Skip to content
OpenAdvisories

Archive

12 June 2018

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Medium 6.1

    Openshift Enterprise source-to-image vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip)

    Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input. An attacker who could trick a user into using the command to copy files locally, from a pod, could override files outside of the target directory…

  • Medium 5.3

    Under certain conditions SAP UI5 Handler allows an attacker to access information which would otherwise be restricted. …

  • Medium 5.6

    McAfee Network Security Management (NSM) - Password recovery exploitation vulnerability

    Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to crack user passwords via unsalted hashes.

  • Medium 5.9

    McAfee Network Security Management (NSM) - Exploitation of Authorization vulnerability

    Exploitation of Authorization vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated users to gain elevated privileges via a crafted HTTP request parameter.

  • Medium 6.5

    routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which …

  • Medium 5.0

    ovirt-engine up to version 4.2.3 is vulnerable to an unfiltered password when choosing manual db provisioning. When eng…