Skip to content
OpenAdvisories

Archive

23 September 2018

Vulnerabilities first published on this day (UTC), newest first.

← August 2018 2018 / September /23 October 2018 →
  1. 120
  2. 228
  3. 331
  4. 452
  5. 554
  6. 651
  7. 765
  8. 87
  9. 97
  10. 1047
  11. 1139
  12. 1269
  13. 13104
  14. 1431
  15. 159
  16. 1626
  17. 1738
  18. 1878
  19. 1957
  20. 2043
  21. 2163
  22. 226
  23. 2316
  24. 2427
  25. 2554
  26. 2663
  27. 2715
  28. 2862
  29. 292
  30. 306
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2018-17400

    The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to perform …

  • Unscored —
    CVE-2018-17403

    The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to imperson…

  • Unscored —
    CVE-2018-17369

    An issue was discovered in springboot_authority through 2017-03-06. There is stored XSS via the admin/role/edit roleKey…

  • Unscored —
    CVE-2018-17404

    The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow an attacker to sniff private inform…

  • Unscored —
    CVE-2018-17368

    An issue was discovered in PublicCMS V4.0.180825. For an invalid login attempt, the response length is different depend…

  • Unscored —
    CVE-2018-17402

    The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to discover…

  • Unscored —
    CVE-2018-17401

    The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to perform …

  • Unscored —
    CVE-2018-17407

    An issue was discovered in t1_check_unusual_charstring functions in writet1.c files in TeX Live before 2018-09-21. A bu…

    texlive-bin texlive-bin Debian Ubuntu
  • Unscored —
    CVE-2018-17361

    Multiple XSS vulnerabilities in WeaselCMS v0.3.6 allow remote attackers to inject arbitrary web script or HTML via the …

  • Unscored —
    CVE-2018-17360

    An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. …

    binutils binutils Debian Ubuntu
  • Unscored —
    CVE-2018-17359

    An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. …

    binutils binutils Debian Ubuntu
  • Unscored —
    CVE-2018-17364

    OTCMS 3.61 allows remote attackers to execute arbitrary PHP code via the accBackupDir parameter.

  • Unscored —
    CVE-2018-17358

    An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. …

    binutils binutils Debian Ubuntu
  • High 8.8
    CVE-2018-17366

    Mingsoft MCMS CSRF vulnerability

    An issue was discovered in MCMS 4.6.5. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do.

    net.mingsoft:ms-mcms Maven
  • Unscored —
    CVE-2018-17338

    An issue has been found in pdfalto through 0.2. It is a heap-based buffer overflow in the function TextPage::dump in Xm…

  • Unscored —
    CVE-2018-17341

    BigTree 4.2.23 on Windows, when Advanced or Simple Rewrite routing is enabled, allows remote attackers to bypass authen…