Skip to content
OpenAdvisories

Archive

14 June 2018

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 6.1

    Cross-site Scripting in JavaMelody

    JavaMelody through 1.60.0 has XSS via the counter parameter in a clear_counter action to the /monitoring URI.

  • Medium 5.5
    CVE-2018-12418 Public exploit

    Junrar vulnerable to Infinite Loop

    Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

  • Medium 5.4

    Improper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows remote authenticated users …