Skip to content
OpenAdvisories

Archive

25 June 2018

Vulnerabilities first published on this day (UTC), newest first.

← May 2018 2018 / June /25 July 2018 →
  1. 1151
  2. 25
  3. 3 
  4. 4136
  5. 560
  6. 630
  7. 7237
  8. 896
  9. 91
  10. 101
  11. 11349
  12. 1256
  13. 1359
  14. 1471
  15. 1548
  16. 164
  17. 1726
  18. 1827
  19. 1948
  20. 2035
  21. 2141
  22. 2226
  23. 2310
  24. 244
  25. 2529
  26. 26144
  27. 2731
  28. 2820
  29. 2937
  30. 305
All Critical High Medium Low Exploited only Public exploit

29 results · Feed

  • Unscored —
    CVE-2018-12603 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admin.php in LFCMS 3.7.0 allows remote attackers to hijack the authe…

  • Unscored —
    CVE-2018-11589

    Multiple SQL injection vulnerabilities in Centreon 3.4.6 including Centreon Web 2.8.23 allow attacks via the searchU pa…

  • Critical 9.8
    CVE-2018-11587

    Centreon RCE Vulnerability

    There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php.

    centreon/centreon Packagist
  • Unscored —
    CVE-2018-11588

    Centreon 3.4.6 including Centreon Web 2.8.23 is vulnerable to an authenticated user injecting a payload into the userna…

  • Unscored —
    CVE-2018-12735

    SAJ Solar Inverter allows remote attackers to obtain potentially sensitive information via a direct request for the inv…

  • Medium 6.1
    CVE-2018-11041

    Cloud Foundry UAA open redirect

    Cloud Foundry UAA, versions later than 4.6.0 and prior to 4.19.0 except 4.10.1 and 4.7.5 and uaa-release versions later than v48 and prior to v60 except v55.1 and v52.9, does not validate redirect URL values on a form parameter used for internal UAA redirects…

    Cloud Foundry Cloud Foundry UAA org.cloudfoundry.identity:cloudfoundry-identity-server Maven
  • Unscored —
    CVE-2018-11046

    Pivotal Operations Manager, versions 2.1.x prior to 2.1.6 and version 2.0.14, includes NGINX packages that lacks securi…

    Pivotal Operations Manager
  • Medium 5.9
    CVE-2018-11040

    Moderate severity vulnerability that affects org.springframework:spring-core

    Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpResponseBodyAdvice for REST controllers and Ma…

    Pivotal Spring Framework libspring-java libspring-java Debian Ubuntu Maven
  • Medium 5.9
    CVE-2018-11039

    Spring Framework Cross Site Tracing (XST)

    Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any HTTP method (including TRACE) using the HiddenHttpMethodFilter in Spring MVC. If a…

    Pivotal Spring Framework libspring-java libspring-java Debian Ubuntu Maven
  • Unscored —
    CVE-2018-12602 Public exploit

    A CSRF vulnerability exists in LFCMS 3.7.0: users can be added arbitrarily.

  • Unscored —
    CVE-2018-8755

    NuCom WR644GACV devices before STA006 allow an attacker to download the configuration file without credentials. By down…

  • Unscored —
    CVE-2018-10956 Public exploit Scanner template EPSS 54%

    IPConfigure Orchid Core VMS 2.0.5 allows Directory Traversal.

  • Unscored —
    CVE-2017-9312

    Improperly implemented option-field processing in the TCP/IP stack on Allen-Bradley L30ERMS safety devices v30 and earl…

  • Unscored —
    CVE-2018-11446

    The buy function of a smart contract implementation for Gold Reward (GRX), an Ethereum ERC20 token, allows a potential …

  • Unscored —
    CVE-2018-12081

    The mintToken function of a smart contract implementation for Target Coin (TGT), a tradable Ethereum ERC20 token, has n…

  • Unscored —
    CVE-2018-12078

    The mintToken function of a smart contract implementation for PolyAI (AI), a tradable Ethereum ERC20 token, has no peri…

  • Unscored —
    CVE-2018-12082

    The mintToken function of a smart contract implementation for Fujinto (NTO), a tradable Ethereum ERC20 token, has no pe…

  • Unscored —
    CVE-2018-12084

    The mintToken function of a smart contract implementation for BitAsean (BAS), a tradable Ethereum ERC20 token, has no p…

  • Unscored —
    CVE-2018-12080

    The mintToken function of a smart contract implementation for Internet Node Token (INT), a tradable Ethereum ERC20 toke…

  • Unscored —
    CVE-2018-12070

    The sell function of a smart contract implementation for SEC, a tradable Ethereum ERC20 token, allows a potential trap …

  • Unscored —
    CVE-2018-12079

    The mintToken function of a smart contract implementation for Substratum (SUB), a tradable Ethereum ERC20 token, has no…

  • Unscored —
    CVE-2018-12067

    The sell function of a smart contract implementation for Substratum (SUB), a tradable Ethereum ERC20 token, allows a po…

  • Unscored —
    CVE-2018-12083

    The mintToken function of a smart contract implementation for GOAL Bonanza (GOAL), a tradable Ethereum ERC20 token, has…

  • Unscored —
    CVE-2018-12062

    The sell function of a smart contract implementation for SwftCoin (SWFTC), a tradable Ethereum ERC20 token, allows a po…

  • Unscored —
    CVE-2018-12063

    The sell function of a smart contract implementation for Internet Node Token (INT), a tradable Ethereum ERC20 token, al…

  • Unscored —
    CVE-2018-12068

    The sell function of a smart contract implementation for Target Coin (TGT), a tradable Ethereum ERC20 token, allows a p…

  • Unscored —
    CVE-2018-12702

    The approveAndCallcode function of a smart contract implementation for Globalvillage ecosystem (GVE), an Ethereum ERC20…

  • Unscored —
    CVE-2018-12703

    The approveAndCallcode function of a smart contract implementation for Block 18 (18T), an tradable Ethereum ERC20 token…

  • Unscored —
    CVE-2018-12716

    The API service on Google Home and Chromecast devices before mid-July 2018 does not prevent DNS rebinding attacks from …