CVEs published in June 2018
1,550 vulnerabilities, 195 critical, 3 exploited.
- dropbox** DISPUTED ** An issue was discovered in the com.dropbox.android application 98.2.2 for Android....3.6 Low
- dropbox** DISPUTED ** An issue was discovered in the com.dropbox.android application 98.2.2 for Android....3.1 Low
- debian linux, linux kernel, canonical ubuntu linux +2 more** DISPUTED ** Linux Kernel version 3.18 to 4.16 incorrectly handles an SG_IO ioctl on /dev/sg0...5.3 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to...8.8 High
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to...8.8 High
- public knowledge project open monograph pressCross-site scripting (XSS) vulnerability in templates/frontend/pages/searchResults.tpl in Public...6.1 Medium
- codenx shopnxAn issue was discovered in ShopNx through 2017-11-17. The vulnerability allows a remote attacker...8.8 High
- webkit webkitgtk\+WebCore/platform/graphics/texmap/TextureMapperLayer.cpp in WebKit, as used in WebKitGTK+ prior to...8.8 High
- liblnk project liblnk** DISPUTED ** The liblnk_data_block_read function in liblnk_data_block.c in liblnk through 2018...5.5 Medium
- liblnk project liblnk** DISPUTED ** The liblnk_location_information_read_data function in liblnk_location_information...5.5 Medium
- liblnk project liblnk** DISPUTED ** The liblnk_data_string_get_utf8_string_size function in liblnk_data_string.c in...5.5 Medium
- libfsntfs project libfsntfs** DISPUTED ** The libfsntfs_mft_entry_read_attributes function in libfsntfs_mft_entry.c in...5.5 Medium
- libfsntfs project libfsntfs** DISPUTED ** The libfsntfs_security_descriptor_values_free function in...5.5 Medium
- libfsntfs project libfsntfs** DISPUTED ** The libfsntfs_mft_entry_read_header function in libfsntfs_mft_entry.c in libfsntfs...5.5 Medium
- libfsntfs project libfsntfs** DISPUTED ** The libfsntfs_reparse_point_values_read_data function in...5.5 Medium
- libfsntfs project libfsntfs** DISPUTED ** The libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in...5.5 Medium
- libmobi project libmobiThe mobi_decode_font_resource function in util.c in Libmobi 0.3 allows remote attackers to cause...8.8 High
- libmobi project libmobiThe mobi_parse_index_entry function in index.c in Libmobi 0.3 allows remote attackers to cause an...6.5 Medium
- libmobi project libmobiThe mobi_pk1_decrypt function in encryption.c in Libmobi 0.3 allows remote attackers to cause a...8.8 High
- libpff project libpff** DISPUTED ** The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal...5.5 Medium
- openwrt** DISPUTED ** OpenWrt mishandles access control in /etc/config/rpcd and the /usr/share/rpcd/acl...8.8 High
- cesanta mongooseThe mg_handle_cgi function in mongoose.c in Mongoose 6.11 allows remote attackers to cause a...7.5 High
- mirasys dvms workstationPath Traversal in Gateway in Mirasys DVMS Workstation 5.12.6 and earlier allows an attacker to...7.5 High
- dlink dir-620 firmwareD-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded...9.8 Critical
- auth0 angular-jwtAuth0 angular-jwt misinterprets allowlist as regex6.5 Medium
- webtoffee wordpress comments import and exportThe plugin "WordPress Comments Import & Export" for WordPress (v2.0.4 and before) is vulnerable...7.8 High
- algolplus advanced order export for woocommerceThe plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is...7.8 High
- connx esp hr managementSQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute...9.8 Critical
- akcms project akcmsAn issue was discovered in AKCMS 6.1. CSRF can delete an article via an admincp deleteitem action...6.5 Medium
- akcms project akcmsAn issue was discovered in AKCMS 6.1. CSRF can add an admin account via a /index.php?file=account...8.8 High
- dragonbyte-tech vbsecuritylibrary/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for...6.1 Medium
- sam2p project sam2pThere is a heap-based buffer overflow in bmp_compress1_row in appliers.cpp in sam2p 0.49.4 that...9.8 Critical
- apache qpid broker-jDenial of service vulnerability exists when .NET and .NET Core improperly process XML documents7.5 High
- faststone image viewerFastStone Image Viewer 6.2 has a User Mode Read and Execute AV at 0x0057898e, triggered when the...7.8 High
- faststone image viewerFastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578dd8, triggered when the user opens...7.8 High
- faststone image viewerFastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cc4, triggered when the user opens...7.8 High
- faststone image viewerFastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d7d, triggered when the user opens...7.8 High
- faststone image viewerFastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d6a, triggered when the user opens...7.8 High
- faststone image viewerFastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cb3, triggered when the user opens...7.8 High
- faststone image viewerFastStone Image Viewer 6.2 has a User Mode Write AV at 0x005cb509, triggered when the user opens...7.8 High
- [unknown] ovirt-ansible-roles, redhat enterprise virtualization +1 moreovirt-ansible-roles before version 1.0.6 has a vulnerability due to a missing no_log directive,...5.0 Medium
- [unknown] ovirt-engine, redhat virtualization, virtualization host +2 moreThe web console login form in ovirt-engine before version 4.2.3 returned different errors for non...5.3 Medium
- linaro lava, debian linux +1 moreAn issue was discovered in Linaro LAVA before 2018.5.post1. Because of use of yaml.load() instead...8.8 High
- linaro lava, debian linux +1 moreAn issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for URLs in the...6.5 Medium
- linaro lavaAn issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for file: URLs, a...6.5 Medium
- cantata project cantataAn issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. The...9.8 Critical
- cantata project cantataAn issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. A regular...8.8 High
- cantata project cantataAn issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. Arbitrary...6.5 Medium
- cantata project cantataAn issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. The mount...8.8 High
- zuul-ci zuulAn issue was discovered in Zuul 3.x before 3.1.0. If nodes become offline during the build, the...9.8 Critical
- Show moreLoading…