Skip to content
OpenAdvisories

Archive

September 2018

Vulnerabilities first published in this month (UTC), newest first.

← August 2018 2018 / September October 2018 →
  1. 120
  2. 228
  3. 331
  4. 452
  5. 554
  6. 651
  7. 765
  8. 87
  9. 97
  10. 1047
  11. 1139
  12. 1269
  13. 13104
  14. 1431
  15. 159
  16. 1626
  17. 1738
  18. 1878
  19. 1957
  20. 2043
  21. 2163
  22. 226
  23. 2316
  24. 2427
  25. 2554
  26. 2663
  27. 2715
  28. 2862
  29. 292
  30. 306
All Critical High Medium Low Exploited only Public exploit

87 results · Clear filters · Feed

  • Unscored —
    CVE-2018-16509 Public exploit EPSS 92%

    An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handli…

    ghostscript ghostscript Debian Ubuntu
  • Unscored —
    CVE-2018-16431 Public exploit

    admin/admin/adminsave.html in YFCMF v3.0 allows CSRF to add an administrator account.

  • Critical 9.8
    CVE-2018-16385 Public exploit

    ThinkPHP SQL Injection vulnerability

    ThinkPHP before 5.1.23 allows SQL Injection via the public/index/index/test/index query string.

    topthink/framework Packagist
  • Unscored —
    CVE-2018-16370 Public exploit

    In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team&m=Setting&a=upgrade b…

  • Unscored —
    CVE-2018-16373 Public exploit

    Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/file_manager/save.

  • Unscored —
    CVE-2018-16323 Public exploit EPSS 49%

    ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that h…

    imagemagick imagemagick Debian Ubuntu
  • Unscored —
    CVE-2018-16302 Public exploit

    MediaComm Zip-n-Go before 4.95 has a Buffer Overflow via a crafted file.