Skip to content
OpenAdvisories

Archive

September 2018

Vulnerabilities first published in this month (UTC), newest first.

1,170 results · Feed

  • Unscored —

    An issue was discovered in admincp.php in idreamsoft iCMS 7.0.11. When verifying CSRF_TOKEN, if CSRF_TOKEN does not exi…

  • Unscored —

    A stored Cross-site scripting (XSS) vulnerability in Portainer through 1.19.1 allows remote authenticated users to inje…

  • Unscored —

    PDF-XChange Editor through 7.0.326.1 allows remote attackers to cause a denial of service (resource consumption) via a …

  • Unscored —
    CVE-2018-16302 Public exploit

    MediaComm Zip-n-Go before 4.95 has a Buffer Overflow via a crafted file.

  • Unscored —

    The libesedb_key_append_data function in libesedb_key.c in libesedb through 2018-04-01 allows remote attackers to cause…

  • Unscored —

    The libesedb_catalog_definition_read function in libesedb_catalog_definition.c in libesedb through 2018-04-01 allows re…

  • Unscored —

    The libesedb_page_read_values function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cau…

  • Unscored —

    The libesedb_page_read_tags function in libesedb_page.c in libesedb through 2018-04-01 allows remote attackers to cause…

  • Unscored —

    The libfsclfs_block_read function in libfsclfs_block.c in libfsclfs before 2018-07-25 allows remote attackers to cause …

  • Unscored —

    HandleRequestAsync in Docker for Windows before 18.06.0-ce-rc3-win68 (edge) and before 18.06.0-ce-win72 (stable) deseri…