CVEs published in June 2018
1,550 vulnerabilities, 195 critical, 3 exploited.
- libpulse-binding project libpulse-bindingUse after free in libpulse-binding7.5 High
- google boringsslBoringSSL through 2018-06-14 allows a memory-cache side-channel attack on DSA signatures, aka the...4.7 Medium
- matrixsslMatrixSSL through 3.9.5 Open allows a memory-cache side-channel attack on ECDSA signatures, aka...4.7 Medium
- libsunec project libsunecThe Elliptic Curve Cryptography library (aka sunec or libsunec) allows a memory-cache side...4.9 Medium
- libtom libtomcrypt, trustedfirmware op-tee +1 moreUpdated libtomcrypt packages fix security vulnerability4.9 Medium
- wolfsslwolfcrypt/src/ecc.c in wolfSSL before 3.15.1.patch allows a memory-cache side-channel attack on...4.7 Medium
- botan project botanBotan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA...5.9 Medium
- openbsd libresslLibreSSL before 2.6.5 and 2.7.x before 2.7.4 allows a memory-cache side-channel attack on DSA and...4.7 Medium
- cryptlib** DISPUTED ** cryptlib through 3.4.4 allows a memory-cache side-channel attack on DSA and ECDSA...4.9 Medium
- simple password store project password storeAn issue was discovered in password-store.sh in pass in Simple Password Store 1.7.x before 1.7.2....9.8 Critical
- javamelody project javamelodyCross-site Scripting in JavaMelody6.1 Medium
- seacmsSeaCMS V6.61 has XSS via the site name parameter on an adm1n/admin_config.php page (aka a system...4.8 Medium
- puppet pe-client-tools, enterprise client tools +1 moreOn Windows only, with a specifically crafted configuration file an attacker could get Puppet PE...7.8 High
- matrix synapseMatrix Synapse Authorization Error7.5 High
- icehrmIceHrm before 23.0.1.OS has a risky usage of a hashed password in a request.7.5 High
- carrier automatedlogic webctrlAn XXE issue was discovered in Automated Logic Corporation (ALC) WebCTRL Versions 6.0, 6.1 and 6...7.5 High
- balbooa gridboxThe Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to...6.1 Medium
- hanwha-security hrd-1641 firmware, hrd-1642 firmware, hrd-440 firmware +7 more +9 moreWeb Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are...6.1 Medium
- opcfoundation ua-.net-legacyUnsigned versions of the DLLs distributed by the OPC Foundation may be replaced with malicious code.8.8 High
- ltb-project ldap tool box self service passwordLTB (aka LDAP Tool Box) Self Service Password before 1.3 allows a change to a user password ...9.8 Critical
- maccmsMaccms 10 allows CSRF via admin.php/admin/admin/info.html to add user accounts.8.8 High
- siemens rfid 181eip, ruggedcom win, scalance x-200 switch family (incl. siplus net variants) +15 more +17 moreA vulnerability has been identified in RFID 181EIP (All versions), RUGGEDCOM Win (V4.4, V4.5, V5...8.8 High
- junrar project junrarJunrar vulnerable to Infinite Loop5.5 Medium
- blackcat-cms blackcat cmsCross-site scripting (XSS) vulnerability in backend/pages/modify.php in BlackCatCMS 1.3 allows...4.8 Medium
- humhub calendarImproper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows...5.4 Medium
- huawei technologies co., ltd. hg255s-10, huawei hg255s-10 firmware +1 moreHuawei HG255s-10 V100R001C163B025SP02 has a path traversal vulnerability due to insufficient...7.5 High
- huawei mate 9 pro, mate 9 pro fimware +1 moreDue to insufficient parameters verification GPU driver of Mate 9 Pro Huawei smart phones with the...7.8 High
- huawei lyo-l21Huawei smart phones LYO-L21 with software LYO-L21C479B107, LYO-L21C479B107 have a privilege...7.3 High
- microsoft internet explorer 10, internet explorer 11, internet explorer 9 +1 more +3 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft project server, sharepoint, sharepoint server +1 more +3 moreAn elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly...5.4 Medium
- microsoft sharepoint, sharepoint server, sharepoint foundation +2 moreAn elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly...5.4 Medium
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreA memory corruption vulnerability exists when Windows Media Foundation improperly handles objects...7.5 High
- microsoft internet explorer 11, internet explorer +1 moreA remote code execution vulnerability exists when Internet Explorer improperly accesses objects...7.5 High
- microsoft officeA remote code execution vulnerability exists in Microsoft Excel software when the software fails...7.8 High
- microsoft office, office online server, office web apps +2 moreAn elevation of privilege vulnerability exists when Office Web Apps Server 2013 and Office Online...5.4 Medium
- microsoft excel, excel viewer, office +1 more +3 moreAn information disclosure vulnerability exists when Microsoft Excel improperly discloses the...5.5 Medium
- microsoft publisherA remote code execution vulnerability exists when Microsoft Publisher fails to utilize features...7.8 High
- microsoft office, outlook, outlook rt +2 moreAn elevation of privilege vulnerability exists when Microsoft Outlook does not validate...6.5 Medium
- microsoft chakracoreChakraCore RCE Vulnerability7.5 High
- microsoft windows 10, windows 10 servers, windows server 2016 +1 more +3 moreAn information disclosure vulnerability exists when the Windows GDI component improperly...5.5 Medium
- microsoft edgeA remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in...7.5 High
- microsoft edgeA security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of...4.3 Medium
- microsoft edgeAn information disclosure vulnerability exists when Microsoft Edge improperly handles objects in...4.3 Medium
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to...7.8 High
- microsoft windows 10, windows 10 servers, windows server 2016 +1 more +3 moreA remote code execution vulnerability exists when HTTP Protocol Stack (Http.sys) improperly...8.1 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft windows 10, windows 10 servers, windows server 2016 +1 more +3 moreA denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys...7.5 High
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreA remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when...8.1 High
- microsoft windows 7, windows server 2008, windows server 2008 r2 +2 moreAn elevation of privilege vulnerability exists when the Windows kernel fails to properly handle...7.0 High
- Show moreLoading…