Skip to content
OpenAdvisories

Archive

19 October 2018

Vulnerabilities first published on this day (UTC), newest first.

← September 2018 2018 / October /19 November 2018 →
  1. 151
  2. 278
  3. 340
  4. 429
  5. 5134
  6. 62
  7. 76
  8. 848
  9. 958
  10. 10110
  11. 1116
  12. 12114
  13. 13 
  14. 144
  15. 1533
  16. 1625
  17. 17262
  18. 1862
  19. 1942
  20. 202
  21. 214
  22. 2214
  23. 2369
  24. 2435
  25. 257
  26. 2637
  27. 2715
  28. 2840
  29. 2954
  30. 3040
  31. 3142
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2018-18529

    ThinkPHP SQLi Vulnerability

    ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI.

    topthink/framework Packagist
  • Critical 9.8
    CVE-2018-18531

    Use of Insufficiently Random Values in penggle:kaptcha

    text/impl/DefaultTextCreator.java, text/impl/ChineseTextProducer.java, and text/impl/FiveLetterFirstNameTextCreator.java in kaptcha 2.3.2 use the Random (rather than SecureRandom) function for generating CAPTCHA values, which makes it easier for remote attack…

    com.github.penggle:kaptcha Maven
  • Critical 9.8
    CVE-2018-18530

    ThinkPHP SQLi Vulnerability

    ThinkPHP 5.1.25 has SQL Injection via the count parameter because the library/think/db/Query.php aggregate function mishandles the aggregate variable. NOTE: a backquote character is required in the attack URI.

    topthink/framework Packagist
  • Critical 10.0
    CVE-2018-4013 Public exploit

    An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server …

    Live Networks LIVE555 Media Server liblivemedia liblivemedia Debian Ubuntu