Archive
July 2018
Vulnerabilities first published in this month (UTC), newest first.
2,170 results · Feed
-
Unscored —
Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 have Cassandra service enabled by default with …
-
Medium 6.1
Junos OS: SRX Series: Credentials exposed when using HTTP and HTTPS Firewall Pass-through User Authentication
When an SRX Series device is configured to use HTTP/HTTPS pass-through authentication services, a client sending authentication credentials in the initial HTTP/HTTPS session is at risk that these credentials may be captured during follow-on HTTP/HTTPS request…
-
Medium 4.4
Junos OS: QFX5200 and QFX10002: Unintended ONIE partition was shipped with certain Junos OS .bin and .iso images
QFX5200 and QFX10002 devices that have been shipped with Junos OS 15.1X53-D21, 15.1X53-D30, 15.1X53-D31, 15.1X53-D32, 15.1X53-D33 and 15.1X53-D60 or have been upgraded to these releases using the .bin or .iso images may contain an unintended additional Open N…
-
Critical 9.8
Junos OS: RPD daemon crashes due to receipt of crafted BGP NOTIFICATION messages
Junos OS routing protocol daemon (RPD) process may crash and restart or may lead to remote code execution while processing specific BGP NOTIFICATION messages. By continuously sending crafted BGP NOTIFICATION messages, an attacker can repeatedly crash the RPD …
-
Unscored —
Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 utilizes hard-coded credentials that may allow …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allow…
-
Unscored —
Cross-site scripting (XSS) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows remot…
-
Unscored —
In Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100, ports 30001/TCP to 30003/TCP listen for arb…
-
Unscored —
VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute ar…
-
Unscored —CVE-2018-13989 Public exploit
Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictabl…
-
High 8.8
An exploitable stack-based buffer overflow exists in the Microsoft Word document conversion functionality of the Antenn…
-
High 8.8
In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft…
-
High 8.8
An exploitable heap corruption exists in the PowerPoint document conversion functionality of the Antenna House Office S…
-
High 8.8
In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft…
-
High 8.8
In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft…
-
High 8.8
An exploitable out-of-bounds write exists in the Microsoft Word document conversion functionality of the Antenna House …
-
Unscored —
There is a time-based blind SQL injection vulnerability in the Access Manager component before 9.18.040 and 10.x before…
-
Unscored —
Open redirect vulnerability in IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to redir…
-
Unscored —
IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to bypass the remote image filtering me…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attac…
-
Unscored —
IBM WebSphere Cast Iron 6.3 allows remote attackers to bypass intended access restrictions via unspecified vectors. IBM…
-
Unscored —
IBM WebSphere Portal 7.0.0.x and 8.0.0.x write passwords to a trace file when tracing is enabled for the Selfcare Portl…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devi…
-
Unscored —
Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote…
-
Unscored —
Curl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based buffer overflow that mi…
-
Unscored —CVE-2018-8007 EPSS 12%
Apache CouchDB administrative users can configure the database server via HTTP(S). Due to insufficient validation of ad…
-
Medium 4.4
It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as …
-
High 7.0
A buffer overflow flaw was found in the way minicom before version 2.7.1 handled VT100 escape sequences. A malicious te…
-
Unscored —
A reflected XSS issue was discovered in the registration form in Rocket.Chat before 0.66. When one creates an account, …
-
Unscored —
An XSS issue was discovered in packages/rocketchat-mentions/Mentions.js in Rocket.Chat before 0.65. The real name of a …
-
Unscored —CVE-2018-0949 EPSS 12%
A security feature bypass vulnerability exists when Microsoft Internet Explorer improperly handles requests involving U…
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …
-
Unscored —
An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft…
-
Unscored —CVE-2018-8311 EPSS 17%
A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly saniti…
-
Unscored —
A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "Wor…
-
Unscored —CVE-2018-8324 EPSS 10%
An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft…
-
Unscored —
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".…
-
Unscored —CVE-2018-8275 EPSS 21%
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft …
-
Unscored —CVE-2018-8206 EPSS 12%
A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections, aka …
-
Unscored —CVE-2018-8262 EPSS 21%
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft …