CVEs published June 25, 2018
29 CVEs were published on June 25, 2018: 0 critical, 0 high.
- Published
- 29
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 29
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- centreon/centreon
- 1
- Cloud Foundry UAA · org.cloudfoundry.identity:cloudfoundry-…
- 1
- Pivotal Operations Manager
- 1
- Pivotal Spring Framework · org.springframework:spring-core
- 1
- Pivotal Spring Framework · org.springframework:spring-web
- 1
Medium, low and unrated 29
- CVE-2018-12603Cross-site request forgery (CSRF) vulnerability in admin.php in LFCMS 3.7.0 allows remote attackers to hijack the authentication of unspecif
- CVE-2018-11587There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraphcentreon/centreon
- CVE-2018-11588Centreon 3.4.6 including Centreon Web 2.8.23 is vulnerable to an authenticated user injecting a payload into the username or command descrip
- CVE-2018-11589Multiple SQL injection vulnerabilities in Centreon 3.4.6 including Centreon Web 2.8.23 allow attacks via the searchU parameter in viewLogs.p
- CVE-2018-12735SAJ Solar Inverter allows remote attackers to obtain potentially sensitive information via a direct request for the inverter_info.htm or eng
- CVE-2017-9312Improperly implemented option-field processing in the TCP/IP stack on Allen-Bradley L30ERMS safety devices v30 and earlier causes a denial o
- CVE-2018-10956IPConfigure Orchid Core VMS 2.0.5 allows Directory Traversal.
- CVE-2018-11039Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to cPivotal Spring Framework · org.springframework:spring-web
- CVE-2018-11040Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable Pivotal Spring Framework · org.springframework:spring-core
- CVE-2018-11041Cloud Foundry UAA, versions later than 4.6.0 and prior to 4.19.0 except 4.10.1 and 4.7.5 and uaa-release versions later than v48 and prior tCloud Foundry UAA · org.cloudfoundry.identity:cloudfoundry-…
- CVE-2018-11046Pivotal Operations Manager, versions 2.1.x prior to 2.1.6 and version 2.0.14, includes NGINX packages that lacks security vulnerability patcPivotal Operations Manager
- CVE-2018-12602A CSRF vulnerability exists in LFCMS 3.7.0: users can be added arbitrarily.
- CVE-2018-8755NuCom WR644GACV devices before STA006 allow an attacker to download the configuration file without credentials.
- CVE-2018-11446The buy function of a smart contract implementation for Gold Reward (GRX), an Ethereum ERC20 token, allows a potential trap that could be us
- CVE-2018-12062The sell function of a smart contract implementation for SwftCoin (SWFTC), a tradable Ethereum ERC20 token, allows a potential trap that cou
- CVE-2018-12063The sell function of a smart contract implementation for Internet Node Token (INT), a tradable Ethereum ERC20 token, allows a potential trap
- CVE-2018-12067The sell function of a smart contract implementation for Substratum (SUB), a tradable Ethereum ERC20 token, allows a potential trap that cou
- CVE-2018-12068The sell function of a smart contract implementation for Target Coin (TGT), a tradable Ethereum ERC20 token, allows a potential trap that co
- CVE-2018-12070The sell function of a smart contract implementation for SEC, a tradable Ethereum ERC20 token, allows a potential trap that could be used to
- CVE-2018-12078The mintToken function of a smart contract implementation for PolyAI (AI), a tradable Ethereum ERC20 token, has no period constraint, which
- CVE-2018-12079The mintToken function of a smart contract implementation for Substratum (SUB), a tradable Ethereum ERC20 token, has no period constraint, w
- CVE-2018-12080The mintToken function of a smart contract implementation for Internet Node Token (INT), a tradable Ethereum ERC20 token, has no period cons
- CVE-2018-12081The mintToken function of a smart contract implementation for Target Coin (TGT), a tradable Ethereum ERC20 token, has no period constraint,
- CVE-2018-12082The mintToken function of a smart contract implementation for Fujinto (NTO), a tradable Ethereum ERC20 token, has no period constraint, whic
- CVE-2018-12083The mintToken function of a smart contract implementation for GOAL Bonanza (GOAL), a tradable Ethereum ERC20 token, has no period constraint
- CVE-2018-12084The mintToken function of a smart contract implementation for BitAsean (BAS), a tradable Ethereum ERC20 token, has no period constraint, whi
- CVE-2018-12702The approveAndCallcode function of a smart contract implementation for Globalvillage ecosystem (GVE), an Ethereum ERC20 token, allows attack
- CVE-2018-12703The approveAndCallcode function of a smart contract implementation for Block 18 (18T), an tradable Ethereum ERC20 token, allows attackers to
- CVE-2018-12716The API service on Google Home and Chromecast devices before mid-July 2018 does not prevent DNS rebinding attacks from reading the scan_resu