CVEs published July 22, 2018
3 CVEs were published on July 22, 2018: 0 critical, 0 high.
- Published
- 3
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 3
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- mitmproxy
- 1
Medium, low and unrated 3
- CVE-2018-14505mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py.mitmproxy
- CVE-2018-14500joyplus-cms 1.6.0 has XSS via the manager/collect/collect_vod_zhuiju.php keyword parameter.
- CVE-2018-14501manager/admin_ajax.php in joyplus-cms 1.6.0 has SQL Injection, as demonstrated by crafted POST data beginning with an "m_id=1 AND SLEEP(5)"