Skip to content
OpenAdvisories

Archive

7 June 2018

Vulnerabilities first published on this day (UTC), newest first.

← May 2018 2018 / June /7 July 2018 →
  1. 1151
  2. 25
  3. 3 
  4. 4136
  5. 560
  6. 630
  7. 7237
  8. 896
  9. 91
  10. 101
  11. 11349
  12. 1256
  13. 1359
  14. 1471
  15. 1548
  16. 164
  17. 1726
  18. 1827
  19. 1948
  20. 2035
  21. 2141
  22. 2226
  23. 2310
  24. 244
  25. 2529
  26. 26144
  27. 2731
  28. 2820
  29. 2937
  30. 305
All Critical High Medium Low Exploited only Public exploit

237 results · Feed

  • High 8.8
    CVE-2011-0467

    SQL injection in SUSE studio via select parameter

    A vulnerability in the listing of available software of SUSE Studio Onsite, SUSE Studio Onsite 1.1 Appliance allows authenticated users to execute arbitrary SQL statements via SQL injection. Affected releases are SUSE Studio Onsite: versions prior to 1.0.3-0.…

    SUSE SUSE Studio Onsite SUSE Studio Onsite 1.1 Appliance
  • Unscored —
    CVE-2018-0338

    A vulnerability in the role-based access-checking mechanisms of Cisco Unified Computing System (UCS) Software could all…

  • Unscored —
    CVE-2018-0339

    A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenti…

  • Unscored —
    CVE-2018-0334

    A vulnerability in the certificate management subsystem of Cisco AnyConnect Network Access Manager and of Cisco AnyConn…

  • Unscored —
    CVE-2018-0352

    A vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could a…

  • Unscored —
    CVE-2018-0356

    A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-…

  • Unscored —
    CVE-2018-0357

    A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-…

  • Unscored —
    CVE-2018-0329

    A vulnerability in the default configuration of the Simple Network Management Protocol (SNMP) feature of Cisco Wide Are…

  • Unscored —
    CVE-2018-0354

    A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to condu…

  • Unscored —
    CVE-2018-0333

    A vulnerability in the VPN configuration management of Cisco FireSIGHT System Software could allow an unauthenticated, …

  • Unscored —
    CVE-2018-0336

    A vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could allow an authenticate…

  • Unscored —
    CVE-2018-0340

    A vulnerability in the web framework of the Cisco Unified Communications Manager (Unified CM) software could allow an a…

  • Unscored —
    CVE-2018-0355

    A vulnerability in the web UI of Cisco Unified Communications Manager (Unified CM) could allow an unauthenticated, remo…

  • Unscored —
    CVE-2018-0149

    A vulnerability in the web-based management interface of Cisco Integrated Management Controller Supervisor Software and…

  • Unscored —
    CVE-2018-0335

    A vulnerability in the web portal authentication process of Cisco Prime Collaboration Provisioning could allow an unaut…

  • Unscored —
    CVE-2018-0332

    A vulnerability in the Session Initiation Protocol (SIP) ingress packet processing of Cisco Unified IP Phone software c…

  • High 8.8
    CVE-2018-3758 EPSS 27%

    express-cart unrestricted file upload vulnerability

    Unrestricted file upload (RCE) in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine.

    HackerOne express-cart express-cart npm
  • Unscored —
    CVE-2018-12042

    Roxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter.

  • Unscored —
    CVE-2018-12043

    content/content.blueprintspages.php in Symphony 2.7.6 has XSS via the pages content page.

  • Unscored —
    CVE-2018-10619 Public exploit

    An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3…

    ICS-CERT Rockwell Automation RSLinx Classic and FactoryTalk Linx Gateway
  • Unscored —
    CVE-2018-12039

    joyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary SQL command execution issue in manager/index.php…

  • Unscored —
    CVE-2017-6290

    In Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible out of bounds write due…

    NVIDIA GPU Display Driver
  • Unscored —
    CVE-2017-6292

    In Android before the 2018-06-05 security patch level, NVIDIA TLZ TrustZone contains a possible out of bounds write due…

    NVIDIA GPU Display Driver
  • Unscored —
    CVE-2017-6294

    In Android before the 2018-06-05 security patch level, NVIDIA Tegra X1 TZ contains a possible out of bounds write due t…

    NVIDIA GPU Display Driver
  • High 7.8
    CVE-2018-12036 Public exploit

    Path Traversal in OWASP Dependency-Check

    OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames.

    org.owasp:dependency-check-maven Maven
  • High 7.6
    CVE-2018-6670

    External Entity Attack vulnerability in McAfee Common UI (CUI)

    External Entity Attack vulnerability in the ePO extension in McAfee Common UI (CUI) 2.0.2 allows remote authenticated users to view confidential information via a crafted HTTP request parameter.

    McAfee Common UI (CUI)
  • Unscored —
    CVE-2018-12031 Public exploit Scanner template EPSS 19%

    Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgra…

  • High 8.0
    CVE-2018-1547

    IBM Robotic Process Automation with Automation Anywhere 10.0 could allow a remote attacker to execute arbitrary code on…

    IBM Robotic Process Automation with Automation Anywhere
  • Medium 4.3
    CVE-2018-1514

    IBM Robotic Process Automation with Automation Anywhere 10.0 is vulnerable to cross-site request forgery which could al…

    IBM Robotic Process Automation with Automation Anywhere
  • Unscored —
    CVE-2018-12016

    libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (appli…

    epiphany-browser epiphany-browser Debian Ubuntu
  • High 7.1
    CVE-2018-7688

    Open Build Service accepts arbitrary reviews

    A missing permission check in the review handling of openSUSE Open Build Service before 2.9.3 allowed all authenticated users to modify sources in projects where they do not have write permissions.

    openSUSE open build service open-build-service open-build-service Debian Ubuntu
  • High 7.1
    CVE-2018-7689

    Open Build Service arbitrary package modification

    Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed authenticated users to modify packages where they do not have write permissions.

    openSUSE open build service open-build-service open-build-service Debian Ubuntu
  • Unscored —
    CVE-2018-12015

    In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mech…

    perl perl perl Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-0274

    A vulnerability in the CLI parser of Cisco Network Services Orchestrator (NSO) could allow an authenticated, remote att…

  • Unscored —
    CVE-2018-0319

    A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauth…

  • Unscored —
    CVE-2018-0263

    A vulnerability in Cisco Meeting Server (CMS) could allow an unauthenticated, adjacent attacker to access services runn…

  • Unscored —
    CVE-2018-0353

    A vulnerability in traffic-monitoring functions in Cisco Web Security Appliance (WSA) could allow an unauthenticated, r…

  • Unscored —
    CVE-2018-0317

    A vulnerability in the web interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remo…

  • Unscored —
    CVE-2018-0320

    A vulnerability in the web framework code of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticate…

  • Unscored —
    CVE-2018-0318

    A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthent…