Archive
June 2018
Vulnerabilities first published in this month (UTC), newest first.
1,787 results · Feed
-
Medium 5.3
Phusion Passenger incorrect permission assignment
An issue was discovered in switchGroup() in agent/ExecHelper/ExecHelperMain.cpp in Phusion Passenger before 5.3.2. The set of groups (gidset) is not set correctly, leaving it up to randomness (i.e., uninitialized memory) which supplementary groups are actuall…
-
Unscored —
Command injection vulnerability in LDAP Server in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20180402, QTS 4.3.4 bu…
-
Unscored —
An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to th…
-
Unscored —
Cross-site scripting (XSS) vulnerability in App Center in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20171213, QTS …
-
Low 3.7
Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user au…
-
Medium 6.5
A flaw was found in foreman before version 1.15 in the logging of adding and registering images. An attacker with acces…
-
Unscored —
A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an u…
-
Unscored —
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to send a m…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager could allow an una…
-
Unscored —
A vulnerability in the Cisco Discovery Protocol component of Cisco FXOS Software and Cisco NX-OS Software could allow a…
-
Unscored —
A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an authenticated, remote attacker to cau…
-
Unscored —
A vulnerability in BIOS authentication management of Cisco 5000 Series Enterprise Network Compute System and Cisco Unif…
-
Unscored —
A vulnerability in the session identification management functionality of the web-based management interface for Cisco …
-
Unscored —
A vulnerability in the CLI parser of Cisco NX-OS Software could allow an authenticated, local attacker to perform a com…
-
Unscored —
A vulnerability in vpnva-6.sys for 32-bit Windows and vpnva64-6.sys for 64-bit Windows of Cisco AnyConnect Secure Mobil…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticat…
-
Unscored —
A vulnerability in the file descriptor handling of Cisco TelePresence Video Communication Server (VCS) Expressway could…
-
Unscored —
A vulnerability in the Cisco Discovery Protocol (formerly known as CDP) subsystem of devices running, or based on, Cisc…
-
Unscored —
A vulnerability in the process of uploading new application images to Cisco FXOS on the Cisco Firepower 4100 Series Nex…
-
Unscored —
A vulnerability in the web UI of Cisco FXOS and Cisco UCS Fabric Interconnect Software could allow an unauthenticated, …
-
Unscored —
A vulnerability in the implementation of a specific CLI command and the associated Simple Network Management Protocol (…
-
Unscored —
A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an u…
-
Unscored —
A vulnerability in the CLI parser of Cisco FXOS Software and Cisco UCS Fabric Interconnect Software could allow an auth…
-
Unscored —
A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an u…
-
Unscored —
A vulnerability in the role-based access-checking mechanisms of Cisco NX-OS Software could allow an authenticated, loca…
-
Unscored —
A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco NX-OS on the Cisco Nexus 4000 Series …
-
Unscored —
A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (fo…
-
Unscored —
A vulnerability in role-based access control (RBAC) for Cisco NX-OS Software could allow an authenticated, remote attac…
-
Unscored —
A vulnerability in the Internet Group Management Protocol (IGMP) Snooping feature of Cisco NX-OS Software could allow a…
-
Unscored —
A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco NX-OS Software could a…
-
Unscored —
A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an u…
-
Unscored —
A vulnerability in the Cisco Fabric Services (CFS) component of Cisco FXOS Software and Cisco NX-OS Software could allo…
-
Unscored —
A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an u…
-
Unscored —CVE-2018-0301 EPSS 17%
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft …
-
Unscored —
A vulnerability in the Border Gateway Protocol (BGP) implementation of Cisco NX-OS Software could allow an unauthentica…
-
Unscored —
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to perform a command-in…
-
Unscored —
A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an u…
-
Unscored —
A vulnerability in the NX-API management application programming interface (API) in devices running, or based on, Cisco…
-
Unscored —
A vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated…
-
Unscored —
GreenCMS 2.3.0603 allows remote attackers to obtain sensitive information via a direct request for Data/Log/year_month_…