Skip to content
OpenAdvisories

Archive

14 September 2018

Vulnerabilities first published on this day (UTC), newest first.

← August 2018 2018 / September /14 October 2018 →
  1. 120
  2. 228
  3. 331
  4. 452
  5. 554
  6. 651
  7. 765
  8. 87
  9. 97
  10. 1047
  11. 1139
  12. 1269
  13. 13104
  14. 1431
  15. 159
  16. 1626
  17. 1738
  18. 1878
  19. 1957
  20. 2043
  21. 2163
  22. 226
  23. 2316
  24. 2427
  25. 2554
  26. 2663
  27. 2715
  28. 2862
  29. 292
  30. 306
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.9
    CVE-2018-11087

    TLS validation error

    Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit.

    Pivotal Spring AMQP com.rabbitmq:amqp-client org.springframework.amqp:spring-amqp Maven
  • Medium 4.9
    CVE-2018-1791

    IBM Connections 5.0, 5.5, and 6.0 is vulnerable to an External Service Interaction attack, caused by improper validatio…

    IBM Connections
  • Medium 5.9
    CVE-2018-1719

    IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security under certain conditions. This…

    IBM WebSphere Application Server
  • Medium 6.1
    CVE-2018-17031

    Gogs XSS Vulnerability

    In Gogs 0.11.53, an attacker can use a crafted .eml file to trigger MIME type sniffing, which leads to XSS, as demonstrated by Internet Explorer, because an "X-Content-Type-Options: nosniff" header is not sent.

    gogs.io/gogs Go