CVEs published June 18, 2018
27 CVEs were published on June 18, 2018: 0 critical, 0 high.
- Published
- 27
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 0
- Unrated
- 25
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- CA Technologies CA Privileged Access Manager
- 10
- Delta Electronics Delta Industrial Automation DOPSoft
- 3
- org.richfaces:richfaces-core
- 2
- [UNKNOWN] pulp
- 1
- [UNKNOWN] python
- 1
- Apache Software Foundation Apache HTTP Server
- 1
- Tenable Burp Suite Community Edition
- 1
- Tenable libjpeg-turbo
- 1
Medium, low and unrated 27
- CVE-2018-10617Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length heap buffer where a value larger thaDelta Electronics Delta Industrial Automation DOPSoft
- CVE-2018-10621Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length stack buffer where a value larger thDelta Electronics Delta Industrial Automation DOPSoft
- CVE-2018-10623Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior performs read operations on a memory buffer where the positiDelta Electronics Delta Industrial Automation DOPSoft
- CVE-2015-4664An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary CA Technologies CA Privileged Access Manager
- CVE-2018-1333DoS for HTTP/2 connections by crafted requestsApache Software Foundation Apache HTTP Server
- CVE-2018-9021An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary commanCA Technologies CA Privileged Access Manager
- CVE-2018-9022An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary code oCA Technologies CA Privileged Access Manager
- CVE-2018-9023An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing speCA Technologies CA Privileged Access Manager
- CVE-2018-9024An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file.CA Technologies CA Privileged Access Manager
- CVE-2018-9025An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted inpCA Technologies CA Privileged Access Manager
- CVE-2018-9026A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafteCA Technologies CA Privileged Access Manager
- CVE-2018-9027A reflected cross-site scripting vulnerability in CA Privileged Access Manager 2.x allows remote attackers to execute malicious script with CA Technologies CA Privileged Access Manager
- CVE-2018-9028Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking.CA Technologies CA Privileged Access Manager
- CVE-2018-9029An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks.CA Technologies CA Privileged Access Manager
- CVE-2018-1060python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method.[UNKNOWN] python
- CVE-2018-1090In Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and then become readable to all users with rea[UNKNOWN] pulp
- CVE-2018-1152libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image.Tenable libjpeg-turbo
- CVE-2018-1153Burp Suite Community Edition 1.7.32 and 1.7.33 fail to validate the server certificate in a couple of HTTPS requests which allows a man in tTenable Burp Suite Community Edition
- CVE-2018-12530An issue was discovered in MetInfo 6.0.0.
- CVE-2018-12531An issue was discovered in MetInfo 6.0.0.
- CVE-2018-12534A SQL injection issue was discovered in the Quick Chat plugin before 4.00 for WordPress.
- CVE-2018-12532JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapperorg.richfaces:richfaces-core
- CVE-2018-12533JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitorg.richfaces:richfaces-core
- CVE-2018-12522An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2.
- CVE-2018-12523An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2.
- CVE-2018-12524An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2.
- CVE-2018-12525An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2.