Archive
20 June 2018
Vulnerabilities first published on this day (UTC), newest first.
35 results · Feed
-
Unscored —
A vulnerability in role-based access control (RBAC) for Cisco NX-OS Software could allow an authenticated, remote attac…
-
Unscored —
A vulnerability in the Internet Group Management Protocol (IGMP) Snooping feature of Cisco NX-OS Software could allow a…
-
Unscored —
A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco NX-OS Software could a…
-
Unscored —
A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an u…
-
Unscored —
A vulnerability in the Cisco Fabric Services (CFS) component of Cisco FXOS Software and Cisco NX-OS Software could allo…
-
Unscored —
A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an u…
-
Unscored —CVE-2018-0301 EPSS 17%
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft …
-
Unscored —
A vulnerability in the Border Gateway Protocol (BGP) implementation of Cisco NX-OS Software could allow an unauthentica…
-
Unscored —
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to perform a command-in…
-
Unscored —
A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an u…
-
Unscored —
A vulnerability in the NX-API management application programming interface (API) in devices running, or based on, Cisco…
-
Unscored —
A vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated…
-
Unscored —
GreenCMS 2.3.0603 allows remote attackers to obtain sensitive information via a direct request for Data/Log/year_month_…
-
Unscored —
There is a heap-based buffer overflow in ReadImage in input-tga.ci in sam2p 0.49.4 that leads to a denial of service or…
-
Unscored —
In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds wr…
-
Unscored —
In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds wr…
-
Medium 6.6
glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could …
-
High 8.8
TIBCO Data Virtualization Command Injection Vulnerability
The version control adapters component of TIBCO Data Virtualization (formerly known as Cisco Information Server) contains vulnerabilities that may allow for arbitrary command execution. Affected releases are TIBCO Data Virtualization: 7.0.5; 7.0.6.
-
Unscored —
On D-Link DIR-620 devices with a certain customized (by ISP) variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.…
-
Unscored —
On D-Link DIR-620 devices with a certain customized (by ISP) variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.…
-
Unscored —
In the web server on D-Link DIR-620 devices with a certain customized (by ISP) variant of firmware 1.0.3, 1.0.37, 1.3.1…
-
Unscored —
Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulner…
-
Unscored —
Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition (or race hazar…
-
Unscored —
CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users…
-
Unscored —
Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or e…
-
Unscored —
The parse() method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on speci…
-
Unscored —CVE-2018-6563 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in totemomail Encryption Gateway before 6.0.0_Build_371 allo…
-
Low 2.8CVE-2018-1120 Public exploit
A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memor…
-
High 7.5
A flaw was found in Opendaylight's SDNInterfaceapp (SDNI). Attackers can SQL inject the component's database (SQLite) w…
-
High 7.5
Reliable Controls MACH-ProWebCom 7.80 devices allow remote attackers to obtain sensitive information via a direct reque…
-
Unscored —
Polycom RealPresence Web Suite before 2.2.0 does not block a user's video for a few seconds upon joining a meeting (whe…
-
Unscored —
An issue was discovered in the com.dropbox.android application 98.2.2 for Android. The Passcode feature allows authenti…
-
Unscored —
An issue was discovered in the com.dropbox.android application 98.2.2 for Android. The FingerprintManager class for Bio…
-
Unscored —
Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an improperly neutralized element in an OS command due…
-
Unscored —
Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an externally controlled format-string vulnerability d…