CVEs published in August 2018
1,014 vulnerabilities, 149 critical, 8 exploited.
- jenkins shelve projectStored Cross-Site Scripting Vulnerability in Jenkins Shelve Project Plugin5.4 Medium
- jenkins accurevJenkins Accurev Plugin CSRF vulnerability and missing permission checks8.8 High
- jenkins saltstackJenkins SaltStack Plugin allows attackers to capture credentials with a known credentials ID stored in Jenkins7.5 High
- jenkins tracetronic ecu-testJenkins TraceTronic ECU-TEST Plugin server-side request forgery vulnerability6.5 Medium
- jenkins tracetronic ecu-testJenkins TraceTronic ECU-TEST Plugin Man in the middle vulnerability7.4 High
- the foreman foreman, redhat satellite, satellite capsule +2 moreIt was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or...6.1 Medium
- apple mac os xIn macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox...8.2 High
- apple mac os xIn macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox...8.2 High
- the foreman foremanA vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman...6.1 Medium
- clickstudios passwordstateClick Studios Passwordstate before 8.3 Build 8397 allows XSS by authenticated users via an...5.4 Medium
- openbsdtss_alloc in sys/arch/i386/i386/gdt.c in OpenBSD 6.2 and 6.3 has a Local Denial of Service ...5.5 Medium
- dell emc networker, networker +1 moreDell EMC NetWorker versions between 9.0 and 9.1.1.8 through 9.2.1.3, and the version 18.1.0.1...8.8 High
- [unknown] lftp, canonical ubuntu linux, opensuse leap +2 moreIt has been discovered that lftp up to and including version 4.8.3 does not properly sanitize...5.3 Medium
- x libxcursor, canonical ubuntu linux, debian linux +4 more +6 more_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause...9.8 Critical