CVEs published in June 2018
1,550 vulnerabilities, 195 critical, 3 exploited.
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD...5.5 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreimproper validation of array index in WiFi driver function sapInterferenceRssiCount() leads to...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreWhile processing a DSP buffer in an audio driver's event handler, an index of a buffer is not...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn the KGSL driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD...7.8 High
- dinknetwork dfarc, dfarc2, debian linux +2 moreDirectory traversal issues in the D-Mod extractor in DFArc and DFArc2 (as well as in RTsoft's...7.5 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn wma_ndp_end_response_event_handler(), the variable len_end_rsp is a uint32 which can be...7.8 High
- google androidIn the camera driver, an out-of-bounds access can occur due to an error in copying region params...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreThe value of fix_param->num_chans is received from firmware and if it is too large, an integer...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreDue to a race condition in a bus driver, a double free in msm_bus_floor_vote_context() can...7.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreBuffer might get used after it gets freed due to unlocking the mutex before freeing the buffer in...7.8 High
- apollotechnologiesinc momentum axel 720p firmwareAn issue was discovered on Momentum Axel 720P 5.1.8 devices. All processes run as root.4.4 Medium
- apollotechnologiesinc momentum axel 720p firmwareAn issue was discovered on Momentum Axel 720P 5.1.8 devices. The root password can be obtained in...6.7 Medium
- apollotechnologiesinc momentum axel 720p firmwareAn issue was discovered on Momentum Axel 720P 5.1.8 devices. Root access can be obtained via UART...6.8 Medium
- apollotechnologiesinc momentum axel 720p firmwareAn issue was discovered on Momentum Axel 720P 5.1.8 devices. Custom Firmware Upgrade is possible...6.8 Medium
- apollotechnologiesinc momentum axel 720p firmwareAn issue was discovered on Momentum Axel 720P 5.1.8 devices. There is Authenticated Custom...4.4 Medium
- pvpgn statsAn issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the...9.8 Critical
- pvpgn statsAn issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the...9.8 Critical
- pvpgn statsAn issue was discovered in PvPGN Stats 2.4.6. SQL Injection exist in ladder/stats.php via the GET...9.8 Critical
- pvpgn statsAn issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the...9.8 Critical
- pvpgn statsAn issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the...9.8 Critical
- harmistechnology ek rishtarouter.php in the Harmis Ek rishta (aka ek-rishta) 2.10 component for Joomla! allows SQL...8.8 High
- western digital tv live hub, tv media player, westerndigital tv live hub firmware +1 more +3 moreThe web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow...9.8 Critical
- trend micro officescanA vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to exploit it...8.8 High
- trend micro officescanA vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to use a...8.8 High
- trend micro officescanA vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series...4.4 Medium
- objective development software gmbh little snitchLittle Snitch versions 4.0 to 4.0.6 use the SecStaticCodeCheckValidityWithErrors() function...5.3 Medium
- safensoft softcontrol enterprise suite, softcontrol syswatch, softcontrol tpsecure +2 moreImproper restriction of write operations within the bounds of a memory buffer in snscore.sys in...7.1 High
- sap infrastructure, ui, sap se ui for sap netweaver 7.00 +2 moreUnder certain conditions SAP UI5 Handler allows an attacker to access information which would...5.3 Medium
- sap business oneUnder certain conditions, SAP Business One, 9.2, 9.3, for SAP HANA backup service allows an...8.4 High
- sap hana database, ui, ui5 +3 more +5 moreSAP UI5 did not validate user input before adding it to the DOM structure. This may lead to...9.8 Critical
- redhat source-to-image, openshift enterprise unsanitized paths in tar.go +1 moreOpenshift Enterprise source-to-image vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip)6.1 Medium
- opensuse sysconfigshell code injection via ESSID because of missing escaping of a variable7.3 High
- mruby, debian linux +1 moreAn issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class_real...7.5 High
- mrubyAn issue was discovered in mruby 1.4.1. There is a heap-based buffer over-read associated with...7.5 High
- mrubyAn issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class, related...7.5 High
- mcafee network security management (nsm), network security manager +1 moreMcAfee Network Security Management (NSM) - Password recovery exploitation vulnerability5.6 Medium
- mcafee network security management (nsm), network security manager +1 moreMcAfee Network Security Management (NSM) - Exploitation of Authorization vulnerability5.9 Medium
ucode-intelSUSESecurity update for ucode-intelNo score- [unknown] ovirt-engine, ovirt +1 moreovirt-engine up to version 4.2.3 is vulnerable to an unfiltered password when choosing manual db...5.0 Medium
- [unknown] routing, redhat openshift container platform +1 morerouting before version 3.10 is vulnerable to an improper input validation of the Openshift...6.5 Medium
- sfu open journal systemCross-site scripting (XSS) vulnerability in Public Knowledge Project (PKP) Open Journal System ...6.1 Medium
- sangoma asteriskAn issue was discovered in Asterisk Open Source 15.x before 15.4.1. When connected to Asterisk...6.5 Medium
- digium asterisk, certified asterisk, debian linux +2 moreAn issue was discovered in Asterisk Open Source 13.x before 13.21.1, 14.x before 14.7.7, and 15.x...5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreIn the Linux Kernel before version 4.16.11, 4.14.43, 4.9.102, and 4.4.133, multiple race...7.0 High
- isc bind, bind 9, canonical ubuntu linux +2 moreSome versions of BIND can improperly permit recursive query service to unauthorized clients5.3 Medium
- linux kernel, canonical ubuntu linux +1 moreIn the ea_get function in fs/jfs/xattr.c in the Linux kernel through 4.17.1, a memory corruption...7.8 High
- linux kernelIn net/socket.c in the Linux kernel through 4.17.1, there is a race condition between fchownat...5.9 Medium
- codehaus plexus-archiver, debian linux, redhat enterprise linux +2 more +4 moreImproper Limitation of a Pathname to a Restricted Directory in plexus-archiver5.5 Medium
- openssl, canonical ubuntu linux, debian linux +1 more +3 moreClient DoS due to large DH parameter7.5 High
- vmware airwatch agentThe VMware AirWatch Agent for Android prior to 8.2 and AirWatch Agent for Windows Mobile prior to...10.0 Critical
- Show moreLoading…