CVEs published in June 2018
1,550 vulnerabilities, 195 critical, 3 exploited.
- mao10 mao10cmsmao10cms 6 allows XSS via the article page.6.1 Medium
- mao10 mao10cmsmao10cms 6 allows XSS via the m=bbs&a=index page.6.1 Medium
- tp-link tl-wa850re firmwareTP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote attackers to cause...7.5 High
- tp-link tl-wa850re firmwareStack-based buffer overflow in TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5...6.5 Medium
- tp-link tl-wa850re firmwareTP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users...8.8 High
- microfocus solutions business manager, micro focus solutions business manager 11.4 +1 moreMicro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful...6.5 Medium
- phpldapadmin project phpldapadminphpLDAPadmin 1.2.2 allows LDAP injection via a crafted server_id parameter in a cmd.php?cmd...9.8 Critical
- tinyexr project tinyexrtinyexr 0.9.5 has a segmentation fault in the wav2Decode function.9.8 Critical
- tinyexr project tinyexrtinyexr 0.9.5 has an assertion failure in DecodePixelData in tinyexr.h.7.5 High
- civetweb project civetwebOut-of-bounds Read in the send_ssi_file function in civetweb.c in CivetWeb through 1.10 allows...7.1 High
- eclipse jetty, the eclipse foundation eclipse jetty, netapp e-series santricity management plug-ins +10 more +12 moreAccess and integrity issue within Eclipse Jetty8.8 High
- portainerPortainer before 1.18.0 supports unauthenticated requests to the websocket endpoint with an...9.8 Critical
- ruby-ffi project ruby-ffiRuby-ffi has a DLL loading issue7.8 High
- ithemes securityThe iThemes Security (better-wp-security) plugin before 7.0.3 for WordPress allows SQL Injection ...7.2 High
- slims akasia project akasiaSLiMS 8 Akasia 8.3.1 allows remote attackers to bypass the CSRF protection mechanism and obtain...8.8 High
- slims project slimsReflected Cross-Site Scripting (XSS) exists in the Stock Take module in SLiMS 8 Akasia 8.3.1 via...6.1 Medium
- slims akasia project akasiaReflected Cross-Site Scripting (XSS) exists in the Master File module in SLiMS 8 Akasia 8.3.1 via...6.1 Medium
- slims akasia project akasiaReflected Cross-Site Scripting (XSS) exists in the Membership module in SLiMS 8 Akasia 8.3.1 via...6.1 Medium
- slims akasia project akasiaReflected Cross-Site Scripting (XSS) exists in the Circulation module in SLiMS 8 Akasia 8.3.1 via...6.1 Medium
- slims akasia project akasiaReflected Cross-Site Scripting (XSS) exists in the Bibliography module in SLiMS 8 Akasia 8.3.1...6.1 Medium
- netapp oncommand unified manager for 7-mode (core package), oncommand unified manager +1 moreNetApp OnCommand Unified Manager for 7-Mode (core package) versions prior to 5.2.3 may disclose...5.3 Medium
- ibm aixIBM AIX 5.3, 6.1, 7.1, and 7.2 contains a vulnerability in the rmsock command that may be used to...4.0 Medium
- misp-project mispAn issue was discovered in app/Controller/UsersController.php in MISP 2.4.92. An adversary can...9.8 Critical
- exempi project exempiThe WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support.hpp in Exempi 2.4.5 has...7.5 High
- froxlorFroxlor Incorrect Access Control7.5 High
- gnu binutilsAn issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils...5.5 Medium
- circontrol scadaCirCarLife Scada v4.2.4 allows unauthorized upgrades via requests to the html/upgrade.html and...7.5 High
- circontrol circarlife scadaCirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct...9.8 Critical
- linux kernelAn issue was discovered in the Linux kernel through 4.17.2. vbg_misc_device_ioctl() in drivers...6.3 Medium
- redatamRedatam7 (formerly Redatam WebServer) allows remote attackers to discover the installation path...5.3 Medium
- redatamRedatam7 (formerly Redatam WebServer) allows remote attackers to read arbitrary files via /redbin...7.5 High
- nmark nmcmsNEWMARK (aka New Mark) NMCMS 2.1 allows SQL Injection via the sect_id parameter to the /catalog URI.9.8 Critical
- phpmyadminphpMyAdmin Improper Authentication8.8 High
- phpmyadminphpMyAdmin XSS Vulnerability6.1 Medium
- microfocus solutions business manager, micro focus solutions business manager 11.4 +1 moreMicro Focus Solutions Business Manager versions prior to 11.4 might reveal certain sensitive...7.5 High
- microfocus solutions business manager, micro focus solutions business manager 11.4 +1 moreMicro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in...4.8 Medium
- microfocus solutions business manager, micro focus solutions business manager 11.4 +1 moreMicro Focus Solutions Business Manager versions prior to 11.4 can reflect back HTTP header values.6.1 Medium
- microfocus solutions business manager, micro focus solutions business manager 11.4 +1 moreMicro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with...9.8 Critical
- phusion passengerPhusion Passenger incorrect permission assignment5.3 Medium
- dell rsa authentication manager, rsa authentication manager +1 moreRSA Authentication Manager Security Console, versions 8.3 P1 and earlier, contains a reflected...6.1 Medium
- emc rsa authentication manager, rsa authentication manager +1 moreStored cross-site scripting vulnerability6.5 Medium
- telesquare sdt-cs3b1 firmware, sdt-cw3b1 firmware +1 moreTelesquare SDT-CS3B1 and SDT-CW3B1 devices through 1.2.0 have a default factory account. Remote...9.8 Critical
- qnap qts, ldap server in qts +1 moreCommand injection vulnerability in LDAP Server in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build...9.8 Critical
- [unknown] foreman, redhat satellite +1 moreA flaw was found in foreman before version 1.15 in the logging of adding and registering images....6.5 Medium
- qnap qts, app center in qts +1 moreCross-site scripting (XSS) vulnerability in App Center in QNAP QTS 4.2.6 build 20171208, QTS 4.3...6.1 Medium
- linux kernel** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page...5.5 Medium
- untrusted project untrustedInteger underflow in untrusted7.5 High
- cisco anyconnect secure mobility clientA vulnerability in vpnva-6.sys for 32-bit Windows and vpnva64-6.sys for 64-bit Windows of Cisco...5.5 Medium
- cisco meeting serverA vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an authenticated,...6.5 Medium
- cisco amp 7150 firmware, amp 8150 firmware, firepower appliance 7010 firmware +29 more +31 moreA vulnerability in the web-based management interface of Cisco Firepower Management Center could...8.8 High
- Show moreLoading…