Skip to content
OpenAdvisories

Archive

24 October 2018

Vulnerabilities first published on this day (UTC), newest first.

← September 2018 2018 / October /24 November 2018 →
  1. 151
  2. 278
  3. 340
  4. 429
  5. 5134
  6. 62
  7. 76
  8. 848
  9. 958
  10. 10110
  11. 1116
  12. 12114
  13. 13 
  14. 144
  15. 1533
  16. 1625
  17. 17262
  18. 1862
  19. 1942
  20. 202
  21. 214
  22. 2214
  23. 2369
  24. 2435
  25. 257
  26. 2637
  27. 2715
  28. 2840
  29. 2954
  30. 3040
  31. 3142
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2018-15750

    SaltStack Salt Directory Traversal vulnerability in salt-api

    Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server.

    salt salt salt Ubuntu Alpine PyPI
  • Medium 4.8
    CVE-2018-18014

    * Lack of authentication in Citrix Xen Mobile through 10.8 allows low-privileged local users to execute system commands…

  • Medium 6.1
    CVE-2018-18548 Public exploit

    Ajenti Cross-site Scripting Via Filename

    ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in File Manager.

    ajenti PyPI
  • Medium 5.4
    CVE-2018-1541

    IBM WebSphere Commerce Enterprise V7, V8, and V9 is vulnerable to cross-site scripting. This vulnerability allows users…

    IBM WebSphere Commerce Enterprise