Skip to content
OpenAdvisories

Archive

30 December 2018

Vulnerabilities first published on this day (UTC), newest first.

← November 2018 2018 / December /30 January 2019 →
  1. 18
  2. 21
  3. 354
  4. 480
  5. 530
  6. 675
  7. 757
  8. 88
  9. 93
  10. 1032
  11. 1153
  12. 1281
  13. 1356
  14. 1421
  15. 152
  16. 16 
  17. 1778
  18. 1819
  19. 1931
  20. 20136
  21. 2130
  22. 2214
  23. 2340
  24. 2441
  25. 2526
  26. 2633
  27. 2711
  28. 2882
  29. 29 
  30. 3029
  31. 3134
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2018-20594

    Moderate severity vulnerability that affects org.hswebframework.web:hsweb-commons

    An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java.

    org.hswebframework.web:hsweb-commons Maven
  • Medium 6.1
    CVE-2018-20583

    PHP League CommonMark vulnerable to Cross-Site Scripting (XSS)

    Cross-site scripting (XSS) vulnerability in the PHP League CommonMark library versions 0.15.6 through 0.18.x before 0.18.1 allows remote attackers to insert unsafe URLs into HTML (even if allow_unsafe_links is false) via a newline character (e.g., writing jav…

    league/commonmark Packagist