Skip to content
OpenAdvisories

Archive

8 June 2018

Vulnerabilities first published on this day (UTC), newest first.

← May 2018 2018 / June /8 July 2018 →
  1. 1151
  2. 25
  3. 3 
  4. 4136
  5. 560
  6. 630
  7. 7237
  8. 896
  9. 91
  10. 101
  11. 11349
  12. 1256
  13. 1359
  14. 1471
  15. 1548
  16. 164
  17. 1726
  18. 1827
  19. 1948
  20. 2035
  21. 2141
  22. 2226
  23. 2310
  24. 244
  25. 2529
  26. 26144
  27. 2731
  28. 2820
  29. 2937
  30. 305
All Critical High Medium Low Exploited only Public exploit

96 results · Feed

  • Unscored —
    CVE-2018-12051

    Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via $_FILE in…

  • Unscored —
    CVE-2018-12054 Public exploit Scanner template EPSS 40%

    Arbitrary File Read exists in PHP Scripts Mall Schools Alert Management Script via the f parameter in img.php, aka abso…

  • Unscored —
    CVE-2018-12055 Public exploit

    Multiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted POST data in contact_us.p…

  • Unscored —
    CVE-2018-12052 Public exploit

    SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in get_sec.php.

  • Unscored —
    CVE-2018-11228

    Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauth…

  • Unscored —
    CVE-2018-11229

    Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauth…

  • Unscored —
    CVE-2018-12046

    DedeCMS through 5.7SP2 allows arbitrary file write in dede/file_manage_control.php via a dede/file_manage_view.php?fmdo…

  • Unscored —
    CVE-2018-12047

    xfind/search in Ximdex 4.0 has XSS via the filter[n][value] parameters for non-negative values of n, as demonstrated by…

  • Unscored —
    CVE-2018-12049

    A remote attacker can bypass the System Manager Mode on the Canon LBP6030w web interface without a PIN for /checkLogin.…

  • Unscored —
    CVE-2018-12041

    An issue was discovered on the MediaTek AWUS036NH wireless USB adapter through 5.1.25.0. Attackers can remotely deny se…

  • Unscored —
    CVE-2018-12048

    A remote attacker can bypass the Management Mode on the Canon LBP7110Cw web interface without a PIN for /checkLogin.cgi…

  • Unscored —
    CVE-2018-12045

    DedeCMS through V5.7SP2 allows arbitrary file upload in dede/file_manage_control.php via a dede/file_manage_view.php?fm…

  • Unscored —
    CVE-2018-9182

    Twonky Server before 8.5.1 has XSS via a modified "language" parameter in the Language section.

  • Unscored —
    CVE-2018-9177

    Twonky Server before 8.5.1 has XSS via a folder name on the Shared Folders screen.

  • Unscored —
    CVE-2018-9246

    The PGObject::Util::DBAdmin module before 0.120.0 for Perl, as used in LedgerSMB through 1.5.x, insufficiently sanitize…

    libpgobject-util-dbadmin-perl libpgobject-util-dbadmin-perl Debian Ubuntu
  • Unscored —
    CVE-2018-4249

    An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS …