CVEs published in June 2018
1,550 vulnerabilities, 195 critical, 3 exploited.
- cybozu office, cybozu, inc. cybozu office +1 moreCybozu Office 10.0.0 to 10.7.0 allows remote attackers to cause a denial of service via...4.3 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreCybozu Office 10.0.0 to 10.7.0 allows authenticated attackers to bypass authentication to view...4.3 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreCross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to...6.1 Medium
- cybozu officeCybozu Office 10.0.0 to 10.7.0 allow remote attackers to display an image located in an external...4.3 Medium
- ccn-liteAn issue was discovered in CCN-lite 2.0.1. There is a heap-based buffer overflow in...9.8 Critical
- octopus deployIn Octopus Deploy 3.0 onwards (before 2018.6.7), an authenticated user with incorrect permissions...6.5 Medium
- libtiff, canonical ubuntu linux +1 moreHeap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3,...8.8 High
- busybox, canonical ubuntu linux, debian linux +2 moreBusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e...9.8 Critical
- microsoft self-extracting archive files created by iexpress bundled with microsoft windows, windows +1 moreUntrusted search path vulnerability in Self-extracting archive files created by IExpress bundled...7.8 High
- lfdycms lfcmsCross-site request forgery (CSRF) vulnerability in admin.php in LFCMS 3.7.0 allows remote...8.8 High
- centreon, centreon web +1 moreMultiple SQL injection vulnerabilities in Centreon 3.4.6 including Centreon Web 2.8.23 allow...9.8 Critical
- centreon, centreon web +1 moreCentreon 3.4.6 including Centreon Web 2.8.23 is vulnerable to an authenticated user injecting a...5.4 Medium
- centreon, centreon web +1 moreCentreon RCE Vulnerability9.8 Critical
- saj-electric saj solar inverterSAJ Solar Inverter allows remote attackers to obtain potentially sensitive information via a...7.5 High
- nucom wr644gacv firmwareNuCom WR644GACV devices before STA006 allow an attacker to download the configuration file...9.8 Critical
- lfdycms lfcmsA CSRF vulnerability exists in LFCMS 3.7.0: users can be added arbitrarily.8.8 High
- pivotal operations managerPivotal Operations Manager, versions 2.1.x prior to 2.1.6 and version 2.0.14, includes NGINX...6.5 Medium
- cloud foundry uaa, pivotal software cloud foundry uaa, cloud foundry uaa-release +2 moreCloud Foundry UAA open redirect6.1 Medium
- pivotal spring framework, debian linux, oracle agile product lifecycle management +25 more +27 moreModerate severity vulnerability that affects org.springframework:spring-core7.5 High
- pivotal spring framework, debian linux, oracle agile product lifecycle management +30 more +32 moreSpring Framework Cross Site Tracing (XST)5.9 Medium
- ipconfigure orchid core vmsIPConfigure Orchid Core VMS 2.0.5 allows Directory Traversal.7.5 High
- rockwellautomation allen-bradley l30erms firmwareImproperly implemented option-field processing in the TCP/IP stack on Allen-Bradley L30ERMS...7.5 High
- bitaseanThe mintToken function of a smart contract implementation for BitAsean (BAS), a tradable Ethereum...7.5 High
- goal bonanza project bonanzaThe mintToken function of a smart contract implementation for GOAL Bonanza (GOAL), a tradable...7.5 High
- fujinto project fujintoThe mintToken function of a smart contract implementation for Fujinto (NTO), a tradable Ethereum...7.5 High
- tgtcoins target coinThe mintToken function of a smart contract implementation for Target Coin (TGT), a tradable...7.5 High
- intchain node tokenThe mintToken function of a smart contract implementation for Internet Node Token (INT), a...7.5 High
- substratumThe mintToken function of a smart contract implementation for Substratum (SUB), a tradable...7.5 High
- polyai project polyaiThe mintToken function of a smart contract implementation for PolyAI (AI), a tradable Ethereum...7.5 High
- sec project secThe sell function of a smart contract implementation for SEC, a tradable Ethereum ERC20 token,...7.5 High
- tgtcoins target coinThe sell function of a smart contract implementation for Target Coin (TGT), a tradable Ethereum...7.5 High
- substratumThe sell function of a smart contract implementation for Substratum (SUB), a tradable Ethereum...7.5 High
- intchain node tokenThe sell function of a smart contract implementation for Internet Node Token (INT), a tradable...7.5 High
- swft swftcoinThe sell function of a smart contract implementation for SwftCoin (SWFTC), a tradable Ethereum...7.5 High
- gold reward project rewardThe buy function of a smart contract implementation for Gold Reward (GRX), an Ethereum ERC20...7.5 High
- block18The approveAndCallcode function of a smart contract implementation for Block 18 (18T), an...7.5 High
- gve globalvillage ecosystemThe approveAndCallcode function of a smart contract implementation for Globalvillage ecosystem ...7.5 High
- google chromecast firmware, home firmware +1 moreThe API service on Google Home and Chromecast devices before mid-July 2018 does not prevent DNS...4.3 Medium
- php, canonical ubuntu linux, netapp storage automation store +2 moreexif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a...9.8 Critical
- linux kernelAn issue was discovered in the Linux kernel through 4.17.2. The filter parsing in kernel/trace...9.8 Critical
- digisol dg-br4000ng firmwareDIGISOL DG-BR4000NG devices have a Buffer Overflow via a long Authorization HTTP header.9.8 Critical
- digisol dg-br4000ng firmwareDIGISOL DG-BR4000NG devices have XSS via the SSID (it is validated only on the client side).6.1 Medium
- linux kernel, canonical ubuntu linux +1 moreIn arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested virtualization is used,...4.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreA flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as...7.0 High
- gimpGIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result...9.1 Critical
- gnu binutils, canonical ubuntu linux +1 morefinish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap...9.8 Critical
- gnu binutils, canonical ubuntu linux +1 moredemangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows...7.5 High
- gnu binutils, canonical ubuntu linux +1 moreA NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in...7.5 High
- insteon 2864-222 firmwareThe webService binary on Insteon HD IP Camera White 2864-222 devices has a Buffer Overflow via a...9.8 Critical
- insteon 2864-222 firmwareThe webService binary on Insteon HD IP Camera White 2864-222 devices has a stack-based Buffer...9.8 Critical
- Show moreLoading…