CVEs published in June 2018
1,550 vulnerabilities, 195 critical, 3 exploited.
- articlecms project articlecmsArticleCMS through 2017-02-19 has XSS via an "add an article" action.5.4 Medium
- opcfoundation ua-.net-legacy, ua-.netstandard +1 moreOPC UA applications can allow a remote attacker to determine a Server's private key5.3 Medium
- wpdevart booking calendarAn issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2...7.5 High
- opcfoundation local discovery serverOPC Foundation Local Discovery Server (LDS) 1.03.370 required a security update to resolve...6.5 Medium
- opcfoundation local discovery serverThe OPC Foundation Local Discovery Server (LDS) before 1.03.367 is installed as a Windows Service...7.8 High
- apache geodeApache Geode vulnerable to Incorrect Authorization8.8 High
- node.jsCalling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could...7.5 High
- node.jsNode.js versions 9.7.0 and later and 10.x are vulnerable and the severity is MEDIUM. A bug...7.5 High
- node.jsAll versions of Node.js 9.x and 10.x are vulnerable and the severity is HIGH. An attacker can...7.5 High
- node.jsAll versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker...7.5 High
- symantec norton app lockNorton App Lock prior to version 1.3.0.329 can be susceptible to a bypass exploit. In this type...6.2 Medium
- apollotechnologiesinc momentum axel 720p, momentum axel 720p firmware +1 moreAn issue was discovered on Momentum Axel 720P 5.1.8 devices. A password of EHLGVG is hard-coded...6.8 Medium
- radare radare2There is a heap out of bounds read in radare2 2.6.0 in _6502_op() in libr/anal/p/anal_6502.c via...5.5 Medium
- radare radare2There is a heap out of bounds read in radare2 2.6.0 in java_switch_op() in libr/anal/p/anal_java...7.8 High
- radare radare2There is a use after free in radare2 2.6.0 in r_anal_bb_free() in libr/anal/bb.c via a crafted...7.8 High
- igniterealtime openfireIgnite Realtime Openfire vulnerable to cross-site scripting6.1 Medium
- sensiolabs symfony, debian linux +1 moreSymfony Open Redirect6.1 Medium
- sensiolabs symfonySymfony Authentication Bypass9.8 Critical
- sensiolabs symfony, debian linux +1 moreSymfony CSRF Token Fixation8.8 High
- sensiolabs symfony, debian linux +1 moreSymfony DoS5.9 Medium
- sensiolabs symfony, debian linux, fedoraproject fedora +2 moreSymfony Session Fixation Vulnerability8.1 High
- sensiolabs symfony, debian linux +1 moreSymfony Open Redirect6.1 Medium
- hackerone private address check ruby gem, private address check project address check +1 moreprivate_address_check contains race condition3.7 Low
- ibm spectrum scale, general parallel file system +1 moreA vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that...7.4 High
- ibm financial transaction managerIBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.6 could allow an...3.1 Low
- palemoon pale moonA use-after-free vulnerability exists in DOMProxyHandler::EnsureExpandoObject in Pale Moon before...9.8 Critical
- matrix synapseMatrix Synapse Security Filtering Flaw7.5 High
- yii2-statemachineYii2-StateMachine extension for Yii2 XSS Vulnerability6.1 Medium
- tibco runtime agent, tibco software inc. runtime agent for z/linux +1 moreXML eXternal Entity Expansion Vulnerabilities with TIBCO Runtime Agent5.8 Medium
- tibco administrator, tibco software inc. administrator - enterprise edition, administrator - enterprise edition for z/linux +2 moreXML eXternal Entity Expansion Vulnerabilities with TIBCO Administrator6.5 Medium
- tibco administrator, tibco software inc. administrator - enterprise edition, administrator - enterprise edition for z/linux +2 moreTIBCO Administrator - Enterprise Edition Cross-Site Scripting Vulnerability8.0 High
- ximdexThe /edit URI in the DMS component in Ximdex 4.0 has XSS via the Ciudad or Nombre parameter.6.1 Medium
- ximdexxowl/request.php in Ximdex 4.0 has XSS via the content parameter.6.1 Medium
- opensuse open build serviceopen build service allows anyone to upload rpms6.5 Medium
- acccheck project acccheck.placccheck.pl in acccheck 0.2.1 allows Command Injection via shell metacharacters in a username or...9.8 Critical
- hongcms project hongcmssystem\errors\404.php in HongCMS 3.0.0 has XSS via crafted input that triggers a 404 HTTP status...6.1 Medium
- portfoliocms project portfoliocmsportfolioCMS 1.0.5 allows upload of arbitrary .php files via the admin/portfolio.php?newpage=true...8.8 High
- exiv2, canonical ubuntu linux, debian linux +2 moreExiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out...8.8 High
- exiv2, canonical ubuntu linux, debian linux +2 moreExiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an out-of...8.8 High
- qemu, canonical ubuntu linux, debian linux +8 more +10 morem_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.8.2 High
- gnupg libgcrypt, canonical ubuntu linux, debian linux +8 more +10 moreLibgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA...4.7 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreBuffer over flow can occur while processing a HTT_T2H_MSG_TYPE_TX_COMPL_IND message with an out...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreDue to a race condition in the QTEECOM driver in all Android releases from CAF (Android for MSM,...7.0 High
- debian linux, google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +4 more +6 moreIn the function wmi_set_ie(), the length validation code does not handle unsigned integer...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreEarly or late retirement of rotation requests can result in a Use After Free condition in all...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn the video driver function set_output_buffers(), binfo can be accessed after being freed in a...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn the function wma_pdev_div_info_evt_handler() in all Android releases from CAF (Android for MSM...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreAn arbitrary address write can occur if a compromised WLAN firmware sends incorrect data to WLAN...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreBuffer overflow can occur due to improper input validation in multiple WMA event handler...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD...7.8 High
- Show moreLoading…