CVEs published in June 2018
1,550 vulnerabilities, 195 critical, 3 exploited.
- jenkins urltriggerURLTrigger Plugin server-side request forgery vulnerability6.5 Medium
- jenkins collabnetJenkins CollabNet Plugin man in the middle vulnerability7.4 High
- jenkins badgeJenkins Badge Plugin cross-site scripting vulnerability5.4 Medium
- jenkins openstack cloudCSRF vulnerability and missing permission checks in Openstack Cloud Plugin allowed capturing credentials8.8 High
- jenkins samlJenkins SAML Plugin Session Fixation vulnerability5.9 Medium
- jenkins ssh credentialsExposure of Sensitive Information to an Unauthorized Actor in Jenkins SSH Credentials Plugin6.5 Medium
- jenkins githubCSRF vulnerability and missing permission checks in GitHub Plugin allowed capturing credentials8.8 High
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +17 more +19 moreJetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling)9.8 Critical
- qutebrowserQutebrowser XSS Vulnerability6.1 Medium
- ocsinventory-ng ocsinventory ngOCS Inventory NG ocsreports 2.4 and ocsreports 2.3.1 version 2.4 and 2.3.1 contains a SQL...6.5 Medium
- ocsinventory-ng ocsinventory ngOCS Inventory OCS Inventory NG version ocsreports 2.4 contains a Cross Site Scripting (XSS)...6.1 Medium
- veronalabs wp statisticsWordPress version 4.8 + contains a Cross Site Scripting (XSS) vulnerability in plugins.php or...6.1 Medium
- troveboxTrovebox version <= 4.0.0-rc6 contains a Unsafe password reset token generation vulnerability in...9.8 Critical
- troveboxTrovebox version <= 4.0.0-rc6 contains a Server-Side request forgery vulnerability in webhook...8.8 High
- troveboxTrovebox version <= 4.0.0-rc6 contains a SQL Injection vulnerability in album component that can...8.8 High
- troveboxTrovebox version <= 4.0.0-rc6 contains a PHP Type juggling vulnerability in album view component...8.8 High
- sympa, debian linux +1 moreThe Sympa Community Sympa version prior to version 6.2.32 contains a Directory Traversal...9.8 Critical
- wekan project wekanWekan version 1.04.0 contains a Email / Username Enumeration vulnerability in Register' and ...5.3 Medium
- umletUmlet version < 14.3 contains a XML External Entity (XXE) vulnerability in File parsing that can...7.8 High
- coreboscoreBOS version 7.0 and earlier contains a Incorrect Access Control vulnerability in Module:...5.3 Medium
- triplea-game tripleaTriplea version <= 1.9.0.0.10291 contains a XML External Entity (XXE) vulnerability in Importing...7.8 High
- rubyzip project rubyzip, debian linux, redhat cloudforms +2 moreRubyzip gem contains a Directory Traversal vulnerability in zip file component9.8 Critical
- rockiger akieeAkiee version 0.0.3 contains a XSS leading to code execution due to the use of node integration...6.1 Medium
- netbeans-mmd-plugin project netbeans-mmd-pluginnetbeans-mmd-plugin version <= 1.4.3 contains a XML External Entity (XXE) vulnerability in MMD...7.8 High
- loboevolution project loboevolutionLoboEvolution version < 9b75694cedfa4825d4a2330abf2719d470c654cd contains a XML External Entity ...7.8 High
- json-jwt project json-jwtJson-jwt did not verify the cryptographic signature for data5.3 Medium
- minioMinio Inc. Minio S3 server version prior to RELEASE.2018-05-16T23-35-33Z contains a Allocation of Memory Without Limits or Throttling (similar to CWE-774) vulnerability in write-to-RAM that can result…7.5 High
- marlinfw marlin firmwareMarlin Firmware Marlin version 1.1.x and earlier contains a Buffer Overflow vulnerability in...9.8 Critical
- getmedis medisMedis version 0.6.1 and earlier contains a XSS vulnerability evolving into code execution due to...6.1 Medium
- lmslms version <= LMS_011123 contains a Local File Disclosure vulnerability in File reading...7.5 High
- joplin project joplinJoplin Vulnerable to Cross-site Scripting in Note Content6.1 Medium
- gitlistklaussilveira GitList version <= 0.6 contains a Passing incorrectly sanitized input to system...9.8 Critical
- beep project beepbeep version 1.3 and up contains a External Control of File Name or Path vulnerability in -...4.7 Medium
- inversoft prime-jwtinversoft prime-jwt version prior to commit abb0d479389a2509f939452a6767dc424bb5e6ba contains a...7.5 High
- grails fieldsStored Cross Site Scripting in Grails Fields Plugin6.1 Medium
- gonicus gosa, debian linux +1 moreGONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site...6.1 Medium
- froxlorFroxlor PHP Object Injection vulnerability7.2 High
- openpsa2 openpsaOpenpsa contains a XML Injection vulnerability in RSS file upload feature that can result in...7.5 High
- openpsa2 openpsaopenpsa contains a PHP Object Injection vulnerability in Form data passed as GET request...9.8 Critical
- spheredev minisphereminiSphere version 5.2.9 and earlier contains a Integer Overflow vulnerability in layer_resize()...5.5 Medium
- topydoTopydo Improper Input Validation vulnerability8.1 High
- bigtreecms bigtree cmsBigTree-CMS contains a Cross Site Scripting (XSS) vulnerability in /users/create that can result...6.1 Medium
- arm mbed tlsARM mbedTLS version 2.7.0 and earlier contains a Ciphersuite Allows Incorrectly Signed...7.5 High
- aio-libs aiohttp sessionaiohttp-session Session Fixation vulnerability6.5 Medium
- websockets project websocketswebsockets is vulnerable to denial of service by memory exhaustion7.5 High
- galaxyproject galaxyGalaxy cross-site scripting (XSS)6.1 Medium
- news-articles project news-articlesventrian News-Articles version NewsArticles.00.09.11 contains a XML External Entity (XXE)...7.5 High
- limesurveyLimeSurvey version 3.0.0-beta.3+17110 contains a Cross ite Request Forgery (CSRF) vulnerability...4.3 Medium
- limesurveyLimeSurvey version 3.0.0-beta.3+17110 contains a Cross Site Scripting (XSS) vulnerability in...4.8 Medium
- tooltipy project tooltipyTooltipy Tooltipy (tooltips for WP) version 5 contains a Cross Site Scripting (XSS) vulnerability...6.1 Medium
- Show moreLoading…