CVEs published in June 2018
1,550 vulnerabilities, 195 critical, 3 exploited.
- icewarp mail server Cross-site scripting (XSS) vulnerability for webdav/ticket/ URIs in IceWarp Mail Server 12.0.3... 6.1 Medium
- phpwcms phpwcms 1.8.9 allows remote attackers to discover the installation path via an invalid... 5.3 Medium
-
quickersortcrates.io quickersort is deprecated and unmaintained No score - jpeg-compressor project jpeg compressor An issue was discovered in jpeg-compressor 0.1. The build_huffman function in stb_image.c allows... 7.8 High
- gopro gpmf-parser An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in... 9.8 Critical
- google chrome Type confusion in JavaScript in Google Chrome prior to 67.0.3396.87 allowed a remote attacker to... 8.8 High
- google chrome Incorrect implementation in Content Security Policy in Google Chrome prior to 67.0.3396.79... 6.5 Medium
- google chrome Insufficient policy enforcement in USB in Google Chrome on Windows prior to 67.0.3396.62 allowed... 6.5 Medium
- yxcms protected/apps/admin/controller/photoController.php in YXcms 1.4.7 allows remote attackers to... 4.9 Medium
- metinfo Metinfo v6.0.0 allows remote attackers to write code into a .php file, and execute that code, via... 7.2 High
- hongcms project hongcms An issue was discovered in HongCMS 3.0.0. There is an Arbitrary Script File Upload issue that can... 7.2 High
- micro focus secure messaging gateway Remote Code Execution in Micro Focus Secure Messaging Gateway 9.1 Critical
- micro focus secure messaging gateway Unauthenticated SQL injection in Micro Focus Secure Messaging Gateway 10.0 Critical
- ivanti avalanche An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. The impacted... 6.5 Medium
- ivanti avalanche An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. A local user... 7.8 High
- safensoft enterprise suite, syswatch, tpsecure +2 more Storing password in recoverable format in safensec.com (SysWatch service) in SAFE'N'SEC... 7.8 High
- safensoft enterprise suite, syswatch, tpsecure +2 more Improper check of unusual conditions when launching msiexec.exe in safensec.com (SysWatch service... 7.8 High
- safensoft softcontrol enterprise suite, softcontrol syswatch, softcontrol tpsecure +2 more Download of code with improper integrity check in snsupd.exe and upd.exe in SAFE'N'SEC... 8.1 High
- gopro gpmf-parser An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in... 9.8 Critical
- wstmall WSTMall v1.9.1_170316 has CSRF via the index.php?m=Admin&c=Users&a=edit URI to add a user account. 8.8 High
- gopro gpmf-parser An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in... 9.8 Critical
- gopro gpmf-parser An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in... 9.8 Critical
- gopro gpmf-parser An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in... 9.8 Critical
- opentsdb OpenTSDB Cross-site Scripting vulnerability 6.1 Medium
- weblication cms core \& grid An XSS issue was discovered in Inhaltsprojekte in Weblication CMS Core & Grid v12.6.24. The... 4.8 Medium
- sandoba cp\ An XSS issue was discovered in Sandoba CP:Shop v2016.1. The vulnerability is located in the ... 6.1 Medium
- anelectron advanced electron forum An XSS issue was discovered in Advanced Electron Forum (AEF) v1.0.9. A persistent XSS... 4.8 Medium
- tar project tar Arbitrary file overwrite in tar-rs 7.5 High
- zohocorp manageengine desktop central Incorrect Access Control in AgentTrayIconServlet in Zoho ManageEngine Desktop Central 10.0.255... 7.5 High
- zohocorp firewall analyzer, manageengine netflow analyzer, manageengine network configuration manager +2 more +4 more A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before... 6.1 Medium
- zohocorp firewall analyzer, manageengine netflow analyzer, manageengine network configuration manager +2 more +4 more Incorrect Access Control in FailOverHelperServlet in Zoho ManageEngine Netflow Analyzer before... 7.5 High
- zohocorp manageengine applications manager A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager... 6.1 Medium
- onefilecms onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP... 8.8 High
- onefilecms onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP... 8.8 High
- onefilecms onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to conduct brute-force... 9.8 Critical
- maelostore project maelostore An issue was discovered CMS MaeloStore V.1.5.0. There is stored XSS in the Telephone field of the... 4.8 Medium
- greencms GreenCMS 2.3.0603 has an arbitrary file download vulnerability via an index.php?m=admin&c=media&a... 7.5 High
- hycus cms project cms Hycus CMS 1.0.4 allows Authentication Bypass via "'=' 'OR'" credentials. 9.8 Critical
- podofo project podofo A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey() function in... 7.8 High
- podofo project podofo Invalid memory read in the PoDoFo::PdfVariant::DelayedLoad() function in PdfVariant.h in PoDoFo 0... 5.5 Medium
- opentsdb OpenTSDB Cross-site Scripting vulnerability 6.1 Medium
- opentsdb OpenTSDB vulnerable to OS Command Injection 9.8 Critical
- easycms EasyCMS 1.3 has CSRF via the index.php?s=/admin/user/delAll URI to delete users. 6.5 Medium
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 more Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs).... 5.0 Medium
- gpac, canonical ubuntu linux, debian linux +2 more An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the... 9.8 Critical
- gpac, canonical ubuntu linux, debian linux +2 more An issue was discovered in MP4Box in GPAC 0.7.1. The function urn_Read in isomedia/box_code_base... 9.8 Critical
- gnome libsoup, canonical ubuntu linux, debian linux +6 more +8 more The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have... 9.8 Critical
- [unknown] perl-archive-zip, canonical ubuntu linux, debian linux +2 more perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the... 5.4 Medium
- apache cassandra Missing Authentication for Critical Function in Apache Cassandra 9.8 Critical
- fortinet fortimanager, fortinet, inc. fortinet fortimanager +1 more A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.6 and below... 4.8 Medium
- Show olderLoading…