CVEs published April 14, 2018
8 CVEs were published on April 14, 2018: 0 critical, 0 high.
- Published
- 8
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 8
- CVE-2018-10111An issue was discovered in GEGL through 0.3.32.
- CVE-2018-10112An issue was discovered in GEGL through 0.3.32.
- CVE-2018-10113An issue was discovered in GEGL through 0.3.32.
- CVE-2018-10114An issue was discovered in GEGL through 0.3.32.
- CVE-2018-10100Before WordPress 4.9.5, the redirection URL for the login page was not validated or sanitized if forced to use HTTPS.
- CVE-2018-10101Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server.
- CVE-2018-10102Before WordPress 4.9.5, the version string was not escaped in the get_the_generator function, and could lead to XSS in a generator tag.
- CVE-2018-10109Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload in the content secti