Skip to content
OpenAdvisories

Archive

21 September 2018

Vulnerabilities first published on this day (UTC), newest first.

← August 2018 2018 / September /21 October 2018 →
  1. 120
  2. 228
  3. 331
  4. 452
  5. 554
  6. 651
  7. 765
  8. 87
  9. 97
  10. 1047
  11. 1139
  12. 1269
  13. 13104
  14. 1431
  15. 159
  16. 1626
  17. 1738
  18. 1878
  19. 1957
  20. 2043
  21. 2163
  22. 226
  23. 2316
  24. 2427
  25. 2554
  26. 2663
  27. 2715
  28. 2862
  29. 292
  30. 306
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 8.3
    CVE-2018-15612

    Orchestration Designer Runtime Config CSRF

    A CSRF vulnerability in the Runtime Config component of Avaya Aura Orchestration Designer could allow an attacker to add, change, or remove administrative settings. Affected versions of Avaya Aura Orchestration Designer include all versions up to 7.2.1.

    Avaya Orchestration Designer
  • High 8.3
    CVE-2018-15613

    Orchestration Designer Runtime Config XSS

    A cross-site scripting (XSS) vulnerability in the Runtime Config component of Avaya Aura Orchestration Designer could result in malicious content being returned to the user. Affected versions of Avaya Aura Orchestration Designer include all versions up to 7.2…

    Avaya Orchestration Designer
  • High 7.5
    CVE-2018-14732

    Missing Origin Validation in webpack-dev-server

    An issue was discovered in lib/Server.js in webpack-dev-server before 3.1.6. Attackers are able to steal developer's code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can receive…

    webpack-dev-server npm
  • High 7.5
    CVE-2018-14731

    Missing Origin Validation in parcel-bundler

    An issue was discovered in HMRServer.js in Parcel parcel-bundler. Attackers are able to steal developer's code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can receive the HMR me…

    parcel-bundler npm
  • High 7.5
    CVE-2018-14730

    Missing Origin Validation in browserify-hmr

    An issue was discovered in Browserify-HMR. Attackers are able to steal developer's code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can receive the HMR message sent by the WebSo…

    browserify-hmr npm
  • High 7.5
    CVE-2018-3906

    An exploitable stack-based buffer overflow vulnerability exists in the retrieval of a database field in video-core's HT…

    Samsung SmartThings Hub STH-ETH-250
  • High 7.5
    CVE-2018-3913

    An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core H…

  • High 7.5
    CVE-2018-3915

    An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core H…

    Samsung SmartThings Hub STH-ETH-250
  • High 7.5
    CVE-2018-3914

    An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core H…

    Samsung SmartThings Hub STH-ETH-250
  • High 8.4
    CVE-2018-1711

    IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to…

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • High 8.4
    CVE-2018-1710

    IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 tool db2licm is affected by buff…

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • High 7.5
    CVE-2018-14645

    A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read ac…

    [UNKNOWN] haproxy haproxy haproxy Debian Ubuntu
  • High 7.5
    CVE-2018-17297 Public exploit

    Unzip function in ZipUtil.java in Hutool allows remote attackers to overwrite arbitrary files via directory traversal

    The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequences in a filename within a ZIP archive.

    cn.hutool:hutool-core cn.hutool:hutool-all cn.hutool:hutool-parent Maven