Skip to content
OpenAdvisories

Archive

12 June 2018

Vulnerabilities first published on this day (UTC), newest first.

← May 2018 2018 / June /12 July 2018 →
  1. 1151
  2. 25
  3. 3 
  4. 4136
  5. 560
  6. 630
  7. 7237
  8. 896
  9. 91
  10. 101
  11. 11349
  12. 1256
  13. 1359
  14. 1471
  15. 1548
  16. 164
  17. 1726
  18. 1827
  19. 1948
  20. 2035
  21. 2141
  22. 2226
  23. 2310
  24. 244
  25. 2529
  26. 26144
  27. 2731
  28. 2820
  29. 2937
  30. 305
All Critical High Medium Low Exploited only Public exploit

56 results · Feed

  • Medium 5.3
    CVE-2018-2428

    Under certain conditions SAP UI5 Handler allows an attacker to access information which would otherwise be restricted. …

    SAP SAP UI SAP UI for SAP NetWeaver 7.00 SAP Infrastructure
  • Critical 9.8
    CVE-2018-2424

    SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided Jav…

    SAP SAP HANA database SAP UI SAP UI5
  • High 8.4
    CVE-2018-2425

    Under certain conditions, SAP Business One, 9.2, 9.3, for SAP HANA backup service allows an attacker to access informat…

    SAP SAP Business One
  • Unscored —
    CVE-2018-12249

    An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class_real because "class BasicObjec…

    mruby mruby Debian Ubuntu
  • Unscored —
    CVE-2018-12247

    An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class, related to certain .clone usa…

    mruby Ubuntu
  • Unscored —
    CVE-2018-12248

    An issue was discovered in mruby 1.4.1. There is a heap-based buffer over-read associated with OP_ENTER because mrbgems…

    mruby mruby Debian Ubuntu
  • Medium 5.6
    CVE-2017-3962

    McAfee Network Security Management (NSM) - Password recovery exploitation vulnerability

    Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to crack user passwords via unsalted hashes.

    McAfee Network Security Management (NSM)
  • Medium 5.9
    CVE-2017-3960

    McAfee Network Security Management (NSM) - Exploitation of Authorization vulnerability

    Exploitation of Authorization vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated users to gain elevated privileges via a crafted HTTP request parameter.

    McAfee Network Security Management (NSM)
  • Unscored —
    CVE-2018-0732 EPSS 47%

    Client DoS due to large DH parameter

    During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a …

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2018-1070

    routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which …

    [UNKNOWN] routing
  • Medium 5.0
    CVE-2018-1075

    ovirt-engine up to version 4.2.3 is vulnerable to an unfiltered password when choosing manual db provisioning. When eng…

    [UNKNOWN] ovirt-engine
  • Unscored —
    CVE-2018-12232

    In net/socket.c in the Linux kernel through 4.17.1, there is a race condition between fchownat and close in cases where…

    linux-raspi2 linux-hwe linux-azure linux-gcp Debian Ubuntu
  • Unscored —
    CVE-2018-12233

    In the ea_get function in fs/jfs/xattr.c in the Linux kernel through 4.17.1, a memory corruption bug in JFS can be trig…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2018-12229

    Cross-site scripting (XSS) vulnerability in Public Knowledge Project (PKP) Open Journal System (OJS) 3.0.0 to 3.1.1-1 a…

  • Unscored —
    CVE-2018-12228

    An issue was discovered in Asterisk Open Source 15.x before 15.4.1. When connected to Asterisk via TCP/TLS, if the clie…

  • Unscored —
    CVE-2018-12227

    An issue was discovered in Asterisk Open Source 13.x before 13.21.1, 14.x before 14.7.7, and 15.x before 15.4.1 and Cer…

    asterisk asterisk Debian Ubuntu