has an open redirect vulnerability.

  • Unscored —
    CVE-2018-16763 Public exploit Scanner template EPSS 83%

    FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This c…

  • Unscored —
    CVE-2018-16759

    The removeXSS function in App/Common/common.php (called from App/Modules/Index/Action/SearchAction.class.php) in EasyCM…

  • Unscored —
    CVE-2018-16750

    In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found.

    imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-16749

    In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to caus…

    imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-16736 Public exploit

    In the rcfilters plugin 2.1.6 for Roundcube, XSS exists via the _whatfilter and _messages parameters (in the Filters se…