CVEs published June 20, 2018
35 CVEs were published on June 20, 2018: 0 critical, 3 high.
- Published
- 35
- Critical
- 0
- High
- 3
- Medium
- 1
- Low
- 1
- Unrated
- 30
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Cisco NX-OS unknown
- 7
- Cisco FXOS and NX-OS unknown
- 5
- Symantec Endpoint Protection
- 2
- [UNKNOWN] kernel
- 1
- [UNKNOWN] opendaylight
- 1
- Red Hat glusterfs
- 1
- TIBCO Software TIBCO Data Virtualization
- 1
High 3
- CVE-2018-5428TIBCO Data Virtualization Command Injection VulnerabilityTIBCO Software TIBCO Data Virtualization
- CVE-2018-1132A flaw was found in Opendaylight's SDNInterfaceapp (SDNI).[UNKNOWN] opendaylight
- CVE-2018-12594Reliable Controls MACH-ProWebCom 7.80 devices allow remote attackers to obtain sensitive information via a direct request for the data/filei
Medium, low and unrated 32
- CVE-2018-0291A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco NX-OS Software could allow an authenticatedCisco NX-OS unknown
- CVE-2018-0292A vulnerability in the Internet Group Management Protocol (IGMP) Snooping feature of Cisco NX-OS Software could allow an unauthenticated, adCisco NX-OS unknown
- CVE-2018-0293A vulnerability in role-based access control (RBAC) for Cisco NX-OS Software could allow an authenticated, remote attacker to execute CLI coCisco NX-OS unknown
- CVE-2018-0294A vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to cCisco FXOS and NX-OS unknown
- CVE-2018-0295A vulnerability in the Border Gateway Protocol (BGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker Cisco NX-OS unknown
- CVE-2018-0301A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft a packet to the managCisco NX-OS unknown
- CVE-2018-0304A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remotCisco FXOS and NX-OS unknown
- CVE-2018-0307A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to perform a command-injection attack on an Cisco NX-OS unknown
- CVE-2018-0308A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remotCisco FXOS and NX-OS unknown
- CVE-2018-0312A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remotCisco FXOS and NX-OS unknown
- CVE-2018-0314A vulnerability in the Cisco Fabric Services (CFS) component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated,Cisco FXOS and NX-OS unknown
- CVE-2018-0330A vulnerability in the NX-API management application programming interface (API) in devices running, or based on, Cisco NX-OS Software couldCisco NX-OS unknown
- CVE-2018-12604GreenCMS 2.3.0603 allows remote attackers to obtain sensitive information via a direct request for Data/Log/year_month_day.log.
- CVE-2018-10841glusterfs is vulnerable to privilege escalation on gluster server nodes.Red Hat glusterfs
- CVE-2018-12599In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted fil
- CVE-2018-12600In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted fil
- CVE-2018-12601There is a heap-based buffer overflow in ReadImage in input-tga.ci in sam2p 0.49.4 that leads to a denial of service or possibly unspecified
- CVE-2018-5236Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition (or race hazard).Symantec Endpoint Protection
- CVE-2018-5237Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a tSymantec Endpoint Protection
- CVE-2018-6211On D-Link DIR-620 devices with a certain customized (by ISP) variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, OS c
- CVE-2018-6212On D-Link DIR-620 devices with a certain customized (by ISP) variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, a re
- CVE-2018-6213In the web server on D-Link DIR-620 devices with a certain customized (by ISP) variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0
- CVE-2018-9036CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privi
- CVE-2018-12327Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher pri
- CVE-2018-12558The parse() method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input,
- CVE-2018-6563Multiple cross-site request forgery (CSRF) vulnerabilities in totemomail Encryption Gateway before 6.0.0_Build_371 allow remote attackers to
- CVE-2018-1120A flaw was found affecting the Linux kernel before version 4.17.[UNKNOWN] kernel
- CVE-2018-12445An issue was discovered in the com.dropbox.android application 98.2.2 for Android.
- CVE-2018-12446An issue was discovered in the com.dropbox.android application 98.2.2 for Android.
- CVE-2018-12590Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an externally controlled format-string vulnerability due to lack of protect
- CVE-2018-12591Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an improperly neutralized element in an OS command due to lack of protectio
- CVE-2018-12592Polycom RealPresence Web Suite before 2.2.0 does not block a user's video for a few seconds upon joining a meeting (when the user has explic