CVEs published in June 2018
1,550 vulnerabilities, 195 critical, 3 exploited.
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreType mismatch for ie_len can cause the WLAN driver to allocate less memory on the heap due to...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreWhile sending a probe request indication in lim_send_sme_probe_req_ind() in all Android releases...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreBuffer over -read can occur while processing a FILS authentication frame in all Android releases...5.5 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreA crafted binder request can cause an arbitrary unmap in MediaServer in all Android releases from...7.8 High
- beaconmedaes scroll medical air systems firmware, ics-cert beaconmedaes totalalert scroll medical air systems web application +1 moreIn the web application in BeaconMedaes TotalAlert Scroll Medical Air Systems running software...9.8 Critical
- cloud foundry loggregatorCloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99...6.5 Medium
- cloud foundry loggregatorCloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99...6.8 Medium
- cloud foundry diego, pivotal software cloud foundry diego, cloudfoundry cf-deployment +2 moreCloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in...7.2 High
- otrsAn issue was discovered in OTRS 6.0.x before 6.0.7. An attacker who is logged into OTRS as a...4.3 Medium
- abb ip gateway firmwareIn ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text...9.8 Critical
- ics-cert abb ip gateway, abb ip gateway firmware +1 moreIn ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator (URL) on the...9.8 Critical
- ics-cert abb ip gateway, abb ip gateway firmware +1 moreIn ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was...8.8 High
- soarlabs soarcoinSoar Labs Soar Coin version up to and including git commit...7.5 High
qtpassMageiaUpdated qtpass packages fix security vulnerabilityNo score- ibm rational rhapsody design manager, rational software architect design manager +1 moreIBM Rhapsody DM 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to a XML External Entity...7.1 High
- ibm security access manager, security access manager for mobile, security access manager for web +2 moreIBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores...4.3 Medium
- ibm security access manager, security access manager for mobile, security access manager for web +2 moreIBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1...5.9 Medium
- ibm security access manager, security access manager for mobile, security access manager for web +2 moreIBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1...5.3 Medium
drupal/entity_deletePackagistThis module enables you to delete any types of entities in bulk. The module doesn't sufficiently verify access permissions under its use cases, leading to access bypass. The module also does not prote…No scoredrupal/adtego_siteintelPackagistThe security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please re…No scoredrupal/mollomPackagistThe security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please re…No score- ijg libjpeglibjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.7.5 High
- zohocorp manageengine applications managerIncorrect Access Control in CustomFieldsFeedServlet in Zoho ManageEngine Applications Manager...9.1 Critical
- sgin xiangyun platformSGIN.CN xiangyun platform V9.4.10 has XSS via the login_url parameter to /login.php.6.1 Medium
- displaylink core software cleanerAn issue was discovered in DisplayLink Core Software Cleaner Application 8.2.1956. When the...7.8 High
- intel integrated performance primitives cryptography, intel corporation integrated performance primitives cryptography library +1 moreSome implementations in Intel Integrated Performance Primitives Cryptography Library before...4.7 Medium
- searchbloxXML external entity (XXE) vulnerability in api/rest/status in SearchBlox 8.6.7 allows remote...9.8 Critical
- bfgminer, cgminer project cgminer +1 moreThe remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated...8.8 High
- bfgminer, cgminer project cgminer +1 moreThe remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated...6.5 Medium
- jenkins groovy postbuildJenkins Groovy Postbuild Plugin vulnerable to Cross-site Scripting5.4 Medium
- jenkins black duck hubXML External Entity processing vulnerability in Jenkins Black Duck Hub Plugin6.5 Medium
- jenkins black duck hubJenkins Black Duck Hub Plugin allowed any user with Overall/Read to read and write its configuration8.1 High
- jenkins gitlab hookJenkins Gitlab Hook Plugin stores and displays GitLab API token in plain text6.5 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreCross-Site Request Forgery in Jenkins4.3 Medium
- jenkins, oracle communications cloud native core automated test suite +1 morePath Traversal in Jenkins8.1 High
- jenkins, oracle communications cloud native core automated test suite +1 moreInjection in Jenkins4.3 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreExposure of Sensitive Information to an Unauthorized Actor in Jenkins4.3 Medium
- qnap nas proxy serverQNAP NAS application Proxy Server through version 1.2.0 does not authenticate requests properly....5.3 Medium
- qnap nas proxy serverQNAP NAS application Proxy Server through version 1.2.0 allows remote attackers to run arbitrary...9.8 Critical
- qnap nas proxy serverCross-site scripting (XSS) vulnerability in QNAP NAS application Proxy Server through version 1.2...6.1 Medium
- qnap nas proxy serverQNAP NAS application Proxy Server through version 1.2.0 does not utilize CSRF protections.8.8 High
- ics-cert intellivue patient monitors, avalon fetal/maternal monitors, philips avalon fetal\/maternal monitors fm20 firmware, avalon fetal\/maternal monitors fm30 firmware +16 more +18 moreIntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M,...8.2 High
- ics-cert intellivue patient monitors, avalon fetal/maternal monitors, philips avalon fetal\/maternal monitors fm20 firmware, avalon fetal\/maternal monitors fm30 firmware +16 more +18 moreIntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M,...5.3 Medium
- ics-cert intellivue patient monitors, avalon fetal/maternal monitors, philips avalon fetal\/maternal monitors fm20 firmware, avalon fetal\/maternal monitors fm30 firmware +16 more +18 moreIntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M,...8.3 High
- jenkins synopsys detectJenkins Black Duck Detect Plugin information exposure vulnerability6.5 Medium
- jenkins black duck hubExposure of sensitive information vulnerability in Jenkins Black Duck Hub Plugin6.5 Medium
- jenkins absint astreeCSRF vulnerability and missing permission checks in Jenkins AbsInt Astrée Plugin8.8 High
- jenkins casJenkins CAS Plugin Server-Side Request Forgery vulnerability5.4 Medium
- jenkins kubernetesExposure of Sensitive Information in Jenkins Kubernetes Plugin6.5 Medium
- jenkins github pull request builderJenkins GitHub Pull Request Builder Plugin credential capture vulnerability6.5 Medium
- Show moreLoading…