Skip to content
OpenAdvisories

Archive

9 November 2018

Vulnerabilities first published on this day (UTC), newest first.

← October 2018 2018 / November /9 December 2018 →
  1. 129
  2. 228
  3. 33
  4. 46
  5. 522
  6. 647
  7. 750
  8. 838
  9. 932
  10. 108
  11. 119
  12. 1243
  13. 1338
  14. 14157
  15. 1542
  16. 1639
  17. 1720
  18. 185
  19. 1910
  20. 2036
  21. 2115
  22. 2212
  23. 2313
  24. 241
  25. 253
  26. 2661
  27. 2796
  28. 2842
  29. 2944
  30. 3037
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Unscored —
    CVE-2018-19138 Public exploit

    WSTMart 2.0.7 has CSRF via the index.php/admin/staffs/add.html URI.

  • Unscored —
    CVE-2018-19136 Public exploit Scanner template

    DomainMOD through 4.11.01 has XSS via the assets/edit/registrar-account.php raid parameter.

  • Unscored —
    CVE-2018-19127 Public exploit Scanner template EPSS 21%

    A code injection vulnerability in /type.php in PHPCMS 2008 allows attackers to write arbitrary content to a website cac…

  • Unscored —
    CVE-2018-19131 Public exploit

    Squid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for certificate errors.

    squid Debian
  • Unscored —
    CVE-2018-19126 Public exploit EPSS 23%

    PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute arbitrary code via a file …

  • Unscored —
    CVE-2018-19125 Public exploit EPSS 11%

    PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to delete an image directory.