CVEs published in June 2018
1,550 vulnerabilities, 195 critical, 3 exploited.
- redislabs redis, debian linux, oracle communications operations monitor +1 more +3 moreAn Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis...9.8 Critical
- redislabs redis, debian linux, oracle communications operations monitor +1 more +3 moreMemory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2...9.8 Critical
- redislabs redisType confusion in the xgroupCommand function in t_stream.c in redis-server in Redis before 5.0...7.5 High
- tinyexr project tinyexrtinyexr 0.9.5 has an assertion failure in ComputeChannelLayout in tinyexr.h.7.5 High
- tinyexr project tinyexrtinyexr 0.9.5 has a heap-based buffer over-read in LoadEXRImageFromMemory in tinyexr.h.9.8 Critical
- nagios fusionNagios Fusion before 4.1.4 has XSS, aka TPS#13332-13335.6.1 Medium
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow...7.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read vulnerability....6.5 Medium
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability....6.5 Medium
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability....8.8 High
- navercorp whaleThe path of Whale update service was unquoted in NAVER Whale before 1.0.40.7. This vulnerability...8.1 High
- micro focus cms server, universal cmdb server, microfocus universal cmbd server +2 moreMFSBGN03810 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF7.5 High
- micro focus ucmdb browser, microfocus universal cmbd browser +1 moreMFSBGN03809 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF7.5 High
- open-xchange appsuiteThe backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39,...4.3 Medium
- open-xchange appsuiteAbsolute path traversal vulnerability in the readerengine component in Open-Xchange OX App Suite...5.5 Medium
- open-xchange appsuiteCross-site scripting (XSS) vulnerability in the office-web component in Open-Xchange OX App Suite...5.4 Medium
- open-xchange appsuiteThe frontend component in Open-Xchange OX App Suite before 7.6.3-rev31, 7.8.x before 7.8.2-rev31,...6.5 Medium
- open-xchange appsuiteThe backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39,...8.8 High
- open-xchange appsuiteThe backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39,...6.5 Medium
- pandorafms artica pandora fmsXSS in Artica Pandora FMS before 7.0 NG 723 allows an attacker to execute arbitrary code via a...5.4 Medium
- artica pandora fmsLocal File Inclusion (LFI) in Artica Pandora FMS through version 7.23 allows an attacker to call...7.5 High
- artica pandora fmsUnauthenticated untrusted file upload in Artica Pandora FMS through version 7.23 allows an...9.8 Critical
- open-xchange appsuiteThe backend component in Open-Xchange OX App Suite before 7.6.3-rev35, 7.8.x before 7.8.2-rev38,...6.5 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIf userspace provides a too-large WPA RSN IE length in wlan_hdd_cfg80211_set_ie(), a buffer...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn the MDSS driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from...5.5 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreUser process can perform the kernel DOS in ashmem when doing cache maintenance operation in all...5.5 Medium
- icmsdev icmsspider.admincp.php in iCMS v7.0.8 has SQL Injection via the id parameter in an app=spider&do...9.8 Critical
- discount project discount, debian linux +1 moreThe quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers...5.5 Medium
- publiccmsAn issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and ...6.5 Medium
- publiccmsAn issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and ...6.5 Medium
- phpokPHPOK 4.9.032 has an arbitrary file deletion vulnerability in the delfile_f function in framework...7.5 High
- phpokPHPOK 4.9.032 has an arbitrary file upload vulnerability in the import_f function in framework...9.8 Critical
- the olive tree ftp server project olive tree ftp serverThe Olive Tree Ftp Server application 1.32 for Android has a "Sensitive Data on the Clipboard"...9.8 Critical
- gnome evolution** DISPUTED ** addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME...9.8 Critical
- virustotal yaraIn YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of...7.8 High
- virustotal yaraIn YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of...7.8 High
- cheveretoChevereto Free before 1.0.13 has XSS.5.4 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn the WCD CPE codec, a Use After Free condition can occur in all Android releases(Android for...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreA stack-based buffer overflow can occur in fastboot from all Android releases(Android for MSM,...7.8 High
- ffmpeglibavcodec in FFmpeg 4.0 may trigger a NULL pointer dereference if the studio profile is...6.5 Medium
- ffmpegAn inconsistent bits-per-sample value in the ff_mpeg4_decode_picture_header function in...6.5 Medium
- ffmpeg, debian linux +1 moreAn improper integer type in the mpeg4_encode_gop_header function in libavcodec/mpeg4videoenc.c in...6.5 Medium
- mcafee epolicy orchestrator (epo), epolicy orchestrator +1 moreSB10240 - ePolicy Orchestrator (ePO) - Information disclosure vulnerablity5.7 Medium
- mcafee epolicy orchestrator (epo), epolicy orchestrator +1 moreSB10240 - ePolicy Orchestrator (ePO) - Application Protection Bypass vulnerability4.7 Medium
- ibm puredata system for analyticsIBM Netezza Platform Software (IBM PureData System for Analytics 1.0.0) could allow a local user...8.4 High
- ibm mq, websphere mq +1 moreIBM WebSphere MQ 8.0 and 9.0, when configured to use a PAM module for authentication, could allow...3.7 Low
- expresscart project expresscartexpress-cart allows any user to create an admin user8.8 High
- libbpg project libbpgThe restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.8 and other...8.8 High
- [unknown] openshift-ansible, redhat openshift container platform +1 moreopenshift-ansible before versions 3.9.23, 3.7.46 deploys a misconfigured etcd file that causes...9.0 Critical
- libpulse-binding project libpulse-bindingUse after free in libpulse-binding7.5 High
- Show moreLoading…