CVEs published in June 2018
1,550 vulnerabilities, 195 critical, 3 exploited.
- jenkins github branch sourceJenkins GitHub Branch Source Plugin vulnerable to Server-Side Request Forgery4.3 Medium
- jenkins githubJenkins GitHub Plugin server-side request forgery vulnerability exists5.4 Medium
- jenkins githubJenkins GitHub Plugin exposure of sensitive information vulnerability exists6.5 Medium
- jenkins gitServer-Side Request Forgery in Jenkins Git Plugin6.4 Medium
- apache stormZipSlip in org.apache.storm:storm-core5.5 Medium
- apache stormModerate severity vulnerability that affects org.apache.storm:storm-core6.5 Medium
- huawei 1288h v5 firmware, 2288h v5 firmware, 2488 v5 firmware +18 more +20 moreThere is an authentication bypass vulnerability in some Huawei servers. A remote attacker with...8.8 High
- ibm infosphere information serverIBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to obtain...5.9 Medium
- ibm infosphere information serverIBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to cross-frame...6.1 Medium
- gamerpollsAn issue was discovered in GamerPolls 0.4.6, related to config/environments/all.js and config...7.3 High
- aprendecondedos dedos-webIn Dedos-web 1.0, the cookie and session secrets used in the Express.js application have...7.3 High
- ibm infosphere information serverIBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 could allow a user to escalate their...8.4 High
- microsoft officeCross-site scripting (XSS) vulnerability in Title Tootip in Synology Office before 3.0.3-2143...6.5 Medium
- synology file stationCross-site scripting (XSS) vulnerability in Attachment Preview in Synology File Station before 1...6.5 Medium
- mcafee management of native encryption, management of native encryption (mne) +1 moreSB10232 - McAfee Management of Native Encryption (MNE) - Privilege Escalation vulnerability7.5 High
- manageengine applications managerManageEngine Applications Manager versions 12 and 13 suffer from a Reflected Cross-Site Scripting vulnerability6.1 Medium
- manageengine applications managerManageEngine Applications Manager versions 12 and 13 suffer from remote SQL injection vulnerabilities9.8 Critical
- mruby, debian linux +1 moreThe init_copy function in kernel.c in mruby 1.4.1 makes initialize_copy calls for TT_ICLASS...9.8 Critical
- ibm kituraKitura 2.3.0 and earlier have an unintended read access to unauthorised files and folders that...7.5 High
- bouncycastle bc-java, fips java api, debian linux +17 more +19 moreBouncy Castle has a flaw in the Low-level interface to RSA key pair generator7.5 High
- rsa web threat detectionRSA Web Threat Detection SQL Injection Vulnerability8.8 High
- wuzhicmsWUZHI CMS 4.1.0 has a SQL Injection in api/uc.php via the 'code' parameter, because 'UC_KEY' is...9.8 Critical
- sleuthkit the sleuth kitAn issue was discovered in libtskbase.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6...8.1 High
- sleuthkit the sleuth kitAn issue was discovered in libtskimg.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6...8.1 High
- sleuthkit the sleuth kitAn issue was discovered in libtskfs.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1...8.1 High
- sleuthkit the sleuth kitAn issue was discovered in libtskfs.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1...8.1 High
- monstra cmsplugins/box/users/users.plugin.php in Monstra CMS 3.0.4 allows Login Rate Limiting Bypass via...9.8 Critical
- yzmcmsThe forgotten-password feature in index.php/member/reset/reset_email.html in YzmCMS v3.2 through...9.8 Critical
- pluck-cms pluckAn issue was discovered in Pluck before 4.7.7-dev2. /data/inc/images.php allows remote attackers...9.8 Critical
- ximdexindex.php?action=createaccount in Ximdex 4.0 has XSS via the sname or fname parameter.6.1 Medium
- nzedbnZEDb Cross-site Scripting (XSS) in the 404 error page5.4 Medium
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, debian linux +2 moreIn Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability was found within the...7.5 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, debian linux +2 moreThe Eclipse Mosquitto broker up to version 1.4.15 does not reject strings that are not valid UTF...5.3 Medium
- bouncycastle bc-javaIn Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode7.4 High
- bouncycastle bc-javaIn Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode7.4 High
- foxit, foxitsoftware foxit reader +1 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software...8.8 High
- talos allen bradley, rockwellautomation micrologix 1400 b firmware +1 moreAn exploitable file write vulnerability exists in the memory module functionality of Allen...3.7 Low
- sqlserver project sqlserver, hackerone sqlserver node module +1 moresqlserver is malware7.5 High
- nodefabric project nodefabric, hackerone nodefabric node module +1 morenodefabric is malware7.5 High
- fabric-js project fabric-js, hackerone fabric-js node module +1 morefabric-js is malware7.5 High
- node-fabric project node-fabric, hackerone node-fabric node module +1 morenode-fabric is malware7.5 High
- sqliter project sqliter, hackerone sqliter node module +1 moresqliter is malware7.5 High
- sqlite.js project sqlite.js, hackerone sqlite.js node module +1 moresqlite.js is malware7.5 High
- nodesqlite project nodesqlite, hackerone nodesqlite node module +1 morenodesqlite is malware7.5 High
- node-sqlite project node-sqlite, hackerone node-sqlite node module +1 morenode-sqlite is malware7.5 High
- mariadb, hackerone mariadb node module +1 moreWithdrawn Advisory: mariadb was malware7.5 High
- jquery.js project jquery.js, hackerone jquery.js node module +1 morejquery.js is malware7.5 High
- d3.js project d3.js, hackerone d3.js node module +1 mored3.js is malware7.5 High
- shout project shout, hackerone shout node module +1 moreHTML Injection in shout6.1 Medium
- growl project growl, hackerone growl node module +1 moreGrowl before 1.10.0 vulnerable to Command Injection9.8 Critical
- Show moreLoading…