# CVEs published 2018-06-08

96 CVEs were published on June 8, 2018: 0 critical, 9 high. Days are UTC.

- [CVE-2018-12020](https://cve.now/CVE-2018-12020.md): mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers (no CVSS)
- [CVE-2018-0225](https://cve.now/CVE-2018-0225.md): The Enterprise Console in Cisco AppDynamics App iQ Platform before 4.4.3.10598 (HF4) allows SQL injection, aka the Security Advisory 2089 is (no CVSS, Cisco AppDynamics App iQ Platform before 4.4.3.10598 (HF4)…)
- [CVE-2018-1281](https://cve.now/CVE-2018-1281.md): The clustered setup of Apache MXNet allows users to specify which IP address and port the scheduler will listen on via the DMLC\_PS\_ROOT\_URI (no CVSS, Apache Software Foundation Apache MXNet)
- [CVE-2018-4141](https://cve.now/CVE-2018-4141.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4159](https://cve.now/CVE-2018-4159.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4171](https://cve.now/CVE-2018-4171.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4184](https://cve.now/CVE-2018-4184.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4187](https://cve.now/CVE-2018-4187.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4188](https://cve.now/CVE-2018-4188.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4190](https://cve.now/CVE-2018-4190.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4192](https://cve.now/CVE-2018-4192.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4193](https://cve.now/CVE-2018-4193.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4196](https://cve.now/CVE-2018-4196.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4198](https://cve.now/CVE-2018-4198.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4199](https://cve.now/CVE-2018-4199.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4200](https://cve.now/CVE-2018-4200.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4201](https://cve.now/CVE-2018-4201.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4202](https://cve.now/CVE-2018-4202.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4204](https://cve.now/CVE-2018-4204.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4205](https://cve.now/CVE-2018-4205.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4206](https://cve.now/CVE-2018-4206.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4211](https://cve.now/CVE-2018-4211.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4214](https://cve.now/CVE-2018-4214.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4215](https://cve.now/CVE-2018-4215.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4218](https://cve.now/CVE-2018-4218.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4219](https://cve.now/CVE-2018-4219.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4220](https://cve.now/CVE-2018-4220.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4221](https://cve.now/CVE-2018-4221.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4222](https://cve.now/CVE-2018-4222.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4223](https://cve.now/CVE-2018-4223.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4224](https://cve.now/CVE-2018-4224.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4225](https://cve.now/CVE-2018-4225.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4226](https://cve.now/CVE-2018-4226.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4227](https://cve.now/CVE-2018-4227.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4228](https://cve.now/CVE-2018-4228.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4229](https://cve.now/CVE-2018-4229.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4230](https://cve.now/CVE-2018-4230.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4232](https://cve.now/CVE-2018-4232.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4233](https://cve.now/CVE-2018-4233.md): An issue was discovered in certain Apple products. (CVSS 8.8)
- [CVE-2018-4234](https://cve.now/CVE-2018-4234.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4235](https://cve.now/CVE-2018-4235.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4236](https://cve.now/CVE-2018-4236.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4237](https://cve.now/CVE-2018-4237.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4238](https://cve.now/CVE-2018-4238.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4239](https://cve.now/CVE-2018-4239.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4240](https://cve.now/CVE-2018-4240.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4241](https://cve.now/CVE-2018-4241.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4242](https://cve.now/CVE-2018-4242.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4243](https://cve.now/CVE-2018-4243.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4244](https://cve.now/CVE-2018-4244.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4246](https://cve.now/CVE-2018-4246.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4247](https://cve.now/CVE-2018-4247.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4250](https://cve.now/CVE-2018-4250.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4251](https://cve.now/CVE-2018-4251.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4252](https://cve.now/CVE-2018-4252.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2018-4253](https://cve.now/CVE-2018-4253.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2011-4190](https://cve.now/CVE-2011-4190.md): Missing verification of host key for kdump server (CVSS 5.9, SUSE kdump)
- [CVE-2012-0433](https://cve.now/CVE-2012-0433.md): insecure permissions on files containing confidential data (CVSS 3.3, SUSE crowbar)
- [CVE-2013-3703](https://cve.now/CVE-2013-3703.md): No write permission check in change\_role command (CVSS 8.8, openSUSE Open Build Service)
- [CVE-2014-0593](https://cve.now/CVE-2014-0593.md): sed command injection (CVSS 7.8, openSUSE obs-service-set\_version)
- [CVE-2014-0594](https://cve.now/CVE-2014-0594.md): CSRF protection incorrectly disabled (CVSS 8.8, openSUSE Open Build Service)
- [CVE-2014-5220](https://cve.now/CVE-2014-5220.md): The mdcheck script of the mdadm package for openSUSE 13.2 prior to version 3.3.1-5.14.1 does not properly sanitize device names, which allow (no CVSS)
- [CVE-2018-10358](https://cve.now/CVE-2018-10358.md): A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate priv (no CVSS, Trend Micro OfficeScan)
- [CVE-2018-10359](https://cve.now/CVE-2018-10359.md): A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate priv (no CVSS, Trend Micro OfficeScan)
- [CVE-2018-10505](https://cve.now/CVE-2018-10505.md): A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate priv (no CVSS, Trend Micro OfficeScan)
- [CVE-2018-10506](https://cve.now/CVE-2018-10506.md): A out-of-bounds read information disclosure vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to disclose (no CVSS, Trend Micro OfficeScan)
- [CVE-2018-12066](https://cve.now/CVE-2018-12066.md): BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service (stack consumption and daemon crash) via BGP mask (no CVSS)
- [CVE-2011-3172](https://cve.now/CVE-2011-3172.md): unix2\_chkpwd do not check for a valid account (CVSS 5.4, SUSE Linux Enterprise)
- [CVE-2017-12075](https://cve.now/CVE-2017-12075.md): Command injection vulnerability in EZ-Internet in Synology DiskStation Manager (DSM) before 6.2-23739 allows remote authenticated users to e (CVSS 7.2, Synology DiskStation Manager)
- [CVE-2017-12078](https://cve.now/CVE-2017-12078.md): Command injection vulnerability in EZ-Internet in Synology Router Manager (SRM) before 1.1.6-6931 allows remote authenticated users to execu (CVSS 7.2, Synology Router Manager)
- [CVE-2017-1405](https://cve.now/CVE-2017-1405.md): IBM Security Identity Manager Virtual Appliance 7.0 processes patches, image backups and other updates without sufficiently verifying the or (CVSS 4.4, IBM Security Identity Manager)
- [CVE-2018-1453](https://cve.now/CVE-2018-1453.md): IBM Security Identity Manager Virtual Appliance 7.0 allows an authenticated attacker to upload or transfer files of dangerous types that can (CVSS 8.8, IBM Security Identity Manager)
- [CVE-2018-8916](https://cve.now/CVE-2018-8916.md): Unverified password change vulnerability in Change Password in Synology DiskStation Manager (DSM) before 6.2-23739 allows remote authenticat (CVSS 6.3, Synology DiskStation Manager)
- [CVE-2018-8925](https://cve.now/CVE-2018-8925.md): Cross-site request forgery (CSRF) vulnerability in admin/user.php in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows rem (CVSS 8.8, Synology Photo Station)
- [CVE-2018-8926](https://cve.now/CVE-2018-8926.md): Permissive regular expression vulnerability in synophoto\_dsm\_user in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows rem (CVSS 8.8, Synology Photo Station)
- [CVE-2018-10088](https://cve.now/CVE-2018-10088.md): Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725. (no CVSS)
- [CVE-2018-11409](https://cve.now/CVE-2018-11409.md): Splunk through 7.0.1 allows information disclosure by appending \_\_raw/services/server/info/server-info?output\_mode=json to a query, as demon (no CVSS)
- [CVE-2018-12064](https://cve.now/CVE-2018-12064.md): tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h. (no CVSS)
- [CVE-2018-12065](https://cve.now/CVE-2018-12065.md): A Local File Inclusion vulnerability in /system/WCore/WHelper.php in Creatiwity wityCMS 0.6.2 allows remote attackers to include local PHP f (no CVSS)
- [CVE-2018-12051](https://cve.now/CVE-2018-12051.md): Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via $\_FILE in /webmasterst/general (no CVSS)
- [CVE-2018-12052](https://cve.now/CVE-2018-12052.md): SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in get\_sec.php. (no CVSS)
- [CVE-2018-12053](https://cve.now/CVE-2018-12053.md): Arbitrary File Deletion exists in PHP Scripts Mall Schools Alert Management Script via the img parameter in delete\_img.php by using director (no CVSS)
- [CVE-2018-12054](https://cve.now/CVE-2018-12054.md): Arbitrary File Read exists in PHP Scripts Mall Schools Alert Management Script via the f parameter in img.php, aka absolute path traversal. (no CVSS)
- [CVE-2018-12055](https://cve.now/CVE-2018-12055.md): Multiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted POST data in contact\_us.php, faq.php, about.ph (no CVSS)
- [CVE-2018-11228](https://cve.now/CVE-2018-11228.md): Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code (no CVSS)
- [CVE-2018-11229](https://cve.now/CVE-2018-11229.md): Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code (no CVSS)
- [CVE-2018-12041](https://cve.now/CVE-2018-12041.md): An issue was discovered on the MediaTek AWUS036NH wireless USB adapter through 5.1.25.0. (no CVSS)
- [CVE-2018-12045](https://cve.now/CVE-2018-12045.md): DedeCMS through V5.7SP2 allows arbitrary file upload in dede/file\_manage\_control.php via a dede/file\_manage\_view.php?fmdo=upload request wit (no CVSS)
- [CVE-2018-12046](https://cve.now/CVE-2018-12046.md): DedeCMS through 5.7SP2 allows arbitrary file write in dede/file\_manage\_control.php via a dede/file\_manage\_view.php?fmdo=newfile request with (no CVSS)
- [CVE-2018-12047](https://cve.now/CVE-2018-12047.md): xfind/search in Ximdex 4.0 has XSS via the filter\[n\]\[value\] parameters for non-negative values of n, as demonstrated by n equal to 0 through (no CVSS)
- [CVE-2018-12048](https://cve.now/CVE-2018-12048.md): A remote attacker can bypass the Management Mode on the Canon LBP7110Cw web interface without a PIN for /checkLogin.cgi via vectors involvin (no CVSS)
- [CVE-2018-12049](https://cve.now/CVE-2018-12049.md): A remote attacker can bypass the System Manager Mode on the Canon LBP6030w web interface without a PIN for /checkLogin.cgi via vectors invol (no CVSS)
- [CVE-2018-9177](https://cve.now/CVE-2018-9177.md): Twonky Server before 8.5.1 has XSS via a folder name on the Shared Folders screen. (no CVSS)
- [CVE-2018-9182](https://cve.now/CVE-2018-9182.md): Twonky Server before 8.5.1 has XSS via a modified "language" parameter in the Language section. (no CVSS)
- [CVE-2018-9246](https://cve.now/CVE-2018-9246.md): The PGObject::Util::DBAdmin module before 0.120.0 for Perl, as used in LedgerSMB through 1.5.x, insufficiently sanitizes or escapes variable (no CVSS)
- [CVE-2018-4249](https://cve.now/CVE-2018-4249.md): An issue was discovered in certain Apple products. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-06-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.