Skip to content
OpenAdvisories

Archive

6 November 2018

Vulnerabilities first published on this day (UTC), newest first.

← October 2018 2018 / November /6 December 2018 →
  1. 129
  2. 228
  3. 33
  4. 46
  5. 522
  6. 647
  7. 750
  8. 838
  9. 932
  10. 108
  11. 119
  12. 1243
  13. 1338
  14. 14157
  15. 1542
  16. 1639
  17. 1720
  18. 185
  19. 1910
  20. 2036
  21. 2115
  22. 2212
  23. 2313
  24. 241
  25. 253
  26. 2661
  27. 2796
  28. 2842
  29. 2944
  30. 3037
All Critical High Medium Low Exploited only Public exploit

47 results · Feed

  • High 7.5
    CVE-2014-10077

    i18n Vulnerable to Denial of Service Attack

    Hash#slice in lib/i18n/core_ext/hash.rb in the i18n gem before 0.8.0 for Ruby allows remote attackers to cause a denial of service (application crash) via a call in a situation where :some_key is present in keep_keys but not present in the hash.

    i18n ruby-i18n ruby-i18n Debian Ubuntu RubyGems
  • Unscored —
    CVE-2018-18963

    Busca.aspx.cs in Degrau Publicidade e Internet Plataforma de E-commerce allows SQL Injection via the busca/ URI.

  • Unscored —
    CVE-2018-18965

    osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in c…

  • Unscored —
    CVE-2018-18964

    osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in c…

  • Unscored —
    CVE-2018-18980 EPSS 25%

    An XML External Entity injection (XXE) vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpMa…

  • Unscored —
    CVE-2018-18966

    osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. The .htaccess file in c…

  • High 7.5
    CVE-2018-16472

    Prototype Pollution in cached-path-relative

    A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype chain causing a DoS attack.

    npm cached-path-relative cached-path-relative node-cached-path-relative Debian Ubuntu npm