CVEs published June 19, 2018
48 CVEs were published on June 19, 2018: 0 critical, 1 high.
- Published
- 48
- Critical
- 0
- High
- 1
- Medium
- 5
- Low
- 0
- Unrated
- 42
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- [UNKNOWN] ovirt-ansible-roles
- 1
- [UNKNOWN] ovirt-engine
- 1
- [UNKNOWN] python
- 1
- angular-jwt
- 1
- Apache Software Foundation Apache Qpid Broker-J · org.apach…
- 1
High 1
Medium, low and unrated 47
- CVE-2018-10811strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable.
- CVE-2018-10945The mg_handle_cgi function in mongoose.c in Mongoose 6.11 allows remote attackers to cause a denial of service (heap-based buffer over-read
- CVE-2018-11723The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to caus
- CVE-2018-11724The mobi_pk1_decrypt function in encryption.c in Libmobi 0.3 allows remote attackers to cause a denial of service (heap-based buffer overflo
- CVE-2018-11725The mobi_parse_index_entry function in index.c in Libmobi 0.3 allows remote attackers to cause an information disclosure (heap-based buffer
- CVE-2018-11726The mobi_decode_font_resource function in util.c in Libmobi 0.3 allows remote attackers to cause a denial of service (heap-based buffer over
- CVE-2018-11727The libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an
- CVE-2018-11728The libfsntfs_reparse_point_values_read_data function in libfsntfs_reparse_point_values.c in libfsntfs through 2018-04-20 allows remote atta
- CVE-2018-11729The libfsntfs_mft_entry_read_header function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an in
- CVE-2018-11730The libfsntfs_security_descriptor_values_free function in libfsntfs_security_descriptor_values.c in libfsntfs through 2018-04-20 allows remo
- CVE-2018-11731The libfsntfs_mft_entry_read_attributes function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause a
- CVE-2018-12096The liblnk_data_string_get_utf8_string_size function in liblnk_data_string.c in liblnk through 2018-04-19 allows remote attackers to cause a
- CVE-2018-12097The liblnk_location_information_read_data function in liblnk_location_information.c in liblnk through 2018-04-19 allows remote attackers to
- CVE-2018-12098The liblnk_data_block_read function in liblnk_data_block.c in liblnk through 2018-04-19 allows remote attackers to cause an information disc
- CVE-2018-12293The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKit
- CVE-2018-12294WebCore/platform/graphics/texmap/TextureMapperLayer.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.2, is vulnerable to a use aft
- CVE-2018-12519An issue was discovered in ShopNx through 2017-11-17.
- CVE-2018-12588Cross-site scripting (XSS) vulnerability in templates/frontend/pages/searchResults.tpl in Public Knowledge Project (PKP) Open Monograph Pres
- CVE-2015-4043SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMain
- CVE-2018-11525The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection.
- CVE-2018-11526The plugin "WordPress Comments Import & Export" for WordPress (v2.0.4 and before) is vulnerable to CSV Injection.
- CVE-2018-11537Auth0 angular-jwt before 0.1.10 treats whiteListedDomains entries as regular expressions, which allows remote attackers with knowledge of thangular-jwt
- CVE-2018-6210D-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded rostel account, which makes it easier for rem
- CVE-2018-8727Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6 and earlier allows an attacker to traverse the file system to access files or d
- CVE-2018-12582An issue was discovered in AKCMS 6.1.
- CVE-2018-12583An issue was discovered in AKCMS 6.1.
- CVE-2018-12580library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for vBulletin 3 and vBulletin 4 allows self-XSS via $
- CVE-2018-12578There is a heap-based buffer overflow in bmp_compress1_row in appliers.cpp in sam2p 0.49.4 that leads to a denial of service or possibly uns
- CVE-2018-1117ovirt-ansible-roles before version 1.0.6 has a vulnerability due to a missing no_log directive, resulting in the 'Add oVirt Provider to Mana[UNKNOWN] ovirt-ansible-roles
- CVE-2018-11701FastStone Image Viewer 6.2 has a User Mode Write AV at 0x005cb509, triggered when the user opens a malformed JPEG file that is mishandled by
- CVE-2018-11702FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cb3, triggered when the user opens a malformed JPEG file that is mishandled by
- CVE-2018-11703FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d6a, triggered when the user opens a malformed JPEG file that is mishandled by
- CVE-2018-11704FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d7d, triggered when the user opens a malformed JPEG file that is mishandled by
- CVE-2018-11705FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cc4, triggered when the user opens a malformed JPEG file that is mishandled by
- CVE-2018-11706FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578dd8, triggered when the user opens a malformed JPEG file that is mishandled by
- CVE-2018-11707FastStone Image Viewer 6.2 has a User Mode Read and Execute AV at 0x0057898e, triggered when the user opens a malformed JPEG file that is mi
- CVE-2018-8030A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 7.0.0-7.0.4 when AMQP protocols 0-8, 0-9 or 0-91 are used to puApache Software Foundation Apache Qpid Broker-J · org.apach…
- CVE-2018-1061python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK me[UNKNOWN] python
- CVE-2018-1073The web console login form in ovirt-engine before version 4.2.3 returned different errors for non-existent users and invalid passwords, allo[UNKNOWN] ovirt-engine
- CVE-2018-12557An issue was discovered in Zuul 3.x before 3.1.0.
- CVE-2018-12559An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1.
- CVE-2018-12560An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1.
- CVE-2018-12561An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1.
- CVE-2018-12562An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1.
- CVE-2018-12563An issue was discovered in Linaro LAVA before 2018.5.post1.
- CVE-2018-12564An issue was discovered in Linaro LAVA before 2018.5.post1.
- CVE-2018-12565An issue was discovered in Linaro LAVA before 2018.5.post1.