Skip to content
OpenAdvisories

Archive

June 2018

Vulnerabilities first published in this month (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2018-1000529 Public exploit

    Stored Cross Site Scripting in Grails Fields Plugin

    Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8.

  • Medium 4.7
    CVE-2018-6671 Public exploit

    SB10240 - ePolicy Orchestrator (ePO) - Application Protection Bypass vulnerability

    Application Protection Bypass vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows remote authenticated users to bypass localhost only access security protection for some ePO features via a specially crafted HT…

  • Medium 5.5
    CVE-2018-12418 Public exploit

    Junrar vulnerable to Infinite Loop

    Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.

  • Medium 4.8
    CVE-2018-11564 Public exploit

    Pagekit Stored Cross-site Scripting

    Stored XSS in YOOtheme Pagekit 1.0.13 and earlier allows a user to upload malicious code via the picture upload feature. A user with elevated privileges could upload a photo to the system in an SVG format. This file will be uploaded to the system and it will …