Skip to content
OpenAdvisories

Archive

12 October 2018

Vulnerabilities first published on this day (UTC), newest first.

← September 2018 2018 / October /12 November 2018 →
  1. 151
  2. 278
  3. 340
  4. 429
  5. 5134
  6. 62
  7. 76
  8. 848
  9. 958
  10. 10110
  11. 1116
  12. 12114
  13. 13 
  14. 144
  15. 1533
  16. 1625
  17. 17262
  18. 1862
  19. 1942
  20. 202
  21. 214
  22. 2214
  23. 2369
  24. 2435
  25. 257
  26. 2637
  27. 2715
  28. 2840
  29. 2954
  30. 3040
  31. 3142
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.1
    CVE-2018-18282

    Next.js has cross site scripting (XSS) vulnerability via the 404 or 500 /_error page

    Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /_error page.

    next npm
  • Medium 6.6
    CVE-2018-15755

    CF networking internal policy server SQL injection

    Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server. A remote authenticated malicious user with mTLS certs can issue arbitrary SQL queries…

    Cloud Foundry CF Networking Release
  • Medium 5.4
    CVE-2018-14664

    A flaw was found in foreman from versions 1.18. A stored cross-site scripting vulnerability exists due to an improperly…

    [UNKNOWN] foreman
  • Medium 5.4
    CVE-2018-1534

    IBM Rational Publishing Engine 6.0.5 and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users t…

    IBM Rational Publishing Engine
  • Medium 6.5
    CVE-2018-1770

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the sy…

    IBM WebSphere Application Server
  • Medium 5.4
    CVE-2018-1533

    IBM Rational Publishing Engine 6.0.5 and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users t…

    IBM Rational Publishing Engine
  • Medium 5.3
    CVE-2018-1838

    IBM WebSphere Application Server 8.5 and 9.0 in IBM Cloud could allow a remote attacker to obtain sensitive information…

    IBM WebSphere Application Server
  • Medium 6.1
    CVE-2018-1673

    IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to e…

    IBM WebSphere Portal
  • Medium 4.4
    CVE-2017-1231

    IBM BigFix Platform 9.5 - 9.5.9 stores user credentials in plain in clear text which can be read by a local user. IBM X…

    IBM BigFix Platform