# CVEs published 2018-06-18 27 CVEs were published on June 18, 2018: 0 critical, 0 high. Days are UTC. - [CVE-2018-10617](https://cve.now/CVE-2018-10617.md): Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length heap buffer where a value larger tha (no CVSS, Delta Electronics Delta Industrial Automation DOPSoft) - [CVE-2018-10621](https://cve.now/CVE-2018-10621.md): Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length stack buffer where a value larger th (no CVSS, Delta Electronics Delta Industrial Automation DOPSoft) - [CVE-2018-10623](https://cve.now/CVE-2018-10623.md): Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior performs read operations on a memory buffer where the positi (no CVSS, Delta Electronics Delta Industrial Automation DOPSoft) - [CVE-2015-4664](https://cve.now/CVE-2015-4664.md): An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary (no CVSS, CA Technologies CA Privileged Access Manager) - [CVE-2018-1333](https://cve.now/CVE-2018-1333.md): DoS for HTTP/2 connections by crafted requests (no CVSS, Apache Software Foundation Apache HTTP Server) - [CVE-2018-9021](https://cve.now/CVE-2018-9021.md): An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary comman (no CVSS, CA Technologies CA Privileged Access Manager) - [CVE-2018-9022](https://cve.now/CVE-2018-9022.md): An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary code o (no CVSS, CA Technologies CA Privileged Access Manager) - [CVE-2018-9023](https://cve.now/CVE-2018-9023.md): An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing spe (no CVSS, CA Technologies CA Privileged Access Manager) - [CVE-2018-9024](https://cve.now/CVE-2018-9024.md): An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file. (no CVSS, CA Technologies CA Privileged Access Manager) - [CVE-2018-9025](https://cve.now/CVE-2018-9025.md): An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted inp (no CVSS, CA Technologies CA Privileged Access Manager) - [CVE-2018-9026](https://cve.now/CVE-2018-9026.md): A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafte (no CVSS, CA Technologies CA Privileged Access Manager) - [CVE-2018-9027](https://cve.now/CVE-2018-9027.md): A reflected cross-site scripting vulnerability in CA Privileged Access Manager 2.x allows remote attackers to execute malicious script with (no CVSS, CA Technologies CA Privileged Access Manager) - [CVE-2018-9028](https://cve.now/CVE-2018-9028.md): Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking. (no CVSS, CA Technologies CA Privileged Access Manager) - [CVE-2018-9029](https://cve.now/CVE-2018-9029.md): An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks. (no CVSS, CA Technologies CA Privileged Access Manager) - [CVE-2018-1060](https://cve.now/CVE-2018-1060.md): python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. (CVSS 4.3, \[UNKNOWN\] python) - [CVE-2018-1090](https://cve.now/CVE-2018-1090.md): In Pulp before version 2.16.2, secrets are passed into override\_config when triggering a task and then become readable to all users with rea (CVSS 5.5, \[UNKNOWN\] pulp) - [CVE-2018-1152](https://cve.now/CVE-2018-1152.md): libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image. (no CVSS, Tenable libjpeg-turbo) - [CVE-2018-1153](https://cve.now/CVE-2018-1153.md): Burp Suite Community Edition 1.7.32 and 1.7.33 fail to validate the server certificate in a couple of HTTPS requests which allows a man in t (no CVSS, Tenable Burp Suite Community Edition) - [CVE-2018-12530](https://cve.now/CVE-2018-12530.md): An issue was discovered in MetInfo 6.0.0. (no CVSS) - [CVE-2018-12531](https://cve.now/CVE-2018-12531.md): An issue was discovered in MetInfo 6.0.0. (no CVSS) - [CVE-2018-12534](https://cve.now/CVE-2018-12534.md): A SQL injection issue was discovered in the Quick Chat plugin before 4.00 for WordPress. (no CVSS) - [CVE-2018-12532](https://cve.now/CVE-2018-12532.md): JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapper (no CVSS, org.richfaces:richfaces-core) - [CVE-2018-12533](https://cve.now/CVE-2018-12533.md): JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbit (no CVSS, org.richfaces:richfaces-core) - [CVE-2018-12522](https://cve.now/CVE-2018-12522.md): An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. (no CVSS) - [CVE-2018-12523](https://cve.now/CVE-2018-12523.md): An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. (no CVSS) - [CVE-2018-12524](https://cve.now/CVE-2018-12524.md): An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. (no CVSS) - [CVE-2018-12525](https://cve.now/CVE-2018-12525.md): An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2018-06-18 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.