Skip to content
OpenAdvisories

Archive

28 June 2018

Vulnerabilities first published on this day (UTC), newest first.

← May 2018 2018 / June /28 July 2018 →
  1. 1151
  2. 25
  3. 3 
  4. 4136
  5. 560
  6. 630
  7. 7237
  8. 896
  9. 91
  10. 101
  11. 11349
  12. 1256
  13. 1359
  14. 1471
  15. 1548
  16. 164
  17. 1726
  18. 1827
  19. 1948
  20. 2035
  21. 2141
  22. 2226
  23. 2310
  24. 244
  25. 2529
  26. 26144
  27. 2731
  28. 2820
  29. 2937
  30. 305
All Critical High Medium Low Exploited only Public exploit

20 results · Feed

  • Critical 9.8
    CVE-2018-8016

    Missing Authentication for Critical Function in Apache Cassandra

    The default configuration in Apache Cassandra 3.8 through 3.11.1 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request. This issue is a regression of CVE-2015-0225…

    Apache Software Foundation Apache Cassandra org.apache.cassandra:cassandra-all Maven
  • Unscored —
    CVE-2018-1351

    A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.6 and below versions allows attacker to …

    Fortinet Fortinet FortiManager Network devices
  • Unscored —
    CVE-2018-11510 Public exploit EPSS 44%

    The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal…

  • Unscored —
    CVE-2018-12930

    ntfs_end_buffer_async_read in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a st…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2018-12932

    PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service (heap-based buffer ove…

    wine wine Debian Ubuntu
  • Unscored —
    CVE-2018-12934

    remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excess…

    binutils binutils libiberty Debian Ubuntu
  • Unscored —
    CVE-2018-12933

    PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service (out-of-bounds write) …

    wine wine Debian Ubuntu
  • Unscored —
    CVE-2018-12931

    ntfs_attr_find in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based ou…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2018-12928

    In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur …

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2018-12929

    ntfs_read_locked_inode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a use-af…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2018-12589 Public exploit EPSS 20%

    Polaris Office 2017 8.1 allows attackers to execute arbitrary code via a Trojan horse puiframeworkproresenu.dll file in…

  • Unscored —
    CVE-2017-16859

    The review attachment resource in Atlassian Fisheye and Crucible before version 4.3.2, from version 4.4.0 before 4.4.3 …

    Atlassian Fisheye and Crucible
  • Unscored —
    CVE-2018-12921

    Electro Industries GaugeTech Nexus devices allow remote attackers to obtain potentially sensitive information via a dir…

  • Unscored —
    CVE-2018-12924

    Sollae Serial-Ethernet-Module and Remote-I/O-Device-Server devices have a default password of sollae for the TELNET ser…

  • Unscored —
    CVE-2018-12920

    Brickstream 2300 devices allow remote attackers to obtain potentially sensitive information via a direct request for th…

  • Unscored —
    CVE-2018-12926

    Pharos Controls devices allow remote attackers to obtain potentially sensitive information via a direct request for the…

  • Unscored —
    CVE-2018-12927

    Northern Electric & Power (NEP) inverter devices allow remote attackers to obtain potentially sensitive information via…

  • Unscored —
    CVE-2018-12925

    Baseon Lantronix MSS devices do not require a password for TELNET access.

  • Unscored —
    CVE-2018-12922

    Emerson Liebert IntelliSlot Web Card devices allow remote attackers to reconfigure access control via the config/config…

  • Unscored —
    CVE-2018-12923

    BWS Systems HA-Bridge devices allow remote attackers to obtain potentially sensitive information via a direct request f…