Skip to content
OpenAdvisories

Archive

June 2018

Vulnerabilities first published in this month (UTC), newest first.

← May 2018 2018 / June July 2018 →
  1. 1151
  2. 25
  3. 3 
  4. 4136
  5. 560
  6. 630
  7. 7237
  8. 896
  9. 91
  10. 101
  11. 11349
  12. 1256
  13. 1359
  14. 1471
  15. 1548
  16. 164
  17. 1726
  18. 1827
  19. 1948
  20. 2035
  21. 2141
  22. 2226
  23. 2310
  24. 244
  25. 2529
  26. 26144
  27. 2731
  28. 2820
  29. 2937
  30. 305
All Critical High Medium Low Exploited only Public exploit

1,787 results · Feed

  • Unscored —
    CVE-2018-10661 Public exploit EPSS 86%

    An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.

  • Unscored —
    CVE-2018-10660 Public exploit EPSS 82%

    An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection.

  • High 8.8
    CVE-2018-1000610

    Jenkins Configuration as Code Plugin has Insufficiently Protected Credentials

    A exposure of sensitive information vulnerability exists in Jenkins Configuration as Code Plugin 0.7-alpha and earlier in DataBoundConfigurator.java, Attribute.java, BaseConfigurator.java, ExtensionConfigurator.java that allows attackers with access to Jenkin…

    io.jenkins:configuration-as-code Maven
  • High 8.8
    CVE-2018-1000603

    CSRF vulnerability and missing permission checks in Openstack Cloud Plugin allowed capturing credentials

    A exposure of sensitive information vulnerability exists in Jenkins Openstack Cloud Plugin 2.35 and earlier in BootSource.java, InstancesToRun.java, JCloudsCleanupThread.java, JCloudsCloud.java, JCloudsComputer.java, JCloudsPreCreationThread.java, JCloudsRete…

    org.jenkins-ci.plugins:openstack-cloud Maven
  • Medium 6.5
    CVE-2018-1000601

    Exposure of Sensitive Information to an Unauthorized Actor in Jenkins SSH Credentials Plugin

    A arbitrary file read vulnerability exists in Jenkins SSH Credentials Plugin 1.13 and earlier in BasicSSHUserPrivateKey.java that allows attackers with a Jenkins account and the permission to configure credential bindings to read arbitrary files from the Jenk…

    org.jenkins-ci.plugins:credentials org.jenkins-ci.plugins:ssh-credentials Maven
  • Medium 6.5
    CVE-2018-1000602

    Jenkins SAML Plugin Session Fixation vulnerability

    A session fixation vulnerability exists in Jenkins SAML Plugin 1.0.6 and earlier in SamlSecurityRealm.java that allows unauthorized attackers to impersonate another users if they can control the pre-authentication session.

    org.jenkins-ci.plugins:saml Maven
  • Medium 6.5
    CVE-2018-1000607

    Arbitrary file write vulnerability in Jenkins Fortify CloudScan Plugin

    A arbitrary file write vulnerability exists in Jenkins Fortify CloudScan Plugin 1.5.1 and earlier in ArchiveUtil.java that allows attackers able to control rulepack zip file contents to overwrite any file on the Jenkins master file system, only limited by the…

    org.jenkins-ci.plugins:fortify-cloudscan-jenkins-plugin Maven
  • Medium 6.5
    CVE-2018-1000609

    Jenkins Configuration as Code Plugin vulnerable to Exposure of Sensitive Information

    A exposure of sensitive information vulnerability exists in Jenkins Configuration as Code Plugin 0.7-alpha and earlier in ConfigurationAsCode.java that allows attackers with Overall/Read access to obtain the YAML export of the Jenkins configuration.

    io.jenkins:configuration-as-code Maven
  • Medium 6.5
    CVE-2018-1000605

    Jenkins CollabNet Plugin man in the middle vulnerability

    A man in the middle vulnerability exists in Jenkins CollabNet Plugin 2.0.4 and earlier in CollabNetApp.java, CollabNetPlugin.java, CNFormFieldValidator.java that allows attackers to impersonate any service that Jenkins connects to.

    org.jenkins-ci.plugins:collabnet Maven
  • Low 3.3
    CVE-2018-1000608

    Jenkins z/OS Connector Plugin allows local attacker to retrieve configured password

    A exposure of sensitive information vulnerability exists in Jenkins z/OS Connector Plugin 1.2.6.1 and earlier in SCLMSCM.java that allows an attacker with local file system access or control of a Jenkins administrator's web browser (e.g. malicious extension) …

    org.jenkins-ci.plugins:zos-connector Maven
  • Medium 6.5
    CVE-2018-1000606

    URLTrigger Plugin server-side request forgery vulnerability

    A server-side request forgery vulnerability exists in Jenkins URLTrigger Plugin 0.41 and earlier in URLTrigger.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.

    org.jenkins-ci.plugins:urltrigger Maven
  • Medium 5.4
    CVE-2018-1000604

    Jenkins Badge Plugin cross-site scripting vulnerability

    A persisted cross-site scripting vulnerability exists in Jenkins Badge Plugin 1.4 and earlier in BadgeSummaryAction.java, HtmlBadgeAction.java that allows attackers able to control build badge content to define JavaScript that would be executed in another use…

    org.jenkins-ci.plugins:badge Maven
  • High 8.8
    CVE-2018-1000600 Scanner template EPSS 91%

    CSRF vulnerability and missing permission checks in GitHub Plugin allowed capturing credentials

    A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.1 and earlier in GitHubTokenCredentialsCreator.java that allows attackers to an attacker-specified URL using attacker-specified credentials IDs obtained through another met…

    com.coravy.hudson.plugins.github:github Maven
  • Critical 10.0
    CVE-2018-6667

    McAfee Web Gateway - Authentication Bypass vulnerability

    Authentication Bypass vulnerability in the administrative user interface in McAfee Web Gateway 7.8.1.0 through 7.8.1.5 allows remote attackers to execute arbitrary code via Java management extensions (JMX).

    McAfee Web Gateway
  • Critical 9.8
    CVE-2017-7658 EPSS 19%

    Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling)

    In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the second. When presented with a content-length and a chunked …

    The Eclipse Foundation Eclipse Jetty jetty9 jetty9 Debian Ubuntu Maven
  • Unscored —
    CVE-2018-1000542 Public exploit

    netbeans-mmd-plugin version <= 1.4.3 contains a XML External Entity (XXE) vulnerability in MMD file import that can res…

  • Unscored —
    CVE-2018-1000514

    LimeSurvey version 3.0.0-beta.3+17110 contains a Cross ite Request Forgery (CSRF) vulnerability in Boxes that can resul…

  • Unscored —
    CVE-2018-1000558

    OCS Inventory NG ocsreports 2.4 and ocsreports 2.3.1 version 2.4 and 2.3.1 contains a SQL Injection vulnerability in we…

    ocsinventory-server ocsinventory-server Debian Ubuntu
  • Medium 6.5
    CVE-2018-1000519

    aiohttp-session Session Fixation vulnerability

    aio-libs aiohttp-session contains a Session Fixation vulnerability in load_session function for RedisStorage (see: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttp_session/redis_storage.py#L42) that can result in Session Hijacking. This attack …

    aiohttp-session PyPI
  • Unscored —
    CVE-2018-1000554

    Trovebox version <= 4.0.0-rc6 contains a Unsafe password reset token generation vulnerability in user component that ca…

  • Unscored —
    CVE-2018-1000504

    Redirection version 2.7.3 contains a ACE via file inclusion vulnerability in Pass-through mode that can result in allow…

  • Unscored —
    CVE-2018-1000536

    Medis version 0.6.1 and earlier contains a XSS vulnerability evolving into code execution due to enabled nodeIntegratio…

  • Unscored —
    CVE-2018-1000533 Public exploit Scanner template EPSS 73%

    klaussilveira GitList version <= 0.6 contains a Passing incorrectly sanitized input to system function vulnerability in…

  • Unscored —
    CVE-2018-1000503

    MyBB Group MyBB contains a Incorrect Access Control vulnerability in Private forums that can result in Users can view p…

  • Unscored —
    CVE-2018-1000507

    WP User Groups version 2.0.0 contains a Cross ite Request Forgery (CSRF) vulnerability in Settings page that can result…

  • Unscored —
    CVE-2018-1000528 EPSS 46%

    GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulne…

    gosa gosa Debian Ubuntu
  • Unscored —
    CVE-2018-1000508

    WP ULike version 2.8.1, 3.1 contains a Cross Site Scripting (XSS) vulnerability in Settings screen that can result in a…

  • Unscored —
    CVE-2018-1000511

    WP ULike version 2.8.1, 3.1 contains a Incorrect Access Control vulnerability in AJAX that can result in allows anybody…

  • Medium 6.1
    CVE-2018-1000529 Public exploit

    Stored Cross Site Scripting in Grails Fields Plugin

    Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8.

    org.grails:grails-core org.grails.plugins:fields Maven
  • Unscored —
    CVE-2018-1000524

    miniSphere version 5.2.9 and earlier contains a Integer Overflow vulnerability in layer_resize() function in map_engine…

  • Unscored —
    CVE-2018-1000515

    ventrian News-Articles version NewsArticles.00.09.11 contains a XML External Entity (XXE) vulnerability in News-Article…

  • High 8.0
    CVE-2018-1000517 EPSS 32%

    BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflo…

    busybox busybox Debian Ubuntu
  • High 7.5
    CVE-2018-1000518

    websockets is vulnerable to denial of service by memory exhaustion

    aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This a…

    websockets PyPI
  • Medium 6.1
    CVE-2018-1000534

    Joplin Vulnerable to Cross-site Scripting in Note Content

    Joplin version prior to 1.0.90 contains a XSS evolving into code execution due to enabled nodeIntegration for that particular BrowserWindow instance where XSS was identified from vulnerability in Note content field - information on the fix can be found here h…

    joplin npm
  • Medium 6.1
    CVE-2018-1000516

    Galaxy cross-site scripting (XSS)

    The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability in Many templates used in the Galaxy server did not properly sanitize user's input, which would allow for cross-site scriptin…

    galaxy-app PyPI
  • Unscored —
    CVE-2018-1000556

    WordPress version 4.8 + contains a Cross Site Scripting (XSS) vulnerability in plugins.php or core wordpress on delete …

    wordpress Ubuntu
  • Unscored —
    CVE-2018-1000538

    Minio Inc. Minio S3 server version prior to RELEASE.2018-05-16T23-35-33Z contains a Allocation of Memory Without Limits…

  • Unscored —
    CVE-2018-1000549

    Wekan version 1.04.0 contains a Email / Username Enumeration vulnerability in Register' and 'Forgot your password?' pag…

  • Unscored —
    CVE-2018-1000512

    Tooltipy Tooltipy (tooltips for WP) version 5 contains a Cross Site Scripting (XSS) vulnerability in Glossary shortcode…

  • High 8.1
    CVE-2018-1000523

    Topydo Improper Input Validation vulnerability

    topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in Injection of arbitrary bytes to the terminal, including term…

    topydo PyPI