CVEs published in June 2018
1,550 vulnerabilities, 195 critical, 3 exploited.
- apple iphone os, mac os x +1 moreAn issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10...6.5 Medium
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue...7.5 High
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue...5.5 Medium
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue...5.5 Medium
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue...5.5 Medium
- mdadm project mdadm, opensuse +1 moreThe mdcheck script of the mdadm package for openSUSE 13.2 prior to version 3.3.1-5.14.1 does not...7.8 High
- opensuse open build serviceCSRF protection incorrectly disabled8.8 High
- opensuse open build service, obs-service-set version +1 moresed command injection7.8 High
- opensuse open build serviceNo write permission check in change_role command8.8 High
- crowbar project crowbarinsecure permissions on files containing confidential data3.3 Low
- suse kdump, linux enterprise desktop, linux enterprise server +2 moreMissing verification of host key for kdump server5.9 Medium
- bird project birdBIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service (stack...5.5 Medium
- trend micro officescanA out-of-bounds read information disclosure vulnerability in Trend Micro OfficeScan 11.0 SP1 and...4.7 Medium
- trend micro officescanA pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG...6.3 Medium
- trend micro officescanA pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG...6.3 Medium
- trend micro officescanA pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG...6.3 Medium
- qnap systems inc. photo stationPermissive regular expression vulnerability in synophoto_dsm_user in Synology Photo Station...8.8 High
- qnap systems inc. photo stationCross-site request forgery (CSRF) vulnerability in admin/user.php in Synology Photo Station...8.8 High
- synology diskstation manager (dsm), diskstation manager +1 moreUnverified password change vulnerability in Change Password in Synology DiskStation Manager (DSM)...6.3 Medium
- ibm security identity managerIBM Security Identity Manager Virtual Appliance 7.0 allows an authenticated attacker to upload or...8.8 High
- ibm security identity managerIBM Security Identity Manager Virtual Appliance 7.0 processes patches, image backups and other...4.4 Medium
- synology router manager, router manager (srm) +1 moreCommand injection vulnerability in EZ-Internet in Synology Router Manager (SRM) before 1.1.6-6931...7.2 High
- synology diskstation manager (dsm), diskstation manager +1 moreCommand injection vulnerability in EZ-Internet in Synology DiskStation Manager (DSM) before 6.2...7.2 High
- suse linux enterprise, linux enterprise server +1 moreunix2_chkpwd do not check for a valid account5.4 Medium
- actix actix-webOut-of-bounds Write in actix-web9.8 Critical
- actix actix-webOut-of-bounds Write in actix-web9.8 Critical
- actix actix-webOut-of-bounds Write in actix-web9.8 Critical
- creatiwity witycmsA Local File Inclusion vulnerability in /system/WCore/WHelper.php in Creatiwity wityCMS 0.6.2...9.8 Critical
- tinyexr project tinyexrtinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h.9.8 Critical
- splunkSplunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server...5.3 Medium
- xiongmaitech uc-httpdBuffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different...9.8 Critical
- schools alert management script project alert management scriptMultiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted...9.8 Critical
- schools alert management script project alert management scriptArbitrary File Read exists in PHP Scripts Mall Schools Alert Management Script via the f...7.5 High
- schools alert management script project alert management scriptArbitrary File Deletion exists in PHP Scripts Mall Schools Alert Management Script via the img...7.5 High
- schools alert management script project alert management scriptSQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in...9.8 Critical
- schools alert management script project alert management scriptArbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert...9.8 Critical
- ledgersmb, pgobject-util-dbadmin project pgobject-util-dbadmin +1 moreThe PGObject::Util::DBAdmin module before 0.120.0 for Perl, as used in LedgerSMB through 1.5.x,...9.8 Critical
- lynxtechnology twonky serverTwonky Server before 8.5.1 has XSS via a modified "language" parameter in the Language section.6.1 Medium
- lynxtechnology twonky serverTwonky Server before 8.5.1 has XSS via a folder name on the Shared Folders screen.6.1 Medium
- canon lbp6030w firmware** DISPUTED ** A remote attacker can bypass the System Manager Mode on the Canon LBP6030w web...9.8 Critical
- canon lbp7110cw firmware** DISPUTED ** A remote attacker can bypass the Management Mode on the Canon LBP7110Cw web...9.8 Critical
- ximdexxfind/search in Ximdex 4.0 has XSS via the filter[n][value] parameters for non-negative values of...6.1 Medium
- dedecmsDedeCMS through 5.7SP2 allows arbitrary file write in dede/file_manage_control.php via a dede...7.5 High
- dedecmsDedeCMS through V5.7SP2 allows arbitrary file upload in dede/file_manage_control.php via a dede...9.8 Critical
- mediatek awus036nh firmwareAn issue was discovered on the MediaTek AWUS036NH wireless USB adapter through 5.1.25.0....7.5 High
- crestron toolbox protocol firmwareCrestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001...9.8 Critical
- crestron toolbox protocol firmwareCrestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001...9.8 Critical
- apple tv, watchos, iphone os +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10...7.8 High
- apple icloud, itunes, safari +4 more +6 moreAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11...8.8 High
- apple icloud, itunes, safari +4 more +6 moreAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11...8.8 High
- Show moreLoading…