CVEs published in June 2018
1,550 vulnerabilities, 195 critical, 3 exploited.
- libxl project libxl, hackerone libxl node module +1 moreDownloads Resources over HTTP in libxl8.1 High
- openlayers closure-utilclosure-util downloads Resources over HTTP8.1 High
- closurecompiler project closurecompiler, hackerone closurecompiler node module +1 moreclosurecompiler downloads Resources over HTTP8.1 High
- appgyver steroids, hackerone steroids node module +1 moresteroids downloads resources over HTTP8.1 High
- nodewebkit project nodewebkit, hackerone nodewebkit node module +1 moreDownloads Resources over HTTP in nodewebkit8.1 High
- chromedriver project chromedriver, hackerone chromedriver node module +1 morechromedriver Downloads Resources over HTTP8.1 High
- fuseki project fuseki, hackerone fuseki node module +1 morefuseki downloads Resources over HTTP8.1 High
- hakatashi kindlegen, hackerone kindlegen node module +1 moreDownloads Resources over HTTP in kindlegen8.1 High
- apk-parser3 project apk-parser3, hackerone apk-parser3 node module +1 moreDownloads Resources over HTTP in apk-parser38.1 High
- hackerone sexstaticCross-Site Scripting in sexstatic6.1 Medium
- hackerone pdfinfojsCommand Injection in pdfinfojs9.8 Critical
- hackerone hektoOpen Redirect in hekto6.1 Medium
- njtech greencmsAn issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that can add an...8.8 High
- njtech greencmsAn issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that allows...8.8 High
- brother hl-l2340d firmware, hl-l2380dw firmware +1 moreCross-site scripting (XSS) vulnerability on Brother HL series printers allows remote attackers to...4.8 Medium
- nch axon pbxThere is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON->Auto-Dialer->Agents->Name"...6.1 Medium
- nch axon pbxAXON PBX 2.02 contains a DLL hijacking vulnerability that could allow an unauthenticated, remote...7.8 High
- modx revolutionMODX Revolution 2.6.3 has XSS.5.4 Medium
- miniupnp project ngiflibngiflib.c in MiniUPnP ngiflib 0.4 has an infinite loop in DecodeGifImg and LoadGif.7.5 High
- cirt.net niktoCSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject...9.8 Critical
- emssoftware ems master calendarData input into EMS Master Calendar before 8.0.0.201805210 via URL parameters is not properly...6.1 Medium
- multidots advance search for woocommerceAn issue was discovered in the MULTIDOTS Advance Search for WooCommerce plugin 1.0.9 and earlier...6.1 Medium
- multidots woocommerce quick reportsThe MULTIDOTS WooCommerce Quick Reports plugin 1.0.6 and earlier for WordPress is vulnerable to...6.1 Medium
- natus xltek neuroworks, natus medical incorporated natus +1 moreAn exploitable denial-of-service vulnerability exists in the lookup entry functionality of...7.5 High
- natus xltek neuroworks, natus medical incorporated natus +1 moreAn exploitable denial-of-service vulnerability exists in the traversal of lists functionality of...7.5 High
- natus xltek neuroworks, natus medical incorporated natus +1 moreAn exploitable denial-of-service vulnerability exists in the unserialization of lists...7.5 High
- huawei espace desktopThere is a stored cross-site scripting (XSS) vulnerability in Huawei eSpace Desktop V300R001C00...5.4 Medium
- huawei 1288h v5 firmware, 2288h v5 firmware, 2488 v5 firmware +18 more +20 moreThe iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a JSON...8.8 High
- huawei 1288h v5 firmware, 2288h v5 firmware, 2488 v5 firmware +18 more +20 moreThe iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a JSON...8.8 High
- huawei 1288h v5 firmware, 2288h v5 firmware, 2488 v5 firmware +18 more +20 moreThe iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a privilege...8.8 High
- f5 big-ip (asm), big-ip application security manager +1 moreUnder certain conditions, on F5 BIG-IP ASM 13.1.0-13.1.0.5, Behavioral DOS (BADOS) protection may...6.5 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreA local file vulnerability exists in the F5 BIG-IP Configuration utility on versions 13.0.0, 12.1...4.3 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +9 more +11 moreUnder certain conditions, on F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, or 11.6.1 HF2-11.6.3.1,...5.3 Medium
- f5 enterprise manager, big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager +12 more +14 moreOn F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1...7.2 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn F5 BIG-IP 13.0.0, 12.0.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, when processing...5.9 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn F5 BIG-IP 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, carefully crafted URLs...6.1 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.3, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1,...7.5 High
- graylogCross-site Scripting in Graylog6.1 Medium
- graylogCross-site Scripting in Graylog Server6.1 Medium
- gethue hueHue 3.12 has XSS via the /pig/save/ name and script parameters.6.1 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreFeatures in F5 BIG-IP 13.0.0-13.1.0.3, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1...5.3 Medium
- huawei mate 8 firmware, p9 firmware, p9 plus firmware +1 more +3 moreSome Huawei smart phones have the denial of service (DoS) vulnerability due to the improper...4.2 Medium
- synology drive, drive server +1 moreImproper access control vulnerability in Synology Drive before 1.0.2-10275 allows remote...6.5 Medium
- synology drive, drive server +1 moreCross-site scripting (XSS) vulnerability in File Sharing Notify Toast in Synology Drive before 1...6.5 Medium
- webkitgtk webkitgtk\+webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess...7.5 High
- rust-openssl project rust-opensslUse after free in openssl9.8 Critical
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function...6.5 Medium
- artifex ghostscriptpsi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is...5.3 Medium
- bouncycastle legion-of-the-bouncy-castle-java-crytography-api, canonical ubuntu linux, netapp 7-mode transition tool +2 more +4 moreIn Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate7.5 High