Skip to content
OpenAdvisories

Archive

8 June 2018

Vulnerabilities first published on this day (UTC), newest first.

← May 2018 2018 / June /8 July 2018 →
  1. 1151
  2. 25
  3. 3 
  4. 4136
  5. 560
  6. 630
  7. 7237
  8. 896
  9. 91
  10. 101
  11. 11349
  12. 1256
  13. 1359
  14. 1471
  15. 1548
  16. 164
  17. 1726
  18. 1827
  19. 1948
  20. 2035
  21. 2141
  22. 2226
  23. 2310
  24. 244
  25. 2529
  26. 26144
  27. 2731
  28. 2820
  29. 2937
  30. 305
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 8.8
    CVE-2018-4233 Public exploit EPSS 54%

    An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iClou…

    qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu
  • High 8.8
    CVE-2013-3703

    No write permission check in change_role command

    The controller of the Open Build Service API prior to version 2.4.4 is missing a write permission check, allowing an authenticated attacker to add or remove user roles from packages and/or project meta data.

    openSUSE open build service
  • High 8.8
    CVE-2014-0594

    CSRF protection incorrectly disabled

    In the Open Build Service (OBS) before version 2.4.6 the CSRF protection is incorrectly disabled in the web interface, allowing for requests without the user's consent.

    openSUSE open build service
  • High 7.8
    CVE-2014-0593

    sed command injection

    The set_version script as shipped with obs-service-set_version is a source validator for the Open Build Service (OBS). In versions prior to 0.5.3-1.1 this script did not properly sanitize the input provided by the user, allowing for code execution on the exec…

    openSUSE obs-service-set_version
  • High 8.8
    CVE-2018-1453

    IBM Security Identity Manager Virtual Appliance 7.0 allows an authenticated attacker to upload or transfer files of dan…

    IBM Security Identity Manager
  • High 8.8
    CVE-2018-8925

    Cross-site request forgery (CSRF) vulnerability in admin/user.php in Synology Photo Station before 6.8.5-3471 and befor…

    Synology Photo Station
  • High 8.8
    CVE-2018-8926

    Permissive regular expression vulnerability in synophoto_dsm_user in Synology Photo Station before 6.8.5-3471 and befor…

    Synology Photo Station
  • High 7.2
    CVE-2017-12075

    Command injection vulnerability in EZ-Internet in Synology DiskStation Manager (DSM) before 6.2-23739 allows remote aut…

    Synology DiskStation Manager (DSM)
  • High 7.2
    CVE-2017-12078

    Command injection vulnerability in EZ-Internet in Synology Router Manager (SRM) before 1.1.6-6931 allows remote authent…

    Synology Synology Router Manager (SRM)