CVEs published in June 2018
1,550 vulnerabilities, 195 critical, 3 exploited.
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA security feature bypass vulnerability exists in Device Guard that could allow an attacker to...5.3 Medium
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreAn elevation of privilege vulnerability exists when Windows Hyper-V instruction emulation fails...8.8 High
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server...7.7 High
- microsoft windows 10, windows server 2016 +1 moreA security feature bypass vulnerability exists in Device Guard that could allow an attacker to...5.3 Medium
- microsoft windows 10, windows server 2016 +1 moreA security feature bypass vulnerability exists in Device Guard that could allow an attacker to...5.3 Medium
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA security feature bypass vulnerability exists in Device Guard that could allow an attacker to...5.3 Medium
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreAn elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly...7.0 High
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA remote code execution vulnerability exists when Windows improperly handles objects in memory,...7.8 High
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA security feature bypass vulnerability exists in Device Guard that could allow an attacker to...5.3 Medium
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA security feature bypass vulnerability exists in Device Guard that could allow an attacker to...5.3 Medium
- microsoft windows 10, windows 10 servers, windows 8.1 +4 more +6 moreA remote code execution vulnerability exists when Windows improperly handles objects in memory,...7.8 High
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreAn information disclosure vulnerability exists when Windows allows a normal user to access the...8.0 High
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreAn elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly...7.0 High
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreAn information disclosure vulnerability exists when the Windows kernel improperly handles objects...4.7 Medium
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreA denial of service vulnerability exists when Windows improperly handles objects in memory, aka ...5.5 Medium
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA security feature bypass vulnerability exists in Device Guard that could allow an attacker to...4.5 Medium
- microsoft windows 10, windows 10 servers, windows server 1803 +1 more +3 moreAn denial of service vulnerability exists when Windows NT WEBDAV Minirdr attempts to query a...6.5 Medium
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreAn elevation of privilege vulnerability exists when the (Human Interface Device) HID Parser...7.0 High
- microsoft windows 10, windows 10 servers, windows server 1803 +1 more +3 moreAn Elevation of Privilege vulnerability exists when Cortana retrieves data from user input...6.8 Medium
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreAn information disclosure vulnerability exists when the Windows kernel improperly initializes...4.7 Medium
- microsoft internet explorer 11, internet explorer +1 moreA security feature bypass vulnerability exists in Internet Explorer that allows for bypassing...6.5 Medium
- microsoft edgeA remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in...7.5 High
- microsoft edgeA remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in...7.5 High
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreA denial of service vulnerability exists in the way that the Windows Code Integrity Module...5.3 Medium
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreAn elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS...7.0 High
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreAn elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces...7.0 High
- microsoft internet explorer 10, internet explorer 11, internet explorer 9 +1 more +3 moreA remote code execution vulnerability exists when Internet Explorer improperly accesses objects...7.5 High
- microsoft edgeAn information disclosure vulnerability exists when Edge improperly marks files, aka "Microsoft...4.3 Medium
- siemens scalance x-200 switch family (incl. siplus net variants), scalance x-200irt switch family (incl. siplus net variants), scalance x-200rna switch family +4 more +6 moreA vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) ...6.1 Medium
- siemens scalance x-200irt switch family (incl. siplus net variants), scalance x-200rna switch family, scalance x-300 switch family (incl. x408 and siplus net variants) +3 more +5 moreA vulnerability has been identified in SCALANCE X-200IRT switch family (incl. SIPLUS NET variants...4.8 Medium
- wpewebkit wpe webkit, canonical ubuntu linux, webkitgtk webkitgtk\+ +2 moreThe getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo...8.8 High
- point-to-point protocol project protocol, canonical ubuntu linux +1 moreImproper input validation together with an integer overflow in the EAP-TLS protocol...9.8 Critical
- eng knowageKnowage (formerly SpagoBI) 6.1.1 allows XSS via the name or description field to the "Olap...6.1 Medium
- knowage-suite knowageKnowage (formerly SpagoBI) 6.1.1 allows CSRF via every form, as demonstrated by a /knowage...8.8 High
- knowage-suite knowageKnowage (formerly SpagoBI) 6.1.1 allows XSS via the name field to the "Business Model's Catalogue...6.1 Medium
- dropbox** DISPUTED ** An issue was discovered in the com.getdropbox.Dropbox app 100.2 for iOS. The...6.4 Medium
- enigmailThe signature verification routine in Enigmail before 2.0.7 interprets user ids as status/control...7.5 High
- sensiolabs symfony** DISPUTED ** Reflected Cross-site scripting (XSS) vulnerability in the web profiler in...6.1 Medium
- virustotalAn issue was discovered in VirusTotal. A maliciously crafted Universal/fat binary can evade third...7.8 High
- carbonblack carbon black cbAn issue was discovered in Carbon Black Cb Response. A maliciously crafted Universal/fat binary...5.5 Medium
- yelp osxcollectorYelp OSXCollector Improper Certificate Validation7.8 High
- google santaAn issue was discovered in Google Santa and molcodesignchecker. A maliciously crafted Universal...7.8 High
- objective-see knockknock, lulu, procinfo +2 more +4 moreAn issue was discovered in Objective-See KnockKnock, LuLu, TaskExplorer, WhatsYourSign, and...7.8 High
- f-secure xfenceAn issue was discovered in F-Secure XFENCE and Little Flocker. A maliciously crafted Universal...7.8 High
- intel corporation core-based microprocessors, canonical ubuntu linux, citrix xenserver +12 more +14 moreSystem software utilizing Lazy FP state restore technique on systems using Intel Core-based...5.6 Medium
- mcafee epolicy orchestrator (epo), epolicy orchestrator +1 moreMcAfee ePolicy Orchestrator (ePO) - OS Command Injection vulnerability6.2 Medium
- mcafee threat intelligence exchange, threat intelligence exchange (tie) server +1 moreMcAfee Threat Intelligence Exchange (TIE) Server - Code Injection vulnerability5.4 Medium
- netapp santricity storage manager, santricity web services proxy, santricity products +2 moreNetApp SANtricity Web Services Proxy versions 1.10.x000.0002 through 2.12.X000.0002 and...9.8 Critical
- [unknown] 389-ds-base, debian linux, fedoraproject 389 directory server +7 more +9 more389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds...5.9 Medium
- mcafee network data loss prevention (ndlp), network security management (nsm), network data loss prevention +1 more +3 moreMcAfee Network Security Management (NSM) and Network Data Loss Prevention (NDLP)- Password recovery exploitation vulnerability7.5 High
- Show moreLoading…