Archive
June 2018
Vulnerabilities first published in this month (UTC), newest first.
1,787 results · Feed
-
High 8.4
IBM Netezza Platform Software (IBM PureData System for Analytics 1.0.0) could allow a local user to modify a world writ…
-
High 8.8
express-cart allows any user to create an admin user
expressCart before 1.1.6 allows remote attackers to create an admin user via a /admin/setup Referer header.
-
Medium 5.7
SB10240 - ePolicy Orchestrator (ePO) - Information disclosure vulnerablity
Information disclosure vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows authenticated users to view sensitive information in plain text format via unspecified vectors.
-
Medium 4.7CVE-2018-6671 Public exploit
SB10240 - ePolicy Orchestrator (ePO) - Application Protection Bypass vulnerability
Application Protection Bypass vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows remote authenticated users to bypass localhost only access security protection for some ePO features via a specially crafted HT…
-
Critical 9.0
openshift-ansible before versions 3.9.23, 3.7.46 deploys a misconfigured etcd file that causes the SSL client certifica…
-
Unscored —
The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.8 and other products, has an inte…
-
Unscored —
wolfcrypt/src/ecc.c in wolfSSL before 3.15.1.patch allows a memory-cache side-channel attack on ECDSA signatures, aka t…
-
Unscored —
BoringSSL through 2018-06-14 allows a memory-cache side-channel attack on DSA signatures, aka the Return Of the Hidden …
-
Unscored —
MatrixSSL through 3.9.5 Open allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidde…
-
Unscored —
Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of…
-
Unscored —
An issue was discovered in password-store.sh in pass in Simple Password Store 1.7.x before 1.7.2. The signature verific…
-
Unscored —
cryptlib through 3.4.4 allows a memory-cache side-channel attack on DSA and ECDSA signatures, aka the Return Of the Hid…
-
Unscored —
The Elliptic Curve Cryptography library (aka sunec or libsunec) allows a memory-cache side-channel attack on ECDSA sign…
-
Unscored —
LibTomCrypt through 1.18.1 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden …
-
Unscored —
LibreSSL before 2.6.5 and 2.7.x before 2.7.4 allows a memory-cache side-channel attack on DSA and ECDSA signatures, aka…
-
Unscored —
SeaCMS V6.61 has XSS via the site name parameter on an adm1n/admin_config.php page (aka a system management page).
-
Medium 6.1
Cross-site Scripting in JavaMelody
JavaMelody through 1.60.0 has XSS via the counter parameter in a clear_counter action to the /monitoring URI.
-
High 7.5
Matrix Synapse Authorization Error
In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.power_levels event in force.
-
Unscored —
IceHrm before 23.0.1.OS has a risky usage of a hashed password in a request.
-
Unscored —
On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools (aka pe-cl…
-
Unscored —CVE-2018-11690 EPSS 33%
The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, ca…
-
Unscored —
Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cg…
-
Critical 9.8
Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a …
-
Unscored —
An XXE issue was discovered in Automated Logic Corporation (ALC) WebCTRL Versions 6.0, 6.1 and 6.5. An unauthenticated …
-
Unscored —
Unsigned versions of the DLLs distributed by the OPC Foundation may be replaced with malicious code.
-
Unscored —
LTB (aka LDAP Tool Box) Self Service Password before 1.3 allows a change to a user password (without knowing the old pa…
-
Unscored —CVE-2018-12114 Public exploit
Maccms 10 allows CSRF via admin.php/admin/admin/info.html to add user accounts.
-
Unscored —
A vulnerability has been identified in RFID 181EIP (All versions), RUGGEDCOM Win (V4.4, V4.5, V5.0, and V5.1), SCALANCE…
-
Medium 5.5CVE-2018-12418 Public exploit
Junrar vulnerable to Infinite Loop
Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files.
-
Unscored —CVE-2018-10821 Public exploit
Cross-site scripting (XSS) vulnerability in backend/pages/modify.php in BlackCatCMS 1.3 allows remote authenticated use…
-
Medium 5.4
Improper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows remote authenticated users …
-
Unscored —
Huawei smart phones LYO-L21 with software LYO-L21C479B107, LYO-L21C479B107 have a privilege escalation vulnerability. A…
-
Unscored —
Huawei HG255s-10 V100R001C163B025SP02 has a path traversal vulnerability due to insufficient validation of the received…
-
Unscored —
Due to insufficient parameters verification GPU driver of Mate 9 Pro Huawei smart phones with the versions before LON-A…
-
Unscored —CVE-2018-0978 EPSS 16%
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Interne…
-
Unscored —CVE-2018-0982 Public exploit
An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Window…
-
Unscored —
An information disclosure vulnerability exists when Edge improperly marks files, aka "Microsoft Edge Information Disclo…
-
Unscored —
A denial of service vulnerability exists in the way that the Windows Code Integrity Module performs hashing, aka "Windo…
-
Unscored —
An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vul…
-
Unscored —
An Elevation of Privilege vulnerability exists when Cortana retrieves data from user input services without considerati…