CVEs published in June 2018
1,550 vulnerabilities, 195 critical, 3 exploited.
- wpulike ulikeWP ULike version 2.8.1, 3.1 contains a Incorrect Access Control vulnerability in AJAX that can...7.5 High
- silkypress image zoomWP Image Zoom version 1.23 contains a Incorrect Access Control vulnerability in AJAX settings...6.5 Medium
- redirectionRedirection version 2.7.1 contains a Serialisation vulnerability possibly allowing ACE...7.2 High
- wpulike ulikeWP ULike version 2.8.1, 3.1 contains a Cross Site Scripting (XSS) vulnerability in Settings...4.8 Medium
- jjj wp user groupsWP User Groups version 2.0.0 contains a Cross ite Request Forgery (CSRF) vulnerability in...6.5 Medium
- mediaron metronet tag managerMetronet Tag Manager version 1.2.7 contains a Cross ite Request Forgery (CSRF) vulnerability in...8.8 High
- tooltipyTooltipy (tooltips for WP) version 5 contains a Cross ite Request Forgery (CSRF) vulnerability in...6.5 Medium
- redirectionRedirection version 2.7.3 contains a ACE via file inclusion vulnerability in Pass-through mode...7.2 High
- mybbMyBB Group MyBB contains a Incorrect Access Control vulnerability in Private forums that can...4.3 Medium
- mybbMyBB Group MyBB contains a File Inclusion vulnerability in Admin panel (Tools and Maintenance ->...7.2 High
- instant-update instant update cmsInstant Update CMS contains a Password Reset Vulnerability vulnerability in /iu-application...9.8 Critical
- busyboxBusybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet...8.1 High
- denx u-bootU-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature...5.5 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +15 more +17 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations9.8 Critical
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +2 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 High
- [unknown] sssd, debian linux, redhat enterprise linux desktop +2 more +4 moreThe UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too...3.8 Low
- 5000 trillion yen converter project trillion yen converter, owen 5000 trillion yen converter +1 moreCross-site scripting vulnerability in 5000 trillion yen converter v1.0.6 allows remote attackers...6.1 Medium
- all nippon airways co., ltd ana app for ios, ana +1 moreThe ANA App for iOS version 4.0.22 and earlier does not verify X.509 certificates from SSL...7.4 High
- zenphotoLocal file inclusion vulnerability in Zenphoto 1.4.14 and earlier allows a remote attacker with...7.2 High
- linecorp lineUntrusted search path vulnerability in LINE for Windows versions before 5.8.0 allows an attacker...7.8 High
- dena h2oBuffer overflow in H2O version 2.2.4 and earlier allows remote attackers to execute arbitrary...9.8 Critical
- pixelpostSQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated...7.2 High
- pixelpostCross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to...6.1 Medium
- pixelpostPixelpost v1.7.3 and earlier allows remote code execution via unspecified vectors.7.2 High
- gemini labs site reviewsCross-site scripting vulnerability in Site Reviews versions prior to 2.15.3 allows remote...6.1 Medium
- icegram email subscribers & newsletters, email subscribers \& newsletters project subscribers \& newsletters +1 moreCross-site scripting vulnerability in Email Subscribers & Newsletters versions prior to 3.5.0...6.1 Medium
- axpdfium project axpdfiumUntrusted search path vulnerability in axpdfium v0.01 allows an attacker to gain privileges via a...7.8 High
- sony playmemories home, sony corporation the installer of playmemories home for windows +1 moreUntrusted search path vulnerability in the installer of PlayMemories Home for Windows ver.5.5.01...7.8 High
- microsoft the installer of visual c++ redistributable, windows +1 moreUntrusted search path vulnerability in the installer of Visual C++ Redistributable allows an...7.8 High
- microsoft the installer of visual studio code, visual studio code +1 moreUntrusted search path vulnerability in the installer of Visual Studio Code allows an attacker to...7.8 High
- microsoft the installer of visual studio community, visual studio community +1 moreUntrusted search path vulnerability in the installer of Visual Studio Community allows an...7.8 High
- microsoft skype, the installer of skype for windows +1 moreUntrusted search path vulnerability in the installer of Skype for Windows allows an attacker to...7.8 High
- microsoft skype, skype for windows +1 moreUntrusted search path vulnerability in Skype for Windows allows an attacker to gain privileges...7.8 High
- microsoft onedrive, the installer of microsoft onedrive +1 moreUntrusted search path vulnerability in the installer of Microsoft OneDrive allows an attacker to...7.8 High
- microsoft onedriveUntrusted search path vulnerability in Microsoft OneDrive allows an attacker to gain privileges...7.8 High
- iij smartkey, internet initiative japan inc. iij smartkey app for android +1 moreIIJ SmartKey App for Android version 2.1.0 and earlier allows remote attackers to bypass...7.5 High
- basercmsSensitive Data Exposure in baserCMS5.3 Medium
- basercmsXSS in baserCMS6.1 Medium
- basercmsbaserCMS Access Control Bypass5.3 Medium
- basercmsbaserCMS vulnerable to Access Control Bypass8.1 High
- basercmsbaserCMS arbitrary file upload vulnerability4.3 Medium
- basercmsXSS in baserCMS5.4 Medium
- basercmsOS Command Injection in baserCMS8.8 High
- cybozu office, cybozu, inc. cybozu office +1 moreCybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass access restriction to...6.3 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreCybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass authentication to obtain...4.3 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreCross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.0 allows remote attackers to...6.1 Medium
- nippon telegraph and telephone east corporation the installer of flet's virus clear easy setup & application tool ver.13.0 and earlier versions and flet's virus clear v6 easy setup & application tool ver.13.0 and earlier versions, ntt-east flet\'s virus clear easy setup \& application tool, flet\'s virus clear v6 easy setup \& application tool +2 moreUntrusted search path vulnerability in the installer of FLET'S VIRUS CLEAR Easy Setup &...7.8 High
- cybozu mailwise, cybozu, inc. cybozu mailwise +1 moreCross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to...6.1 Medium
- cybozu mailwise, cybozu, inc. cybozu mailwise +1 moreReflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote...6.1 Medium
- cybozu mailwise, cybozu, inc. cybozu mailwise +1 moreStored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote...6.1 Medium
- Show moreLoading…