Skip to content
OpenAdvisories

Archive

15 June 2018

Vulnerabilities first published on this day (UTC), newest first.

← May 2018 2018 / June /15 July 2018 →
  1. 1151
  2. 25
  3. 3 
  4. 4136
  5. 560
  6. 630
  7. 7237
  8. 896
  9. 91
  10. 101
  11. 11349
  12. 1256
  13. 1359
  14. 1471
  15. 1548
  16. 164
  17. 1726
  18. 1827
  19. 1948
  20. 2035
  21. 2141
  22. 2226
  23. 2310
  24. 244
  25. 2529
  26. 26144
  27. 2731
  28. 2820
  29. 2937
  30. 305
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    CVE-2018-6497

    MFSBGN03810 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF

    Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Server version DDM Content Pack V 10.20, 10.21, 10.22, 10.22 CUP7, 10.30, 10.31, 10.32, 10.33, 10.33 CUP2, 11.0 and CMS Server version 2018.05 BACKGROUND which could allow for rem…

    Micro Focus CMS Server Universal CMDB Server
  • High 7.5
    CVE-2018-6496

    MFSBGN03809 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF

    Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Browser version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.15.1 which could allow for remote unsafe deserialization and cross-site request forgery (CSRF).

    Micro Focus UCMDB Browser
  • High 8.4
    CVE-2018-1460

    IBM Netezza Platform Software (IBM PureData System for Analytics 1.0.0) could allow a local user to modify a world writ…

    IBM PureData System for Analytics
  • High 8.8
    CVE-2018-12457

    express-cart allows any user to create an admin user

    expressCart before 1.1.6 allows remote attackers to create an admin user via a /admin/setup Referer header.

    express-cart npm