CVEs published August 12, 2018
3 CVEs were published on August 12, 2018: 0 critical, 0 high.
- Published
- 3
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 3
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- HackerOne Nextcloud Server
- 2
- HackerOne url-parse · url-parse
- 1
Medium, low and unrated 3
- CVE-2018-3774Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redirect, Bypass AutHackerOne url-parse · url-parse
- CVE-2018-3775Improper Authentication in Nextcloud Server prior to version 12.0.3 would allow an attacker that obtained user credentials to bypass the 2 FHackerOne Nextcloud Server
- CVE-2018-3776Improper input validator in Nextcloud Server prior to 12.0.3 and 11.0.5 could lead to an attacker's actions not being logged in the audit loHackerOne Nextcloud Server