# CVEs published 2018-06-21

41 CVEs were published on June 21, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-12630](https://cve.now/CVE-2018-12630.md): NEWMARK (aka New Mark) NMCMS 2.1 allows SQL Injection via the sect\_id parameter to the /catalog URI. (no CVSS)
- [CVE-2018-12631](https://cve.now/CVE-2018-12631.md): Redatam7 (formerly Redatam WebServer) allows remote attackers to read arbitrary files via /redbin/rpwebutilities.exe/text?LFN=../ directory (no CVSS)
- [CVE-2018-12632](https://cve.now/CVE-2018-12632.md): Redatam7 (formerly Redatam WebServer) allows remote attackers to discover the installation path via an invalid LFN parameter to the /redbin/ (no CVSS)
- [CVE-2018-12581](https://cve.now/CVE-2018-12581.md): An issue was discovered in js/designer/move.js in phpMyAdmin before 4.8.2. (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2018-12613](https://cve.now/CVE-2018-12613.md): An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the serve (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2018-3665](https://cve.now/CVE-2018-3665.md): System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local pr (no CVSS, Intel Core-based microprocessors)
- [CVE-2018-7679](https://cve.now/CVE-2018-7679.md): Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories (no CVSS, Micro Focus Solutions Business Manager)
- [CVE-2018-7680](https://cve.now/CVE-2018-7680.md): Micro Focus Solutions Business Manager versions prior to 11.4 can reflect back HTTP header values. (no CVSS, Micro Focus Solutions Business Manager)
- [CVE-2018-7681](https://cve.now/CVE-2018-7681.md): Micro Focus Solutions Business Manager versions prior to 11.4 allows JavaScript to be embedded in URLs placed in "Favorites" folder. (no CVSS, Micro Focus Solutions Business Manager)
- [CVE-2018-7683](https://cve.now/CVE-2018-7683.md): Micro Focus Solutions Business Manager versions prior to 11.4 might reveal certain sensitive information in server log files. (no CVSS, Micro Focus Solutions Business Manager)
- [CVE-2018-12617](https://cve.now/CVE-2018-12617.md): qmp\_guest\_file\_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer overfl (no CVSS)
- [CVE-2018-12526](https://cve.now/CVE-2018-12526.md): Telesquare SDT-CS3B1 and SDT-CW3B1 devices through 1.2.0 have a default factory account. (no CVSS)
- [CVE-2018-1253](https://cve.now/CVE-2018-1253.md): Stored cross-site scripting vulnerability (CVSS 6.5, RSA Authentication Manager)
- [CVE-2018-1254](https://cve.now/CVE-2018-1254.md): RSA Authentication Manager Security Console, versions 8.3 P1 and earlier, contains a reflected cross-site scripting vulnerability. (no CVSS, RSA Authentication Manager)
- [CVE-2018-12615](https://cve.now/CVE-2018-12615.md): An issue was discovered in switchGroup() in agent/ExecHelper/ExecHelperMain.cpp in Phusion Passenger before 5.3.2. (no CVSS, passenger)
- [CVE-2016-10723](https://cve.now/CVE-2016-10723.md): An issue was discovered in the Linux kernel through 4.17.2. (no CVSS)
- [CVE-2017-13072](https://cve.now/CVE-2017-13072.md): Cross-site scripting (XSS) vulnerability in App Center in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20171213, QTS 4.3.4 build 20171223, (no CVSS, QNAP App Center in QTS)
- [CVE-2017-2669](https://cve.now/CVE-2017-2669.md): Dovecot before version 2.2.29 is vulnerable to a denial of service. (CVSS 3.7, \[UNKNOWN\] dovecot)
- [CVE-2017-2672](https://cve.now/CVE-2017-2672.md): A flaw was found in foreman before version 1.15 in the logging of adding and registering images. (CVSS 6.5, \[UNKNOWN\] foreman)
- [CVE-2018-0712](https://cve.now/CVE-2018-0712.md): Command injection vulnerability in LDAP Server in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20180402, QTS 4.3.4 build 20180413 and thei (no CVSS, QNAP LDAP Server in QTS)
- [CVE-2018-0298](https://cve.now/CVE-2018-0298.md): A vulnerability in the web UI of Cisco FXOS and Cisco UCS Fabric Interconnect Software could allow an unauthenticated, remote attacker to ca (no CVSS, Cisco FXOS Software and UCS Fabric Interconnect unknown)
- [CVE-2018-0299](https://cve.now/CVE-2018-0299.md): A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco NX-OS on the Cisco Nexus 4000 Series Switch could allow an (no CVSS, Cisco Nexus 4000 unknown)
- [CVE-2018-0300](https://cve.now/CVE-2018-0300.md): A vulnerability in the process of uploading new application images to Cisco FXOS on the Cisco Firepower 4100 Series Next-Generation Firewall (no CVSS, Cisco Firepower 4100 Series Next-Generation Firewall and Fi…)
- [CVE-2018-0302](https://cve.now/CVE-2018-0302.md): A vulnerability in the CLI parser of Cisco FXOS Software and Cisco UCS Fabric Interconnect Software could allow an authenticated, local atta (no CVSS, Cisco FXOS Software and UCS Fabric Interconnect unknown)
- [CVE-2018-0303](https://cve.now/CVE-2018-0303.md): A vulnerability in the Cisco Discovery Protocol component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, ad (no CVSS, Cisco FXOS and NX-OS unknown)
- [CVE-2018-0305](https://cve.now/CVE-2018-0305.md): A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remot (no CVSS, Cisco FXOS and NX-OS unknown)
- [CVE-2018-0306](https://cve.now/CVE-2018-0306.md): A vulnerability in the CLI parser of Cisco NX-OS Software could allow an authenticated, local attacker to perform a command-injection attack (no CVSS, Cisco NX-OS unknown)
- [CVE-2018-0309](https://cve.now/CVE-2018-0309.md): A vulnerability in the implementation of a specific CLI command and the associated Simple Network Management Protocol (SNMP) MIB for Cisco N (no CVSS, Cisco Nexus 3000 and 9000 unknown)
- [CVE-2018-0310](https://cve.now/CVE-2018-0310.md): A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remot (no CVSS, Cisco FXOS and NX-OS unknown)
- [CVE-2018-0311](https://cve.now/CVE-2018-0311.md): A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remot (no CVSS, Cisco FXOS and NX-OS unknown)
- [CVE-2018-0313](https://cve.now/CVE-2018-0313.md): A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to send a malicious packet to th (no CVSS, Cisco NX-OS unknown)
- [CVE-2018-0331](https://cve.now/CVE-2018-0331.md): A vulnerability in the Cisco Discovery Protocol (formerly known as CDP) subsystem of devices running, or based on, Cisco NX-OS Software cont (no CVSS, Cisco FXOS, NX-OS, and UCS Manager unknown)
- [CVE-2018-0337](https://cve.now/CVE-2018-0337.md): A vulnerability in the role-based access-checking mechanisms of Cisco NX-OS Software could allow an authenticated, local attacker to execute (no CVSS, Cisco NX-OS unknown)
- [CVE-2018-0358](https://cve.now/CVE-2018-0358.md): A vulnerability in the file descriptor handling of Cisco TelePresence Video Communication Server (VCS) Expressway could allow an unauthentic (no CVSS, Cisco TelePresence Video Communication Server unknown)
- [CVE-2018-0359](https://cve.now/CVE-2018-0359.md): A vulnerability in the session identification management functionality of the web-based management interface for Cisco Meeting Server could (no CVSS, Cisco Meeting Server unknown)
- [CVE-2018-0362](https://cve.now/CVE-2018-0362.md): A vulnerability in BIOS authentication management of Cisco 5000 Series Enterprise Network Compute System and Cisco Unified Computing (UCS) E (no CVSS, Cisco 5000 Series Enterprise Network Compute System and Cis…)
- [CVE-2018-0363](https://cve.now/CVE-2018-0363.md): A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (formerly CUPS) could al (no CVSS, Cisco Unified Communications Manager IM & Presence Service…)
- [CVE-2018-0364](https://cve.now/CVE-2018-0364.md): A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote (no CVSS, Cisco Unified Communications Domain Manager unknown)
- [CVE-2018-0365](https://cve.now/CVE-2018-0365.md): A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker t (no CVSS, Cisco Firepower Management Center unknown)
- [CVE-2018-0371](https://cve.now/CVE-2018-0371.md): A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of servic (no CVSS, Cisco Meeting Server unknown)
- [CVE-2018-0373](https://cve.now/CVE-2018-0373.md): A vulnerability in vpnva-6.sys for 32-bit Windows and vpnva64-6.sys for 64-bit Windows of Cisco AnyConnect Secure Mobility Client for Window (no CVSS, Cisco AnyConnect Secure Mobility Client unknown)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-06-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.