Archive
June 2018
Vulnerabilities first published in this month (UTC), newest first.
125 results · Clear filters · Feed
-
Critical 9.1
Remote Code Execution in Micro Focus Secure Messaging Gateway
An OS command injection vulnerability in the web administration component of Micro Focus Secure Messaging Gateway (SMG) allows a remote attacker authenticated as a privileged user to execute arbitrary OS commands on the SMG server. This can be exploited in co…
-
Critical 10.0
Unauthenticated SQL injection in Micro Focus Secure Messaging Gateway
A SQL injection vulnerability in the web administration and quarantine components of Micro Focus Secure Messaging Gateway allows an unauthenticated remote attacker to execute arbitrary SQL statements against the database. This can be exploited to create an ad…
-
Unscored —
The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal…
-
Unscored —
Polaris Office 2017 8.1 allows attackers to execute arbitrary code via a Trojan horse puiframeworkproresenu.dll file in…
-
High 7.5
Exposure of Sensitive Information in Apache Pluto
The PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto version 3.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict path information provided during a file upload. An attacker coul…
-
Unscored —CVE-2018-12912 Public exploit
An issue wan discovered in admin\controllers\database.php in HongCMS 3.0.0. There is a SQL Injection vulnerability via …
-
Unscored —
Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensit…
-
Unscored —CVE-2018-12904 Public exploit
In arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested virtualization is used, local attackers could caus…
-
Unscored —
WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin…
-
Unscored —
Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVP…
-
High 7.5
Sprockets path traversal leads to information leak
There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests can be used to access files that exists on the filesystem that is outside an application's root di…
-
Unscored —
An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface.
-
Unscored —
An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.
-
Unscored —
An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection.
-
Unscored —CVE-2018-1000542 Public exploit
netbeans-mmd-plugin version <= 1.4.3 contains a XML External Entity (XXE) vulnerability in MMD file import that can res…
-
Unscored —
klaussilveira GitList version <= 0.6 contains a Passing incorrectly sanitized input to system function vulnerability in…
-
Medium 6.1CVE-2018-1000529 Public exploit
Stored Cross Site Scripting in Grails Fields Plugin
Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8.
-
Unscored —CVE-2018-1000531 Public exploit
inversoft prime-jwt version prior to commit abb0d479389a2509f939452a6767dc424bb5e6ba contains a CWE-20 vulnerability in…
-
Unscored —CVE-2018-12603 Public exploit
Cross-site request forgery (CSRF) vulnerability in admin.php in LFCMS 3.7.0 allows remote attackers to hijack the authe…
-
Unscored —CVE-2018-12602 Public exploit
A CSRF vulnerability exists in LFCMS 3.7.0: users can be added arbitrarily.
-
Unscored —
IPConfigure Orchid Core VMS 2.0.5 allows Directory Traversal.
-
Unscored —CVE-2018-12705 Public exploit
DIGISOL DG-BR4000NG devices have XSS via the SSID (it is validated only on the client side).
-
Unscored —CVE-2018-12706 Public exploit
DIGISOL DG-BR4000NG devices have a Buffer Overflow via a long Authorization HTTP header.
-
Unscored —
The iThemes Security (better-wp-security) plugin before 7.0.3 for WordPress allows SQL Injection (by attackers with Adm…
-
Unscored —CVE-2018-12633 Public exploit
An issue was discovered in the Linux kernel through 4.17.2. vbg_misc_device_ioctl() in drivers/virt/vboxguest/vboxguest…
-
Unscored —
CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/l…
-
High 8.8
phpMyAdmin Improper Authentication
An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the server. The vulnerability comes from a portion of code where pages are redirected and loaded within phpMyAdmin, and an impro…
-
Unscored —
qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 …
-
Unscored —
GreenCMS 2.3.0603 allows remote attackers to obtain sensitive information via a direct request for Data/Log/year_month_…
-
Unscored —
Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or e…
-
Unscored —CVE-2018-6563 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in totemomail Encryption Gateway before 6.0.0_Build_371 allo…
-
Low 2.8CVE-2018-1120 Public exploit
A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memor…
-
Unscored —
The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebK…
-
Unscored —CVE-2018-12519 Public exploit
An issue was discovered in ShopNx through 2017-11-17. The vulnerability allows a remote attacker to upload any maliciou…
-
Unscored —CVE-2018-11525 Public exploit
The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection.
-
Unscored —CVE-2018-11526 Public exploit
The plugin "WordPress Comments Import & Export" for WordPress (v2.0.4 and before) is vulnerable to CSV Injection.
-
Unscored —
An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers …
-
Unscored —CVE-2018-9021 Public exploit
An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to exe…
-
Unscored —
An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to exe…
-
Critical 9.8
Arbitrary code execution in Richfaces
JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.html.Paint2DResource$ImageData object, …