Skip to content
OpenAdvisories

Archive

13 June 2018

Vulnerabilities first published on this day (UTC), newest first.

← May 2018 2018 / June /13 July 2018 →
  1. 1151
  2. 25
  3. 3 
  4. 4136
  5. 560
  6. 630
  7. 7237
  8. 896
  9. 91
  10. 101
  11. 11349
  12. 1256
  13. 1359
  14. 1471
  15. 1548
  16. 164
  17. 1726
  18. 1827
  19. 1948
  20. 2035
  21. 2141
  22. 2226
  23. 2310
  24. 244
  25. 2529
  26. 26144
  27. 2731
  28. 2820
  29. 2937
  30. 305
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Medium 6.2
    CVE-2017-3936

    McAfee ePolicy Orchestrator (ePO) - OS Command Injection vulnerability

    OS Command Injection vulnerability in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows attackers to run arbitrary OS commands with limited privileges via not sanitizing the user input data before exporting it into a…

    McAfee ePolicy Orchestrator (ePO)
  • Medium 5.4
    CVE-2017-3907

    McAfee Threat Intelligence Exchange (TIE) Server - Code Injection vulnerability

    Code Injection vulnerability in the ePolicy Orchestrator (ePO) extension in McAfee Threat Intelligence Exchange (TIE) Server 2.1.0 and earlier allows remote attackers to execute arbitrary HTML code to be reflected in the response web page via unspecified vect…

    McAfee Threat Intelligence Exchange (TIE) Server
  • Medium 5.9
    CVE-2018-10850

    389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persiste…

    [UNKNOWN] 389-ds-base 389-ds-base 389-ds-base Debian Ubuntu
  • Medium 5.3
    CVE-2018-7559

    OPC UA applications can allow a remote attacker to determine a Server's private key

    An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13. A vulnerability in OPC UA applications can allow a remote attacker to determin…

    OPCFoundation.NetStandard.Opc.Ua NuGet
  • Medium 5.9
    CVE-2018-11386

    Symfony DoS

    An issue was discovered in the HttpFoundation component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11. The PDOSessionHandler class allows storing sessions on a PDO connection. Under some…

    symfony/symfony symfony symfony symfony/http-foundation Debian Ubuntu Packagist
  • Medium 6.1
    CVE-2018-11408

    Symfony Open Redirect

    The security handlers in the Security component in Symfony in 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11 have an Open redirect vulnerability when security.http_utils is inlined by a container. N…

    symfony/symfony symfony symfony symfony/security-bundle Debian Ubuntu Packagist
  • Medium 6.1
    CVE-2018-11688

    Ignite Realtime Openfire vulnerable to cross-site scripting

    Ignite Realtime Openfire before 3.9.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the secu…

    org.igniterealtime.openfire:parent Maven
  • Medium 6.1
    CVE-2017-16652

    Symfony Open Redirect

    An issue was discovered in Symfony 2.7.x before 2.7.38, 2.8.x before 2.8.31, 3.2.x before 3.2.14, and 3.3.x before 3.3.13. DefaultAuthenticationSuccessHandler or DefaultAuthenticationFailureHandler takes the content of the _target_path parameter and generates…

    symfony/symfony symfony symfony symfony/security-http Debian Ubuntu Packagist
  • Medium 6.1
    CVE-2018-12290

    Yii2-StateMachine extension for Yii2 XSS Vulnerability

    The Yii2-StateMachine extension v2.x.x for Yii2 has XSS.

    ptheofan/yii2-statemachine Packagist
  • Medium 6.5
    CVE-2011-4183

    open build service allows anyone to upload rpms

    A vulnerability in open build service allows remote attackers to upload arbitrary RPM files. Affected releases are SUSE open build service prior to 2.1.16.

    SUSE open build service
  • Medium 5.8
    CVE-2018-5434

    XML eXternal Entity Expansion Vulnerabilities with TIBCO Runtime Agent

    The TIBCO Designer component of TIBCO Software Inc.'s TIBCO Runtime Agent, and TIBCO Runtime Agent for z/Linux contains vulnerabilities wherein a malicious user could perform XML external entity expansion (XXE) attacks to disclose host machine information. Af…

    TIBCO Software TIBCO Runtime Agent TIBCO Runtime Agent for z/Linux Linux
  • Medium 6.5
    CVE-2018-5433

    XML eXternal Entity Expansion Vulnerabilities with TIBCO Administrator

    The TIBCO Administrator server component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, and TIBCO Administrator - Enterprise Edition for z/Linux contains vulnerabilities wherein a malicious user could perform XML external entity expansion …

    TIBCO Software TIBCO Administrator - Enterprise Edition TIBCO Administrator - Enterprise Edition for z/Linux Linux