# CVEs published 2018-06-20

35 CVEs were published on June 20, 2018: 0 critical, 3 high. Days are UTC.

- [CVE-2018-0291](https://cve.now/CVE-2018-0291.md): A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco NX-OS Software could allow an authenticated (no CVSS, Cisco NX-OS unknown)
- [CVE-2018-0292](https://cve.now/CVE-2018-0292.md): A vulnerability in the Internet Group Management Protocol (IGMP) Snooping feature of Cisco NX-OS Software could allow an unauthenticated, ad (no CVSS, Cisco NX-OS unknown)
- [CVE-2018-0293](https://cve.now/CVE-2018-0293.md): A vulnerability in role-based access control (RBAC) for Cisco NX-OS Software could allow an authenticated, remote attacker to execute CLI co (no CVSS, Cisco NX-OS unknown)
- [CVE-2018-0294](https://cve.now/CVE-2018-0294.md): A vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to c (no CVSS, Cisco FXOS and NX-OS unknown)
- [CVE-2018-0295](https://cve.now/CVE-2018-0295.md): A vulnerability in the Border Gateway Protocol (BGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker (no CVSS, Cisco NX-OS unknown)
- [CVE-2018-0301](https://cve.now/CVE-2018-0301.md): A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft a packet to the manag (no CVSS, Cisco NX-OS unknown)
- [CVE-2018-0304](https://cve.now/CVE-2018-0304.md): A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remot (no CVSS, Cisco FXOS and NX-OS unknown)
- [CVE-2018-0307](https://cve.now/CVE-2018-0307.md): A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to perform a command-injection attack on an (no CVSS, Cisco NX-OS unknown)
- [CVE-2018-0308](https://cve.now/CVE-2018-0308.md): A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remot (no CVSS, Cisco FXOS and NX-OS unknown)
- [CVE-2018-0312](https://cve.now/CVE-2018-0312.md): A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remot (no CVSS, Cisco FXOS and NX-OS unknown)
- [CVE-2018-0314](https://cve.now/CVE-2018-0314.md): A vulnerability in the Cisco Fabric Services (CFS) component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, (no CVSS, Cisco FXOS and NX-OS unknown)
- [CVE-2018-0330](https://cve.now/CVE-2018-0330.md): A vulnerability in the NX-API management application programming interface (API) in devices running, or based on, Cisco NX-OS Software could (no CVSS, Cisco NX-OS unknown)
- [CVE-2018-12604](https://cve.now/CVE-2018-12604.md): GreenCMS 2.3.0603 allows remote attackers to obtain sensitive information via a direct request for Data/Log/year\_month\_day.log. (no CVSS)
- [CVE-2018-10841](https://cve.now/CVE-2018-10841.md): glusterfs is vulnerable to privilege escalation on gluster server nodes. (CVSS 6.6, Red Hat glusterfs)
- [CVE-2018-12599](https://cve.now/CVE-2018-12599.md): In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted fil (no CVSS)
- [CVE-2018-12600](https://cve.now/CVE-2018-12600.md): In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted fil (no CVSS)
- [CVE-2018-12601](https://cve.now/CVE-2018-12601.md): There is a heap-based buffer overflow in ReadImage in input-tga.ci in sam2p 0.49.4 that leads to a denial of service or possibly unspecified (no CVSS)
- [CVE-2018-5428](https://cve.now/CVE-2018-5428.md): TIBCO Data Virtualization Command Injection Vulnerability (CVSS 8.8, TIBCO Software TIBCO Data Virtualization)
- [CVE-2018-5236](https://cve.now/CVE-2018-5236.md): Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition (or race hazard). (no CVSS, Symantec Endpoint Protection)
- [CVE-2018-5237](https://cve.now/CVE-2018-5237.md): Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a t (no CVSS, Symantec Endpoint Protection)
- [CVE-2018-6211](https://cve.now/CVE-2018-6211.md): On D-Link DIR-620 devices with a certain customized (by ISP) variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, OS c (no CVSS)
- [CVE-2018-6212](https://cve.now/CVE-2018-6212.md): On D-Link DIR-620 devices with a certain customized (by ISP) variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, a re (no CVSS)
- [CVE-2018-6213](https://cve.now/CVE-2018-6213.md): In the web server on D-Link DIR-620 devices with a certain customized (by ISP) variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0 (no CVSS)
- [CVE-2018-9036](https://cve.now/CVE-2018-9036.md): CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privi (no CVSS)
- [CVE-2018-12327](https://cve.now/CVE-2018-12327.md): Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher pri (no CVSS)
- [CVE-2018-12558](https://cve.now/CVE-2018-12558.md): The parse() method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, (no CVSS)
- [CVE-2018-6563](https://cve.now/CVE-2018-6563.md): Multiple cross-site request forgery (CSRF) vulnerabilities in totemomail Encryption Gateway before 6.0.0\_Build\_371 allow remote attackers to (no CVSS)
- [CVE-2018-1120](https://cve.now/CVE-2018-1120.md): A flaw was found affecting the Linux kernel before version 4.17. (CVSS 2.8, \[UNKNOWN\] kernel)
- [CVE-2018-1132](https://cve.now/CVE-2018-1132.md): A flaw was found in Opendaylight's SDNInterfaceapp (SDNI). (CVSS 7.5, \[UNKNOWN\] opendaylight)
- [CVE-2018-12594](https://cve.now/CVE-2018-12594.md): Reliable Controls MACH-ProWebCom 7.80 devices allow remote attackers to obtain sensitive information via a direct request for the data/filei (CVSS 7.5)
- [CVE-2018-12445](https://cve.now/CVE-2018-12445.md): An issue was discovered in the com.dropbox.android application 98.2.2 for Android. (no CVSS)
- [CVE-2018-12446](https://cve.now/CVE-2018-12446.md): An issue was discovered in the com.dropbox.android application 98.2.2 for Android. (no CVSS)
- [CVE-2018-12590](https://cve.now/CVE-2018-12590.md): Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an externally controlled format-string vulnerability due to lack of protect (no CVSS)
- [CVE-2018-12591](https://cve.now/CVE-2018-12591.md): Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an improperly neutralized element in an OS command due to lack of protectio (no CVSS)
- [CVE-2018-12592](https://cve.now/CVE-2018-12592.md): Polycom RealPresence Web Suite before 2.2.0 does not block a user's video for a few seconds upon joining a meeting (when the user has explic (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-06-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.