Skip to content
OpenAdvisories

Archive

4 November 2018

Vulnerabilities first published on this day (UTC), newest first.

← October 2018 2018 / November /4 December 2018 →
  1. 129
  2. 228
  3. 33
  4. 46
  5. 522
  6. 647
  7. 750
  8. 838
  9. 932
  10. 108
  11. 119
  12. 1243
  13. 1338
  14. 14157
  15. 1542
  16. 1639
  17. 1720
  18. 185
  19. 1910
  20. 2036
  21. 2115
  22. 2212
  23. 2313
  24. 241
  25. 253
  26. 2661
  27. 2796
  28. 2842
  29. 2944
  30. 3037
All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • Unscored —
    CVE-2018-18928

    International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toS…

    icu Debian
  • Unscored —
    CVE-2018-18927

    An issue was discovered in PublicCMS V4.0. It allows XSS by modifying the page_list "attached" attribute (which typical…

  • Critical 9.8
    CVE-2018-18926

    Gitea Remote Code Execution (RCE)

    Gitea before 1.5.4 allows remote code execution because it does not properly validate session IDs. This is related to session ID handling in the go-macaron/session code for Macaron.

    code.gitea.io/gitea golang-code.gitea-git Ubuntu Go
  • Unscored —
    CVE-2018-18924 Public exploit

    The image-upload feature in ProjeQtOr 7.2.5 allows remote attackers to execute arbitrary code by uploading a .shtml fil…

  • Unscored —
    CVE-2018-18925 Public exploit Scanner template EPSS 31%

    Gogs 0.11.66 allows remote code execution because it does not properly validate session IDs, as demonstrated by a ".." …

  • Unscored —
    CVE-2018-18919

    The WP Editor.md plugin 10.0.1 for WordPress allows XSS via the comment area.