CVEs published in June 2018
1,550 vulnerabilities, 195 critical, 3 exploited.
- google chromeMissing type check in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of clearing the previous site before loading alerts from a new one in Blink in Google Chrome...6.5 Medium
- google chromeInformation leak in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 67.0.3396...6.5 Medium
- google chromeUninitialized data in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...4.3 Medium
- google chromeObject lifecycle issue in WebAssembly in Google Chrome prior to 67.0.3396.62 allowed a remote...8.8 High
- google chromeIncorrect handling of object lifetimes in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a...6.5 Medium
- google chromeOut of bounds array access in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote...6.5 Medium
- google chromeIncorrect URL parsing in WebKit in Google Chrome on iOS prior to 67.0.3396.62 allowed a remote...6.1 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreEarly free of object in use in IndexDB in Google Chrome prior to 67.0.3396.62 allowed a remote...9.6 Critical
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreType confusion in ReadableStreams in Blink in Google Chrome prior to 67.0.3396.62 allowed a...8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA use after free in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficiently sanitized distributed objects in Updater in Google Chrome on macOS prior to 66.0...7.8 High
- tp-link tl-wr840n firmware, tl-wr841n firmware +1 moreAn issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel...9.8 Critical
- gnome libsoup, webkitgtk webkitgtk\+ +1 moreWebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of...6.5 Medium
- webkitgtk webkitgtk\+WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of...7.5 High
- ge mds pulsenet and mds pulsenet enterprise, mds pulsenet +1 moreDirectory traversal may lead to files being exfiltrated or deleted on the GE MDS PulseNET and MDS...8.1 High
- ge mds pulsenet and mds pulsenet enterprise, mds pulsenet +1 moreMultiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the...7.5 High
- ge mds pulsenet and mds pulsenet enterprise, mds pulsenet +1 moreJava remote method invocation (RMI) input port in GE MDS PulseNET and MDS PulseNET Enterprise...9.8 Critical
- canon mf210 firmware, mf220 firmware +1 more** DISPUTED ** A remote attacker can bypass the System Manager Mode on the Canon MF210 and MF220...9.8 Critical
- openmpt libopenmptsoundlib/pattern.h in libopenmpt before 0.3.9 allows remote attackers to cause a denial of...8.8 High
- gvectors wpforo forumwpforo_get_request_uri in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for...6.1 Medium
- bouncycastle bc-javaThe Bouncy Castle JCE Provider carry a propagation bug7.5 High
- sass-lang libsassAn issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was...8.1 High
- sass-lang libsassAn issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was...8.1 High
- sass-lang libsassAn issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the...8.8 High
- sass-lang libsassAn issue was discovered in LibSass <3.5.3. A NULL pointer dereference was found in the function...8.8 High
- sass-lang libsassAn issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the...8.8 High
- sass-lang libsassAn issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was...8.1 High
- canon lbp3370 firmware, lbp3460 firmware, lbp6650 firmware +1 more +3 more** DISPUTED ** An issue was discovered on Canon LBP6650, LBP3370, LBP3460, and LBP7750C devices....9.8 Critical
- burp project burpThe Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp...7.1 High
- burp project burpThe Gentoo app-backup/burp package before 2.1.32 sets the ownership of the PID file directory to...7.1 High
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in...8.8 High
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in...8.8 High
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in...8.8 High
- bouncycastle bc-java, debian linux +1 moreIn Bouncy Castle JCE Provider the other party DH public key is not fully validated3.7 Low
- bouncycastle bc-java, debian linux +1 moreModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 Medium
- bouncycastle bc-java, debian linux +1 moreIn Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values7.5 High
- bouncycastle bc-java, debian linux +1 moreIn Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification7.5 High
- bouncycastle bc-java, debian linux +1 moreModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 Medium
- bouncycastle bc-java, debian linux +1 moreModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.3 Medium
redmineDebianredmine - regression updateNo score- lutron stanza, homeworks qs firmware, radiora 2 firmware +1 more +3 more** DISPUTED ** Default and unremovable support credentials allow attackers to gain total super...9.8 Critical
- lutron homeworks qs firmware, radiora 2 firmware, stanza firmware +2 more** DISPUTED ** Default and unremovable support credentials (user:nwk password:nwk2) allow...9.8 Critical
- lutron homeworks qs firmware, radiora 2 firmware, stanza firmware +2 more** DISPUTED ** Default and unremovable support credentials (user:lutron password:integration)...9.8 Critical
- cmseasyAn issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability in the rich text...6.5 Medium
- cmseasyAn issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability that can add an...8.8 High
- [unknown] prosodyprosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not...4.2 Medium
- pagekitPagekit Stored Cross-site Scripting4.8 Medium
- yosoro project yosoroYosoro 1.0.4 has stored XSS.6.1 Medium
- Show moreLoading…