CVEs published in June 2018
1,550 vulnerabilities, 195 critical, 3 exploited.
- gnu binutilsremember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows...7.5 High
- winehq winePlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service ...9.8 Critical
- winehq winePlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service ...9.8 Critical
- linux kernel, canonical ubuntu linux +1 morentfs_attr_find in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to...7.8 High
- linux kernel, canonical ubuntu linux +1 morentfs_end_buffer_async_read in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows...7.8 High
- linux kernel, canonical ubuntu linux +1 morentfs_read_locked_inode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows...5.5 Medium
- linux kernel, canonical ubuntu linux +1 moreIn the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in...5.5 Medium
- polarisoffice polaris office 2017Polaris Office 2017 8.1 allows attackers to execute arbitrary code via a Trojan horse...7.8 High
- asustor admThe ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution...9.8 Critical
- atlassian crucible, fisheye, fisheye and crucible +2 moreThe review attachment resource in Atlassian Fisheye and Crucible before version 4.3.2, from...6.5 Medium
- northernnep northern electric \& power inverter firmwareNorthern Electric & Power (NEP) inverter devices allow remote attackers to obtain potentially...7.5 High
- pharoscontrols pharos firmwarePharos Controls devices allow remote attackers to obtain potentially sensitive information via a...7.5 High
- lantronix mss firmwareBaseon Lantronix MSS devices do not require a password for TELNET access.9.8 Critical
- eztcp cie-h10 firmware, cie-h12 firmware, cie-h14 firmware +5 more +7 moreSollae Serial-Ethernet-Module and Remote-I/O-Device-Server devices have a default password of...9.8 Critical
- bwssystems ha bridgeBWS Systems HA-Bridge devices allow remote attackers to obtain potentially sensitive information...7.5 High
- vertiv liebert intellislot firmwareEmerson Liebert IntelliSlot Web Card devices allow remote attackers to reconfigure access control...7.5 High
- electroind gaugetech nexus firmwareElectro Industries GaugeTech Nexus devices allow remote attackers to obtain potentially sensitive...7.5 High
- flir brickstream 2300 firmwareBrickstream 2300 devices allow remote attackers to obtain potentially sensitive information via a...7.5 High
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreUnder certain conditions, TMM may restart and produce a core file while processing APM data on...5.3 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 13.1.0-13.1.0.7, a remote attacker using undisclosed methods against virtual servers...7.5 High
- fortinet fortianalyzer, fortimanager, fortimanager, fortianalyzer +1 more +3 moreAn open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions,...6.1 Medium
- fortinet fortianalyzer, fortimanager, fortimanager, fortianalyzer +1 more +3 moreAn improper access control vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions...6.5 Medium
- beckhoff twincat, ics-cert beckhoff twincat +1 moreBeckhoff TwinCAT supports communication over ADS. ADS is a protocol for industrial automation in...9.1 Critical
- beckhoff twincat, ics-cert beckhoff twincat +1 moreBeckhoff TwinCAT 3 supports communication over ADS. ADS is a protocol for industrial automation...5.9 Medium
- ibm websphere application server liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty prior to 18.0.0.2 could allow a remote attacker to...5.3 Medium
- ibm mq, websphere mq +1 moreIBM WebSphere MQ 8.0 and 9.0 could allow a remote attacker to obtain sensitive information,...5.9 Medium
- ibm rational doors next generationIBM DOORS Next Generation (DNG/RRC) 6.0.5 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm rational doors, engineering requirements management doors +1 moreAn undisclosed vulnerability in IBM Rational DOORS 9.5.1 through 9.6.1.10 application allows an...8.1 High
- apache plutoExposure of Sensitive Information in Apache Pluto7.5 High
- craftedweb project craftedwebIn CraftedWeb through 2013-09-24, aasp_includes/pages/notice.php allows XSS via the e parameter.6.1 Medium
- pbc project pbcIn libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in _pbcB_register_fields in...9.8 Critical
- pbc project pbcIn libpbc.a in PBC through 2017-03-02, there is a heap-based buffer over-read in _pbcM_ip_new in...9.8 Critical
- pbc project pbcIn libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in _pbcP_message_default in...9.8 Critical
- pbc project pbcIn libpbc.a in PBC through 2017-03-02, there is a buffer over-read in calc_hash in map.c.9.8 Critical
- publiccmsA remote code execution issue was discovered in PublicCMS V4.0.20180210. An attacker can upload a...9.8 Critical
- miniz project minizIn Miniz 2.0.7, tinfl_decompress in miniz_tinfl.c has an infinite loop because sym2 and counter...7.5 High
- hongcms project hongcmsAn issue wan discovered in admin\controllers\database.php in HongCMS 3.0.0. There is a SQL...7.2 High
- eclipse jetty, the eclipse foundation eclipse jetty, oracle retail xstore point of service +2 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations5.3 Medium
- tibco spotfire analyst, spotfire analytics platform for aws, spotfire deployment kit +3 more +5 moreTIBCO Spotfire Product Family Information Disclosure Vulnerability6.8 Medium
- tibco spotfire analytics platform for aws, spotfire server, tibco software inc. spotfire analytics platform for aws marketplace +2 moreTIBCO Spotfire Server information disclosure vulnerabilities6.5 Medium
- tibco spotfire analyst, spotfire analytics platform for aws, spotfire deployment kit +3 more +5 moreTIBCO Spotfire Product Family Remote Code Execution Vulnerability9.6 Critical
- webgrind project webgrind** DISPUTED ** Webgrind 1.5 relies on user input to display a file, which lets anyone view files...7.5 High
- brynamicsBrynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote...9.8 Critical
- [unknown] jboss, redhat jboss enterprise application platform +1 moreIt was found that the JAXP implementation used in JBoss EAP 7.0 for XSLT processing is vulnerable...9.0 Critical
- apache hbaseRace condition in org.apache.hbase:hbase-thrift8.1 High
- rcloneIn Rclone 1.42, use of "rclone sync" to migrate data between two Google Cloud Storage buckets...7.5 High
- joyplus-cms project joyplus-cmsjoyplus-cms 1.6.0 has XSS in admin_player.php, related to manager/index.php "system manage" and ...6.1 Medium
- pyyaml, fedoraproject fedora +1 morePyYAML insecurely deserializes YAML strings leading to arbitrary code execution9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMemory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence...9.8 Critical
- Show moreLoading…