Skip to content
OpenAdvisories

Archive

June 2018

Vulnerabilities first published in this month (UTC), newest first.

← May 2018 2018 / June July 2018 →
  1. 1151
  2. 25
  3. 3 
  4. 4136
  5. 560
  6. 630
  7. 7237
  8. 896
  9. 91
  10. 101
  11. 11349
  12. 1256
  13. 1359
  14. 1471
  15. 1548
  16. 164
  17. 1726
  18. 1827
  19. 1948
  20. 2035
  21. 2141
  22. 2226
  23. 2310
  24. 244
  25. 2529
  26. 26144
  27. 2731
  28. 2820
  29. 2937
  30. 305
All Critical High Medium Low Exploited only Public exploit

369 results · Clear filters · Feed

  • High —
    CVE-2016-10580

    Downloads Resources over HTTP in nodewebkit

    nodewebkit is an installer for node-webkit. nodewebkit downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested zip file with an attacker controlled…

    HackerOne nodewebkit node module nodewebkit npm
  • High 8.1
    CVE-2016-10633

    dwebp-bin downloads Resources over HTTP

    dwebp-bin is a dwebp node.js wrapper that convert WebP into PNG. dwebp-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an a…

    HackerOne dwebp-bin node module dwebp-bin npm
  • High —
    CVE-2016-10623

    Downloads Resources over HTTP in macaca-chromedriver-zxa

    macaca-chromedriver-zxa is a Node.js wrapper for the selenium chromedriver. macaca-chromedriver-zxa downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the r…

    HackerOne macaca-chromedriver-zxa node module macaca-chromedriver-zxa npm
  • High 8.1
    CVE-2016-10612

    dalek-browser-ie-canary downloads Resources over HTTP

    dalek-browser-ie-canary is Internet Explorer bindings for DalekJS. dalek-browser-ie-canary downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested …

    HackerOne dalek-browser-ie-canary node module dalek-browser-ie-canary npm
  • High 8.1
    CVE-2016-10583

    closure-util downloads Resources over HTTP

    closure-utils is Utilities for Closure Library based projects. closure-utils downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an…

    closure-util npm
  • High 7.5
    CVE-2017-2858

    An exploitable denial-of-service vulnerability exists in the traversal of lists functionality of Natus Xltek NeuroWorks…

    Talos Natus
  • High 7.5
    CVE-2017-2852

    An exploitable denial-of-service vulnerability exists in the unserialization of lists functionality of Natus Xltek Neur…

    Talos Natus
  • High 7.5
    CVE-2017-2860

    An exploitable denial-of-service vulnerability exists in the lookup entry functionality of KeyTrees in Natus Xltek Neur…

    Talos Natus
  • High 7.5
    CVE-2016-1000338

    In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate

    In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases…

    bouncycastle bouncycastle org.bouncycastle:bcprov-jdk14 org.bouncycastle:bcprov-jdk15on Debian Ubuntu Maven