Skip to content
OpenAdvisories

Archive

30 October 2018

Vulnerabilities first published on this day (UTC), newest first.

← September 2018 2018 / October /30 November 2018 →
  1. 151
  2. 278
  3. 340
  4. 429
  5. 5134
  6. 62
  7. 76
  8. 848
  9. 958
  10. 10110
  11. 1116
  12. 12114
  13. 13 
  14. 144
  15. 1533
  16. 1625
  17. 17262
  18. 1862
  19. 1942
  20. 202
  21. 214
  22. 2214
  23. 2369
  24. 2435
  25. 257
  26. 2637
  27. 2715
  28. 2840
  29. 2954
  30. 3040
  31. 3142
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.4
    CVE-2018-16468

    Loofah Cross-site Scripting vulnerability

    In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.

    loofah ruby-loofah ruby-loofah Debian Ubuntu RubyGems
  • Medium —
    CVE-2018-16461

    Command Injection in libnmap

    A command injection vulnerability in libnmapp package for versions <0.4.16 allows arbitrary commands to be executed via arguments to the range options.

    libnmap npm
  • Medium 5.4
    CVE-2018-17782

    MantisBT allows XSS via the Manage Filter page

    A cross-site scripting (XSS) vulnerability in the Manage Filters page (manage_filter_page.php) in MantisBT 2.1.0 through 2.17.1 allows remote attackers (if access rights permit it) to inject arbitrary code (if CSP settings permit it) through a crafted project…

    mantisbt/mantisbt Packagist
  • Medium 5.4
    CVE-2018-17783

    MantisBT allows XSS via Edit Filter page

    A cross-site scripting (XSS) vulnerability in the Edit Filter page (manage_filter_edit page.php) in MantisBT 2.1.0 through 2.17.1 allows remote attackers (if access rights permit it) to inject arbitrary code (if CSP settings permit it) through a crafted proje…

    mantisbt/mantisbt Packagist