CVEs published in June 2018
1,550 vulnerabilities, 195 critical, 3 exploited.
- mozilla firefox, canonical ubuntu linux +1 moreMemory safety bugs present in Firefox 60. Some of these bugs showed evidence of memory corruption...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA vulnerability can occur when capturing a media stream when the media source type is changed as...9.8 Critical
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.10.x. One of the fixes in XSA-260 added some safety...6.5 Medium
- xen, debian linux +1 moreAn issue was discovered in Xen 4.7 through 4.10.x. libxl fails to pass the readonly flag to qemu...9.9 Critical
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.10.x. Certain PV MMU operations may take a long time to...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...8.8 High
- mozilla firefox, canonical ubuntu linux +1 moreIn Reader View SameSite cookie protections are not checked on exiting. This allows for a payload...8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +2 moreWebExtensions bundled with embedded experiments were not correctly checked for proper...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreIn the previous mitigations for Spectre, the resolution or precision of various methods was...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA compromised IPC child process can escape the content sandbox and list the names of arbitrary...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreNPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by...8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when script uses mutation events to move DOM nodes...8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreAn integer overflow can occur in the SwizzleData code while calculating buffer sizes. The...8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when deleting an input element during a mutation event...8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA buffer overflow can occur when rendering canvas content while adjusting the height and width of...8.8 High
- mozilla firefox, canonical ubuntu linux +1 moreService workers can use redirection to avoid the tainting of cross-origin resources in some...4.3 Medium
- cyberark endpoint privilege managerIn CyberArk Endpoint Privilege Manager (formerly Viewfinity) 10.2.1.603, there is persistent XSS...5.4 Medium
- easymagazine project easymagazineIn Easy Magazine through 2012-10-26, there is XSS in the search bar of the web site.6.1 Medium
- dell emc idrac service module, idrac service module +1 moreiSM: Dell EMC iDRAC Service Module Improper File Permission Vulnerability6.6 Medium
- pixar renderman, talos pixar renderman +1 moreA denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x69)....5.3 Medium
- pixar renderman, talos pixar renderman +1 moreA denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x67)....5.3 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using malformed SAML responses from the...5.8 Medium
- ibm websphere mqAn IBM WebSphere MQ (Maintenance levels 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.8, 8.0.0.0 - 8.0.0.8,...5.3 Medium
- wordpress, debian linux +1 moreWordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory...8.8 High
- deltaww commgr, ics-cert delta industrial automation commgr and accompanying plc simulators (dvpsimulator eh2, eh3, es2, se, ss2 and ahsim 5x0, ahsim 5x1) +1 moreDelta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with...9.8 Critical
- joomla joomla\!An issue was discovered in Joomla! 2.5.0 through 3.8.8 before 3.8.9. The autoload code checks...8.8 High
- joomla joomla\!An XSS issue was discovered in the language switcher module in Joomla! 1.6.0 through 3.8.8 before...6.1 Medium
- siemens scalance m875, scalance m875 firmware +1 moreA vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote...4.9 Medium
- siemens scalance m875, scalance m875 firmware +1 moreA vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote...7.2 High
- siemens scalance m875, scalance m875 firmware +1 moreA vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote...7.2 High
- siemens rapidlab 1200 firmware, rapidpoint 400 firmware, rapidpoint 500 firmware +1 more +3 moreA vulnerability has been identified in RAPIDLab 1200 systems / RAPIDPoint 400 systems /...9.8 Critical
- siemens rapidlab 1200 firmware, rapidpoint 400 firmware, rapidpoint 500 firmware +1 more +3 moreA vulnerability has been identified in RAPIDLab 1200 systems / RAPIDPoint 400 systems /...8.8 High
- siemens scalance m875, scalance m875 firmware +1 moreA vulnerability has been identified in SCALANCE M875 (All versions). An attacker with access to...7.8 High
- siemens scalance m875, scalance m875 firmware +1 moreA vulnerability has been identified in SCALANCE M875 (All versions). The web interface on port...4.8 Medium
- siemens scalance m875, scalance m875 firmware +1 moreA vulnerability has been identified in SCALANCE M875 (All versions). The web interface on port...8.8 High
- ovirt, [unknown] ovirt-engine-setup, redhat enterprise virtualization manager +2 moreovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log...5.0 Medium
- axis a1001 firmware, a8004-v firmware, a8105-e firmware +387 more +389 moreAn issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is...7.5 High
- axis a1001 firmware, a8004-v firmware, a8105-e firmware +387 more +389 moreAn issue was discovered in multiple models of Axis IP Cameras. There is an Incorrect Size...7.5 High
- axis a1001 firmware, a8004-v firmware, a8105-e firmware +387 more +389 moreAn issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure...9.8 Critical
- axis a1001 firmware, a8004-v firmware, a8105-e firmware +387 more +389 moreAn issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.9.8 Critical
- axis a1001 firmware, a8004-v firmware, a8105-e firmware +387 more +389 moreAn issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection.9.8 Critical
- axis a1001 firmware, a8004-v firmware, a8105-e firmware +387 more +389 moreThere was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows...7.5 High
- axis a1001 firmware, a8004-v firmware, a8105-e firmware +387 more +389 moreThere was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes...7.5 High
- mcafee web gatewayMcAfee Web Gateway - Authentication Bypass vulnerability10.0 Critical
- jenkins configuration as codeJenkins Configuration as Code Plugin has Insufficiently Protected Credentials8.8 High
- jenkins configuration as codeJenkins Configuration as Code Plugin vulnerable to Exposure of Sensitive Information6.5 Medium
- jenkins z\/os connectorJenkins z/OS Connector Plugin allows local attacker to retrieve configured password7.2 High
- jenkins fortify cloudscanArbitrary file write vulnerability in Jenkins Fortify CloudScan Plugin6.5 Medium
- Show moreLoading…