Skip to content
OpenAdvisories

Archive

26 June 2018

Vulnerabilities first published on this day (UTC), newest first.

← May 2018 2018 / June /26 July 2018 →
  1. 1151
  2. 25
  3. 3 
  4. 4136
  5. 560
  6. 630
  7. 7237
  8. 896
  9. 91
  10. 101
  11. 11349
  12. 1256
  13. 1359
  14. 1471
  15. 1548
  16. 164
  17. 1726
  18. 1827
  19. 1948
  20. 2035
  21. 2141
  22. 2226
  23. 2310
  24. 244
  25. 2529
  26. 26144
  27. 2731
  28. 2820
  29. 2937
  30. 305
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 10.0
    CVE-2018-6667

    McAfee Web Gateway - Authentication Bypass vulnerability

    Authentication Bypass vulnerability in the administrative user interface in McAfee Web Gateway 7.8.1.0 through 7.8.1.5 allows remote attackers to execute arbitrary code via Java management extensions (JMX).

    McAfee Web Gateway
  • Critical 9.8
    CVE-2017-7658 EPSS 19%

    Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling)

    In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the second. When presented with a content-length and a chunked …

    The Eclipse Foundation Eclipse Jetty jetty9 jetty9 Debian Ubuntu Maven
  • Critical 9.8
    CVE-2018-1000544

    Rubyzip gem contains a Directory Traversal vulnerability in zip file component

    rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , a…

    ruby-zip ruby-zip rubyzip Debian Ubuntu RubyGems
  • Critical 9.8
    CVE-2017-7657 EPSS 14%

    Critical severity vulnerability that affects org.eclipse.jetty:jetty-server

    In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a …

    The Eclipse Foundation Eclipse Jetty jetty9 jetty9 Debian Ubuntu Maven