# CVEs published 2018-06-08

96 CVEs were published on June 8, 2018: 0 critical, 9 high. Days are UTC.

- [CVE-2018-12020](https://cve.now/CVE-2018-12020.md): mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote… (no CVSS)
- [CVE-2018-0225](https://cve.now/CVE-2018-0225.md): The Enterprise Console in Cisco AppDynamics App iQ Platform before 4.4.3.10598 (HF4) allows SQL injection, aka the Security Advisory 2089… (no CVSS, Cisco AppDynamics App iQ Platform before 4.4.3.10598 (HF4)…)
- [CVE-2018-1281](https://cve.now/CVE-2018-1281.md): The clustered setup of Apache MXNet allows users to specify which IP address and port the scheduler will listen on via the… (no CVSS, Apache Software Foundation Apache MXNet)
- [CVE-2018-4141](https://cve.now/CVE-2018-4141.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4159](https://cve.now/CVE-2018-4159.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4171](https://cve.now/CVE-2018-4171.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4184](https://cve.now/CVE-2018-4184.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4187](https://cve.now/CVE-2018-4187.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4188](https://cve.now/CVE-2018-4188.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4190](https://cve.now/CVE-2018-4190.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4192](https://cve.now/CVE-2018-4192.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4193](https://cve.now/CVE-2018-4193.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4196](https://cve.now/CVE-2018-4196.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4198](https://cve.now/CVE-2018-4198.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4199](https://cve.now/CVE-2018-4199.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4200](https://cve.now/CVE-2018-4200.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4201](https://cve.now/CVE-2018-4201.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4202](https://cve.now/CVE-2018-4202.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4204](https://cve.now/CVE-2018-4204.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4205](https://cve.now/CVE-2018-4205.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4206](https://cve.now/CVE-2018-4206.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4211](https://cve.now/CVE-2018-4211.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4214](https://cve.now/CVE-2018-4214.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4215](https://cve.now/CVE-2018-4215.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4218](https://cve.now/CVE-2018-4218.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4219](https://cve.now/CVE-2018-4219.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4220](https://cve.now/CVE-2018-4220.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4221](https://cve.now/CVE-2018-4221.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4222](https://cve.now/CVE-2018-4222.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4223](https://cve.now/CVE-2018-4223.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4224](https://cve.now/CVE-2018-4224.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4225](https://cve.now/CVE-2018-4225.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4226](https://cve.now/CVE-2018-4226.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4227](https://cve.now/CVE-2018-4227.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4228](https://cve.now/CVE-2018-4228.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4229](https://cve.now/CVE-2018-4229.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4230](https://cve.now/CVE-2018-4230.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4232](https://cve.now/CVE-2018-4232.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4233](https://cve.now/CVE-2018-4233.md): An issue was discovered in certain Apple products. (CVSS 8.8)
- [CVE-2018-4234](https://cve.now/CVE-2018-4234.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4235](https://cve.now/CVE-2018-4235.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4236](https://cve.now/CVE-2018-4236.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4237](https://cve.now/CVE-2018-4237.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4238](https://cve.now/CVE-2018-4238.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4239](https://cve.now/CVE-2018-4239.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4240](https://cve.now/CVE-2018-4240.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4241](https://cve.now/CVE-2018-4241.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4242](https://cve.now/CVE-2018-4242.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4243](https://cve.now/CVE-2018-4243.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4244](https://cve.now/CVE-2018-4244.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4246](https://cve.now/CVE-2018-4246.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4247](https://cve.now/CVE-2018-4247.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4250](https://cve.now/CVE-2018-4250.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4251](https://cve.now/CVE-2018-4251.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4252](https://cve.now/CVE-2018-4252.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4253](https://cve.now/CVE-2018-4253.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2011-4190](https://cve.now/CVE-2011-4190.md): Missing verification of host key for kdump server (CVSS 5.9, SUSE kdump)
- [CVE-2012-0433](https://cve.now/CVE-2012-0433.md): insecure permissions on files containing confidential data (CVSS 3.3, SUSE crowbar)
- [CVE-2013-3703](https://cve.now/CVE-2013-3703.md): No write permission check in change\_role command (CVSS 8.8, openSUSE Open Build Service)
- [CVE-2014-0593](https://cve.now/CVE-2014-0593.md): sed command injection (CVSS 7.8, openSUSE obs-service-set\_version)
- [CVE-2014-0594](https://cve.now/CVE-2014-0594.md): CSRF protection incorrectly disabled (CVSS 8.8, openSUSE Open Build Service)
- [CVE-2014-5220](https://cve.now/CVE-2014-5220.md): The mdcheck script of the mdadm package for openSUSE 13.2 prior to version 3.3.1-5.14.1 does not properly sanitize device names, which… (no CVSS)
- [CVE-2018-10358](https://cve.now/CVE-2018-10358.md): A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate… (no CVSS, Trend Micro OfficeScan)
- [CVE-2018-10359](https://cve.now/CVE-2018-10359.md): A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate… (no CVSS, Trend Micro OfficeScan)
- [CVE-2018-10505](https://cve.now/CVE-2018-10505.md): A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate… (no CVSS, Trend Micro OfficeScan)
- [CVE-2018-10506](https://cve.now/CVE-2018-10506.md): A out-of-bounds read information disclosure vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to… (no CVSS, Trend Micro OfficeScan)
- [CVE-2018-12066](https://cve.now/CVE-2018-12066.md): BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service (stack consumption and daemon crash) via BGP… (no CVSS)
- [CVE-2011-3172](https://cve.now/CVE-2011-3172.md): unix2\_chkpwd do not check for a valid account (CVSS 5.4, SUSE Linux Enterprise)
- [CVE-2017-12075](https://cve.now/CVE-2017-12075.md): Command injection vulnerability in EZ-Internet in Synology DiskStation Manager (DSM) before 6.2-23739 allows remote authenticated users to… (CVSS 7.2, Synology DiskStation Manager)
- [CVE-2017-12078](https://cve.now/CVE-2017-12078.md): Command injection vulnerability in EZ-Internet in Synology Router Manager (SRM) before 1.1.6-6931 allows remote authenticated users to… (CVSS 7.2, Synology Router Manager)
- [CVE-2017-1405](https://cve.now/CVE-2017-1405.md): IBM Security Identity Manager Virtual Appliance 7.0 processes patches, image backups and other updates without sufficiently verifying the… (CVSS 4.4, IBM Security Identity Manager)
- [CVE-2018-1453](https://cve.now/CVE-2018-1453.md): IBM Security Identity Manager Virtual Appliance 7.0 allows an authenticated attacker to upload or transfer files of dangerous types that… (CVSS 8.8, IBM Security Identity Manager)
- [CVE-2018-8916](https://cve.now/CVE-2018-8916.md): Unverified password change vulnerability in Change Password in Synology DiskStation Manager (DSM) before 6.2-23739 allows remote… (CVSS 6.3, Synology DiskStation Manager)
- [CVE-2018-8925](https://cve.now/CVE-2018-8925.md): Cross-site request forgery (CSRF) vulnerability in admin/user.php in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows… (CVSS 8.8, Synology Photo Station)
- [CVE-2018-8926](https://cve.now/CVE-2018-8926.md): Permissive regular expression vulnerability in synophoto\_dsm\_user in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows… (CVSS 8.8, Synology Photo Station)
- [CVE-2018-10088](https://cve.now/CVE-2018-10088.md): Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725. (no CVSS)
- [CVE-2018-11409](https://cve.now/CVE-2018-11409.md): Splunk through 7.0.1 allows information disclosure by appending \_\_raw/services/server/info/server-info?output\_mode=json to a query, as… (no CVSS)
- [CVE-2018-12064](https://cve.now/CVE-2018-12064.md): tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h. (no CVSS)
- [CVE-2018-12065](https://cve.now/CVE-2018-12065.md): A Local File Inclusion vulnerability in /system/WCore/WHelper.php in Creatiwity wityCMS 0.6.2 allows remote attackers to include local PHP… (no CVSS)
- [CVE-2018-12051](https://cve.now/CVE-2018-12051.md): Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via $\_FILE in… (no CVSS)
- [CVE-2018-12052](https://cve.now/CVE-2018-12052.md): SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in get\_sec.php. (no CVSS)
- [CVE-2018-12053](https://cve.now/CVE-2018-12053.md): Arbitrary File Deletion exists in PHP Scripts Mall Schools Alert Management Script via the img parameter in delete\_img.php by using… (no CVSS)
- [CVE-2018-12054](https://cve.now/CVE-2018-12054.md): Arbitrary File Read exists in PHP Scripts Mall Schools Alert Management Script via the f parameter in img.php, aka absolute path traversal. (no CVSS)
- [CVE-2018-12055](https://cve.now/CVE-2018-12055.md): Multiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted POST data in contact\_us.php, faq.php… (no CVSS)
- [CVE-2018-11228](https://cve.now/CVE-2018-11228.md): Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote… (no CVSS)
- [CVE-2018-11229](https://cve.now/CVE-2018-11229.md): Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote… (no CVSS)
- [CVE-2018-12041](https://cve.now/CVE-2018-12041.md): An issue was discovered on the MediaTek AWUS036NH wireless USB adapter through 5.1.25.0. (no CVSS)
- [CVE-2018-12045](https://cve.now/CVE-2018-12045.md): DedeCMS through V5.7SP2 allows arbitrary file upload in dede/file\_manage\_control.php via a dede/file\_manage\_view.php?fmdo=upload request… (no CVSS)
- [CVE-2018-12046](https://cve.now/CVE-2018-12046.md): DedeCMS through 5.7SP2 allows arbitrary file write in dede/file\_manage\_control.php via a dede/file\_manage\_view.php?fmdo=newfile request… (no CVSS)
- [CVE-2018-12047](https://cve.now/CVE-2018-12047.md): xfind/search in Ximdex 4.0 has XSS via the filter\[n\]\[value\] parameters for non-negative values of n, as demonstrated by n equal to 0… (no CVSS)
- [CVE-2018-12048](https://cve.now/CVE-2018-12048.md): A remote attacker can bypass the Management Mode on the Canon LBP7110Cw web interface without a PIN for /checkLogin.cgi via vectors… (no CVSS)
- [CVE-2018-12049](https://cve.now/CVE-2018-12049.md): A remote attacker can bypass the System Manager Mode on the Canon LBP6030w web interface without a PIN for /checkLogin.cgi via vectors… (no CVSS)
- [CVE-2018-9177](https://cve.now/CVE-2018-9177.md): Twonky Server before 8.5.1 has XSS via a folder name on the Shared Folders screen. (no CVSS)
- [CVE-2018-9182](https://cve.now/CVE-2018-9182.md): Twonky Server before 8.5.1 has XSS via a modified "language" parameter in the Language section. (no CVSS)
- [CVE-2018-9246](https://cve.now/CVE-2018-9246.md): The PGObject::Util::DBAdmin module before 0.120.0 for Perl, as used in LedgerSMB through 1.5.x, insufficiently sanitizes or escapes… (no CVSS)
- [CVE-2018-4249](https://cve.now/CVE-2018-4249.md): An issue was discovered in certain Apple products. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2018-06-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.