CVEs published in June 2018
1,550 vulnerabilities, 195 critical, 3 exploited.
- apple icloud, itunes, safari +3 more +5 moreAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11...4.3 Medium
- apple icloud, itunes, safari +4 more +6 moreAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11...8.8 High
- apple icloud, itunes, safari +4 more +6 moreAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11...8.8 High
- apple icloud, itunes, safari +3 more +5 moreAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11...8.8 High
- apple icloud, itunes, safari +3 more +5 moreAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11...8.8 High
- gnupg, canonical ubuntu linux, debian linux +6 more +8 moremainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and...7.5 High
- express-cart project express-cartexpress-cart unrestricted file upload vulnerability8.8 High
- cisco webex meetingsA vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote...6.1 Medium
- cisco webex meetingsA vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote...6.1 Medium
- cisco unified communications managerA vulnerability in the web UI of Cisco Unified Communications Manager (Unified CM) could allow an...6.1 Medium
- cisco unity connectionA vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated,...6.1 Medium
- cisco wide area application servicesA vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services ...6.7 Medium
- cisco unified communications managerA vulnerability in the web framework of the Cisco Unified Communications Manager (Unified CM)...5.4 Medium
- cisco identity services engine softwareA vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...6.1 Medium
- cisco unified computing systemA vulnerability in the role-based access-checking mechanisms of Cisco Unified Computing System ...7.8 High
- cisco prime collaborationA vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could...8.8 High
- cisco prime collaborationA vulnerability in the web portal authentication process of Cisco Prime Collaboration...7.8 High
- cisco anyconnect secure mobility clientA vulnerability in the certificate management subsystem of Cisco AnyConnect Network Access...4.8 Medium
- cisco secure firewall management centerA vulnerability in the VPN configuration management of Cisco FireSIGHT System Software could...5.8 Medium
- cisco ip phone firmware, unified ip phone firmware +1 moreA vulnerability in the Session Initiation Protocol (SIP) ingress packet processing of Cisco...7.5 High
- cisco wide area application servicesA vulnerability in the default configuration of the Simple Network Management Protocol (SNMP)...5.3 Medium
- cisco integrated management controller supervisorA vulnerability in the web-based management interface of Cisco Integrated Management Controller...4.8 Medium
- suse studio onsite, studio onsite 1.1 appliance, studio onsite appliance +2 moreSQL injection in SUSE studio via select parameter8.8 High
- getsymphony symphonycontent/content.blueprintspages.php in Symphony 2.7.6 has XSS via the pages content page.6.1 Medium
- roxyfileman roxy filemanRoxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter.7.5 High
- rockwellautomation factorytalk linx gateway, rslinx classic, ics-cert rockwell automation rslinx classic and factorytalk linx gateway +2 moreAn unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk...7.8 High
- joyplus-cms project joyplus-cmsjoyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary SQL command execution...9.8 Critical
- google android, nvidia gpu display driver +1 moreIn Android before the 2018-06-05 security patch level, NVIDIA Tegra X1 TZ contains a possible out...7.8 High
- google android, nvidia gpu display driver +1 moreIn Android before the 2018-06-05 security patch level, NVIDIA TLZ TrustZone contains a possible...7.8 High
- google android, nvidia gpu display driver +1 moreIn Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible...7.8 High
- mcafee common ui (cui), common catalog +1 moreExternal Entity Attack vulnerability in McAfee Common UI (CUI)7.6 High
- owasp dependency-checkPath Traversal in OWASP Dependency-Check7.8 High
- eaton intelligent power managerLocal file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file...9.8 Critical
- ibm robotic process automation with automation anywhereIBM Robotic Process Automation with Automation Anywhere 10.0 could allow a remote attacker to...8.0 High
- ibm robotic process automation with automation anywhereIBM Robotic Process Automation with Automation Anywhere 10.0 is vulnerable to cross-site request...4.3 Medium
- gnome epiphanylibephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a...7.5 High
- opensuse open build serviceOpen Build Service arbitrary package modification7.1 High
- opensuse open build serviceOpen Build Service accepts arbitrary reviews7.1 High
- cisco web security applianceA vulnerability in traffic-monitoring functions in Cisco Web Security Appliance (WSA) could allow...7.5 High
- cisco prime collaboration, prime collaboration provisioning +1 moreA vulnerability in the web management interface of Cisco Prime Collaboration Provisioning (PCP)...8.8 High
- cisco prime collaboration, prime collaboration provisioning, prime collaboration assurance +2 moreA vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated,...9.8 Critical
- cisco prime collaboration, prime collaboration provisioning +1 moreA vulnerability in the web framework code of Cisco Prime Collaboration Provisioning (PCP) could...9.8 Critical
- cisco prime collaboration, prime collaboration provisioning +1 moreA vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning (PCP)...9.8 Critical
- cisco prime collaboration, prime collaboration provisioning +1 moreA vulnerability in the password reset function of Cisco Prime Collaboration Provisioning (PCP)...9.8 Critical
- cisco prime collaboration, prime collaboration provisioning +1 moreA vulnerability in the web interface of Cisco Prime Collaboration Provisioning (PCP) could allow...8.8 High
- cisco ip phone firmwareA vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP...7.5 High
- cisco ios xeA vulnerability in the authentication, authorization, and accounting (AAA) security services of...9.8 Critical
- cisco adaptive security appliance (asa), firepower threat defense, adaptive security appliance software +1 more +3 moreA vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow...7.5 High
- cisco network services orchestratorA vulnerability in the CLI parser of Cisco Network Services Orchestrator (NSO) could allow an...8.8 High
- cisco meeting serverA vulnerability in Cisco Meeting Server (CMS) could allow an unauthenticated, adjacent attacker...7.4 High
- Show moreLoading…