CVEs published June 21, 2018
41 CVEs were published on June 21, 2018: 0 critical, 0 high.
- Published
- 41
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 1
- Unrated
- 38
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- Cisco FXOS and NX-OS unknown
- 4
- Micro Focus Solutions Business Manager
- 4
- Cisco NX-OS unknown
- 3
- Cisco FXOS Software and UCS Fabric Interconnect unknown
- 2
- Cisco Meeting Server unknown
- 2
- phpmyadmin/phpmyadmin
- 2
- RSA Authentication Manager
- 2
- [UNKNOWN] dovecot
- 1
- [UNKNOWN] foreman
- 1
- Cisco 5000 Series Enterprise Network Compute System and Cis…
- 1
Medium, low and unrated 41
- CVE-2018-12630NEWMARK (aka New Mark) NMCMS 2.1 allows SQL Injection via the sect_id parameter to the /catalog URI.
- CVE-2018-12631Redatam7 (formerly Redatam WebServer) allows remote attackers to read arbitrary files via /redbin/rpwebutilities.exe/text?LFN=../ directory
- CVE-2018-12632Redatam7 (formerly Redatam WebServer) allows remote attackers to discover the installation path via an invalid LFN parameter to the /redbin/
- CVE-2018-12581An issue was discovered in js/designer/move.js in phpMyAdmin before 4.8.2.phpmyadmin/phpmyadmin
- CVE-2018-12613An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the servephpmyadmin/phpmyadmin
- CVE-2018-3665System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local prIntel Core-based microprocessors
- CVE-2018-7679Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories Micro Focus Solutions Business Manager
- CVE-2018-7680Micro Focus Solutions Business Manager versions prior to 11.4 can reflect back HTTP header values.Micro Focus Solutions Business Manager
- CVE-2018-7681Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder.Micro Focus Solutions Business Manager
- CVE-2018-7683Micro Focus Solutions Business Manager versions prior to 11.4 might reveal certain sensitive information in server log files.Micro Focus Solutions Business Manager
- CVE-2018-12617qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer overfl
- CVE-2018-12526Telesquare SDT-CS3B1 and SDT-CW3B1 devices through 1.2.0 have a default factory account.
- CVE-2018-1253Stored cross-site scripting vulnerabilityRSA Authentication Manager
- CVE-2018-1254RSA Authentication Manager Security Console, versions 8.3 P1 and earlier, contains a reflected cross-site scripting vulnerability.RSA Authentication Manager
- CVE-2018-12615An issue was discovered in switchGroup() in agent/ExecHelper/ExecHelperMain.cpp in Phusion Passenger before 5.3.2.passenger
- CVE-2016-10723An issue was discovered in the Linux kernel through 4.17.2.
- CVE-2017-13072Cross-site scripting (XSS) vulnerability in App Center in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20171213, QTS 4.3.4 build 20171223,QNAP App Center in QTS
- CVE-2017-2669Dovecot before version 2.2.29 is vulnerable to a denial of service.[UNKNOWN] dovecot
- CVE-2017-2672A flaw was found in foreman before version 1.15 in the logging of adding and registering images.[UNKNOWN] foreman
- CVE-2018-0712Command injection vulnerability in LDAP Server in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20180402, QTS 4.3.4 build 20180413 and theiQNAP LDAP Server in QTS
- CVE-2018-0298A vulnerability in the web UI of Cisco FXOS and Cisco UCS Fabric Interconnect Software could allow an unauthenticated, remote attacker to caCisco FXOS Software and UCS Fabric Interconnect unknown
- CVE-2018-0299A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco NX-OS on the Cisco Nexus 4000 Series Switch could allow anCisco Nexus 4000 unknown
- CVE-2018-0300A vulnerability in the process of uploading new application images to Cisco FXOS on the Cisco Firepower 4100 Series Next-Generation FirewallCisco Firepower 4100 Series Next-Generation Firewall and Fi…
- CVE-2018-0302A vulnerability in the CLI parser of Cisco FXOS Software and Cisco UCS Fabric Interconnect Software could allow an authenticated, local attaCisco FXOS Software and UCS Fabric Interconnect unknown
- CVE-2018-0303A vulnerability in the Cisco Discovery Protocol component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adCisco FXOS and NX-OS unknown
- CVE-2018-0305A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remotCisco FXOS and NX-OS unknown
- CVE-2018-0306A vulnerability in the CLI parser of Cisco NX-OS Software could allow an authenticated, local attacker to perform a command-injection attackCisco NX-OS unknown
- CVE-2018-0309A vulnerability in the implementation of a specific CLI command and the associated Simple Network Management Protocol (SNMP) MIB for Cisco NCisco Nexus 3000 and 9000 unknown
- CVE-2018-0310A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remotCisco FXOS and NX-OS unknown
- CVE-2018-0311A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remotCisco FXOS and NX-OS unknown
- CVE-2018-0313A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to send a malicious packet to thCisco NX-OS unknown
- CVE-2018-0331A vulnerability in the Cisco Discovery Protocol (formerly known as CDP) subsystem of devices running, or based on, Cisco NX-OS Software contCisco FXOS, NX-OS, and UCS Manager unknown
- CVE-2018-0337A vulnerability in the role-based access-checking mechanisms of Cisco NX-OS Software could allow an authenticated, local attacker to executeCisco NX-OS unknown
- CVE-2018-0358A vulnerability in the file descriptor handling of Cisco TelePresence Video Communication Server (VCS) Expressway could allow an unauthenticCisco TelePresence Video Communication Server unknown
- CVE-2018-0359A vulnerability in the session identification management functionality of the web-based management interface for Cisco Meeting Server could Cisco Meeting Server unknown
- CVE-2018-0362A vulnerability in BIOS authentication management of Cisco 5000 Series Enterprise Network Compute System and Cisco Unified Computing (UCS) ECisco 5000 Series Enterprise Network Compute System and Cis…
- CVE-2018-0363A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (formerly CUPS) could alCisco Unified Communications Manager IM & Presence Service…
- CVE-2018-0364A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote Cisco Unified Communications Domain Manager unknown
- CVE-2018-0365A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker tCisco Firepower Management Center unknown
- CVE-2018-0371A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of servicCisco Meeting Server unknown
- CVE-2018-0373A vulnerability in vpnva-6.sys for 32-bit Windows and vpnva64-6.sys for 64-bit Windows of Cisco AnyConnect Secure Mobility Client for WindowCisco AnyConnect Secure Mobility Client unknown