CVEs published June 28, 2018
20 CVEs were published on June 28, 2018: 0 critical, 0 high.
- Published
- 20
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 20
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Apache Software Foundation Apache Cassandra · org.apache.ca…
- 1
- Atlassian Fisheye and Crucible
- 1
- Fortinet FortiManager
- 1
Medium, low and unrated 20
- CVE-2018-8016The default configuration in Apache Cassandra 3.8 through 3.11.1 binds an unauthenticated JMX/RMI interface to all network interfaces, whichApache Software Foundation Apache Cassandra · org.apache.ca…
- CVE-2018-1351A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.6 and below versions allows attacker to execute HTML/javascriFortinet FortiManager
- CVE-2017-16859The review attachment resource in Atlassian Fisheye and Crucible before version 4.3.2, from version 4.4.0 before 4.4.3 and before version 4.Atlassian Fisheye and Crucible
- CVE-2018-11510The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/apis/aggrecate_js.cg
- CVE-2018-12589Polaris Office 2017 8.1 allows attackers to execute arbitrary code via a Trojan horse puiframeworkproresenu.dll file in the current working
- CVE-2018-12928In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko.
- CVE-2018-12929ntfs_read_locked_inode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a use-after-free read and pos
- CVE-2018-12930ntfs_end_buffer_async_read in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-boun
- CVE-2018-12931ntfs_attr_find in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and
- CVE-2018-12932PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly ha
- CVE-2018-12933PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service (out-of-bounds write) or possibly have unsp
- CVE-2018-12934remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumptio
- CVE-2018-12920Brickstream 2300 devices allow remote attackers to obtain potentially sensitive information via a direct request for the basic.html#ipsettin
- CVE-2018-12921Electro Industries GaugeTech Nexus devices allow remote attackers to obtain potentially sensitive information via a direct request for the m
- CVE-2018-12922Emerson Liebert IntelliSlot Web Card devices allow remote attackers to reconfigure access control via the config/configUser.htm or config/co
- CVE-2018-12923BWS Systems HA-Bridge devices allow remote attackers to obtain potentially sensitive information via a direct request for the #!/system URI.
- CVE-2018-12924Sollae Serial-Ethernet-Module and Remote-I/O-Device-Server devices have a default password of sollae for the TELNET service.
- CVE-2018-12925Baseon Lantronix MSS devices do not require a password for TELNET access.
- CVE-2018-12926Pharos Controls devices allow remote attackers to obtain potentially sensitive information via a direct request for the default/index.lsp or
- CVE-2018-12927Northern Electric & Power (NEP) inverter devices allow remote attackers to obtain potentially sensitive information via a direct request for