CVEs published June 12, 2018
56 CVEs were published on June 12, 2018: 1 critical, 2 high.
- Published
- 56
- Critical
- 1
- High
- 2
- Medium
- 6
- Low
- 0
- Unrated
- 47
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- 17
- Trend Micro OfficeScan
- 3
- Linux Foundation Linux Kernel
- 2
- McAfee Network Security Management
- 2
- [UNKNOWN] ovirt-engine
- 1
- [UNKNOWN] routing
- 1
- DFArc2 before 3.14 unknown
- 1
- Objective Development Software Little Snitch
- 1
- Openshift Enterprise unsanitized paths in tar.go · github.c…
- 1
- OpenSSL
- 1
Critical 1
High 2
Medium, low and unrated 53
- CVE-2017-15842Buffer might get used after it gets freed due to unlocking the mutex before freeing the buffer in all Android releases from CAF (Android forQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-15843Due to a race condition in a bus driver, a double free in msm_bus_floor_vote_context() can potentially occur in all Android releases from CAQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-15854The value of fix_param->num_chans is received from firmware and if it is too large, an integer overflow can occur in wma_radio_chan_stats_evQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-15857In the camera driver, an out-of-bounds access can occur due to an error in copying region params from user space in all Android releases fro
- CVE-2017-18070In wma_ndp_end_response_event_handler(), the variable len_end_rsp is a uint32 which can be overflowed if the value of variable "event->num_nQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-0496Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 (as well as in RTsoft's Dink Smallwood HD / ProtonSDK version) before DFArc2 before 3.14 unknown
- CVE-2018-3571In the KGSL driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, a Use After FQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-3572While processing a DSP buffer in an audio driver's event handler, an index of a buffer is not checked before accessing the buffer in all AndQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-3576improper validation of array index in WiFi driver function sapInterferenceRssiCount() leads to array out-of-bounds access in all Android relQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-3579In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, event->num_enQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-3581In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, a buffer overQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-3582Buffer overflow can occur due to improper input validation in multiple WMA event handler functions in all Android releases from CAF (AndroidQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5842An arbitrary address write can occur if a compromised WLAN firmware sends incorrect data to WLAN driver in all Android releases from CAF (AnQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5843In the function wma_pdev_div_info_evt_handler() in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using thQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5844In the video driver function set_output_buffers(), binfo can be accessed after being freed in a failure scenario in all Android releases froQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5847Early or late retirement of rotation requests can result in a Use After Free condition in all Android releases from CAF (Android for MSM, FiQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5848In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly.Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5849Due to a race condition in the QTEECOM driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-5851Buffer over flow can occur while processing a HTT_T2H_MSG_TYPE_TX_COMPL_IND message with an out-of-range num_msdus value in all Android releQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-18287An issue was discovered in PvPGN Stats 2.4.6.
- CVE-2017-18288An issue was discovered in PvPGN Stats 2.4.6.
- CVE-2017-18289An issue was discovered in PvPGN Stats 2.4.6.
- CVE-2017-18290An issue was discovered in PvPGN Stats 2.4.6.
- CVE-2017-18291An issue was discovered in PvPGN Stats 2.4.6.
- CVE-2018-12257An issue was discovered on Momentum Axel 720P 5.1.8 devices.
- CVE-2018-12258An issue was discovered on Momentum Axel 720P 5.1.8 devices.
- CVE-2018-12259An issue was discovered on Momentum Axel 720P 5.1.8 devices.
- CVE-2018-12260An issue was discovered on Momentum Axel 720P 5.1.8 devices.
- CVE-2018-12261An issue was discovered on Momentum Axel 720P 5.1.8 devices.
- CVE-2018-10470Little Snitch versions 4.0 to 4.0.6 use the SecStaticCodeCheckValidityWithErrors() function without the kSecCSCheckAllArchitectures flag andObjective Development Software Little Snitch
- CVE-2018-10507A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeScaTrend Micro OfficeScan
- CVE-2018-10508A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to use a specially crafted URL to elevate account permissioTrend Micro OfficeScan
- CVE-2018-10509A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to exploit it via a Browser Refresh attack on vulnerable inTrend Micro OfficeScan
- CVE-2018-1151The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrarWestern Digital TV Media Player · Western Digital TV Live H…
- CVE-2018-12254router.php in the Harmis Ek rishta (aka ek-rishta) 2.10 component for Joomla! allows SQL Injection via the PATH_INFO to a home/requested_use
- CVE-2018-5718Improper restriction of write operations within the bounds of a memory buffer in snscore.sys in SoftControl/SafenSoft SysWatch, SoftControl/
- CVE-2018-5803In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_chunk()" function (netLinux Foundation Linux Kernel
- CVE-2018-5814In the Linux Kernel before version 4.16.11, 4.14.43, 4.9.102, and 4.4.133, multiple race condition errors when handling probe, disconnect, aLinux Foundation Linux Kernel
- CVE-2018-1103Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input.Openshift Enterprise unsanitized paths in tar.go · github.c…
- CVE-2018-2428Under certain conditions SAP UI5 Handler allows an attacker to access information which would otherwise be restricted.SAP SE SAP Infrastructure · SAP SE SAP UI
- CVE-2017-3960McAfee Network Security Management (NSM) - Exploitation of Authorization vulnerabilityMcAfee Network Security Management
- CVE-2017-3962McAfee Network Security Management (NSM) - Password recovery exploitation vulnerabilityMcAfee Network Security Management
- CVE-2018-12247An issue was discovered in mruby 1.4.1.
- CVE-2018-12248An issue was discovered in mruby 1.4.1.
- CVE-2018-12249An issue was discovered in mruby 1.4.1.
- CVE-2018-0732Client DoS due to large DH parameterOpenSSL
- CVE-2018-1070routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which can cause an entire s[UNKNOWN] routing
- CVE-2018-1075ovirt-engine up to version 4.2.3 is vulnerable to an unfiltered password when choosing manual db provisioning.[UNKNOWN] ovirt-engine
- CVE-2018-12232In net/socket.c in the Linux kernel through 4.17.1, there is a race condition between fchownat and close in cases where they target the same
- CVE-2018-12233In the ea_get function in fs/jfs/xattr.c in the Linux kernel through 4.17.1, a memory corruption bug in JFS can be triggered by calling setx
- CVE-2018-12229Cross-site scripting (XSS) vulnerability in Public Knowledge Project (PKP) Open Journal System (OJS) 3.0.0 to 3.1.1-1 allows remote attacker
- CVE-2018-12227An issue was discovered in Asterisk Open Source 13.x before 13.21.1, 14.x before 14.7.7, and 15.x before 15.4.1 and Certified Asterisk 13.18
- CVE-2018-12228An issue was discovered in Asterisk Open Source 15.x before 15.4.1.