Skip to content
OpenAdvisories

Archive

8 October 2018

Vulnerabilities first published on this day (UTC), newest first.

← September 2018 2018 / October /8 November 2018 →
  1. 151
  2. 278
  3. 340
  4. 429
  5. 5134
  6. 62
  7. 76
  8. 848
  9. 958
  10. 10110
  11. 1116
  12. 12114
  13. 13 
  14. 144
  15. 1533
  16. 1625
  17. 17262
  18. 1862
  19. 1942
  20. 202
  21. 214
  22. 2214
  23. 2369
  24. 2435
  25. 257
  26. 2637
  27. 2715
  28. 2840
  29. 2954
  30. 3040
  31. 3142
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.3
    CVE-2018-17060

    Improper Access Control in Telerik Extensions

    Telerik Extensions for ASP.NET MVC (all versions) does not whitelist requests, which can allow a remote attacker to access files inside the server's web directory. NOTE: this product has been obsolete since June 2013.

    TelerikMvcExtensions NuGet
  • Medium 5.3
    CVE-2018-1000803

    Gitea Exposes Private Email Addresses

    Gitea version prior to version 1.5.1 contains a CWE-200 vulnerability that can result in Exposure of users private email addresses. This attack appear to be exploitable via Watch a repository to receive email notifications. Emails received contain the other r…

    github.com/go-gitea/gitea Go
  • Medium 5.9
    CVE-2018-1000808

    Pyopenssl Incorrect Memory Management

    Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denial of service if memory runs low or is exhausted. This attack…

    pyopenssl pyopenssl pyopenssl py-openssl Debian Ubuntu Alpine PyPI
  • Medium 6.5
    CVE-2018-1741

    IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 does not properly limit the number or frequency of interaction which…

    IBM Security Key Lifecycle Manager
  • Medium 4.2
    CVE-2018-1750

    IBM Security Key Lifecycle Manager 3.0 specifies permissions for a security-critical resource in a way that allows that…

    IBM Security Key Lifecycle Manager
  • Medium 5.3
    CVE-2018-1743

    IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 discloses sensitive information to unauthorized users. The informati…

    IBM Security Key Lifecycle Manager
  • Medium 5.9
    CVE-2018-1742

    IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 contains hard-coded credentials, such as a password or cryptographic…

    IBM Security Key Lifecycle Manager
  • Medium 4.3
    CVE-2018-1749

    IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 uses incomplete blacklisting for input validation which allows attac…

    IBM Security Key Lifecycle Manager
  • Medium 4.3
    CVE-2018-1753

    IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 generates an error message that includes sensitive information about…

    IBM Security Key Lifecycle Manager