CVEs published July 2, 2018
66 CVEs were published on July 2, 2018: 0 critical, 8 high. 1 is now in CISA KEV.
- Published
- 66
- Critical
- 0
- High
- 8
- Medium
- 7
- Low
- 0
- Unrated
- 51
- Now in CISA KEV
- 1
- Fix available
- 9
Most affected products
- [UNKNOWN] ansible · ansible
- 2
- Medtronic 24950 MyCareLink Monitor · Medtronic 24952 MyCare…
- 2
- [UNKNOWN] pki-core
- 1
- [UNKNOWN] podman · github.com/containers/podman +3
- 1
- [UNKNOWN] setup
- 1
- [UNKNOWN] source-to-image
- 1
- Apache Software Foundation Apache CXF · org.apache.cxf:c… +1
- 1
- Dell EMC iDRAC6
- 1
- Dell EMC iDRAC6 · Dell EMC iDRAC7 +1
- 1
- Dell EMC iDRAC7 · Dell EMC iDRAC8 +1
- 1
High 8
- CVE-2018-10596Medtronic 2090 Carelink Programmer Improper Restriction of Communication Channel to Intended EndpointsMedtronic 2090 CareLink Programmer · Medtronic 29901 Encore…
- CVE-2018-1080Dogtag PKI, through version 10.6.1, has a vulnerability in AAclAuthz.java that, under certain configurations, causes the application of ACL [UNKNOWN] pki-core
- CVE-2018-10843source-to-image component of Openshift Container Platform before versions atomic-openshift 3.7.53, atomic-openshift 3.9.31 is vulnerable to [UNKNOWN] source-to-image
- CVE-2018-1212Authenticated remote code execution in iDRAC 6Dell EMC iDRAC6
- CVE-2018-1243iDRAC6/iDRAC7/iDRAC8 - Weak CGI session ID vulnerabilityDell EMC iDRAC6 · Dell EMC iDRAC7 +1
- CVE-2018-1244iDRAC7/iDRAC8/iDrac9 contains a command injection vulnerability in the SNMP agent.Dell EMC iDRAC7 · Dell EMC iDRAC8 +1
- CVE-2018-9276An issue was discovered in PRTG Network Monitor before 18.2.39.
- CVE-2018-10874In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attac[UNKNOWN] ansible · ansible
Medium, low and unrated 58
- CVE-2018-13068The mintToken function of a smart contract implementation for AzurionToken (AZU), an Ethereum token, has an integer overflow that allows the
- CVE-2018-13069The mintToken function of a smart contract implementation for DYchain (DYC), an Ethereum token, has an integer overflow that allows the owne
- CVE-2018-13070The mintToken function of a smart contract implementation for EncryptedToken (ECC), an Ethereum token, has an integer overflow that allows t
- CVE-2018-13071The mintToken function of a smart contract implementation for CCindex10 (T10), an Ethereum token, has an integer overflow that allows the ow
- CVE-2018-13072The mintToken function of a smart contract implementation for Coffeecoin (COFFEE), an Ethereum token, has an integer overflow that allows th
- CVE-2018-13073The mintToken function of a smart contract implementation for ETHEREUMBLACK (ETCBK), an Ethereum token, has an integer overflow that allows
- CVE-2018-13074The mintToken function of a smart contract implementation for FIBToken (FIB), an Ethereum token, has an integer overflow that allows the own
- CVE-2018-13075The mintToken function of a smart contract implementation for Carbon Exchange Coin Token (CEC), an Ethereum token, has an integer overflow t
- CVE-2018-13076The mintToken function of a smart contract implementation for Betcash (BC), an Ethereum token, has an integer overflow that allows the owner
- CVE-2018-13077The mintToken function of a smart contract implementation for CTB, an Ethereum token, has an integer overflow that allows the owner of the c
- CVE-2018-13078The mintToken function of a smart contract implementation for Jitech (JTH), an Ethereum token, has an integer overflow that allows the owner
- CVE-2018-13079The mintToken function of a smart contract implementation for GoodTo (GTO), an Ethereum token, has an integer overflow that allows the owner
- CVE-2018-13080The mintToken function of a smart contract implementation for Goutex (GTX), an Ethereum token, has an integer overflow that allows the owner
- CVE-2018-13081The mintToken function of a smart contract implementation for GZS Token (GZS), an Ethereum token, has an integer overflow that allows the ow
- CVE-2018-13082The mintToken function of a smart contract implementation for MODI Token (MODI), an Ethereum token, has an integer overflow that allows the
- CVE-2018-13083The mintToken function of a smart contract implementation for Plaza Token (PLAZA), an Ethereum token, has an integer overflow that allows th
- CVE-2018-13084The mintToken function of a smart contract implementation for Good Time Coin (GTY), an Ethereum token, has an integer overflow that allows t
- CVE-2018-13085The mintToken function of a smart contract implementation for FreeCoin (FREE), an Ethereum token, has an integer overflow that allows the ow
- CVE-2018-13086The mintToken function of a smart contract implementation for IADOWR Coin (IAD), an Ethereum token, has an integer overflow that allows the
- CVE-2018-13087The mintToken function of a smart contract implementation for Coinstar (CSTR), an Ethereum token, has an integer overflow that allows the ow
- CVE-2018-13088The mintToken function of a smart contract implementation for Futures Pease (FP), an Ethereum token, has an integer overflow that allows the
- CVE-2018-13089The mintToken function of a smart contract implementation for Universal Coin (UCOIN), an Ethereum token, has an integer overflow that allows
- CVE-2018-13090The mintToken function of a smart contract implementation for YiTongCoin (YTC), an Ethereum token, has an integer overflow that allows the o
- CVE-2018-13091The mintToken function of a smart contract implementation for sumocoin (SUMO), an Ethereum token, has an integer overflow that allows the ow
- CVE-2018-13092The mintToken function of a smart contract implementation for Reimburse Token (REIM), an Ethereum token, has an integer overflow that allows
- CVE-2017-2615Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue.qemu display
- CVE-2018-10855Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the no_log task flag for failed tasks.[UNKNOWN] ansible · ansible
- CVE-2018-10856It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user.[UNKNOWN] podman · github.com/containers/podman +3
- CVE-2018-1113setup before version 2.11.4-1.fc28 in Fedora and Red Hat Enterprise Linux added /sbin/nologin and /usr/sbin/nologin to /etc/shells.[UNKNOWN] setup
- CVE-2018-8868Medtronic MyCareLink Patient Monitor Exposed Dangerous Method or FunctionMedtronic 24950 MyCareLink Monitor · Medtronic 24952 MyCare…
- CVE-2018-8870Medtronic MyCareLink Patient Monitor Use of Hard-coded PasswordMedtronic 24950 MyCareLink Monitor · Medtronic 24952 MyCare…
- CVE-2018-12426The WP Live Chat Support Pro plugin before 8.0.07 for WordPress is vulnerable to unauthenticated Remote Code Execution due to client-side va
- CVE-2018-1249iDRAC9 versions prior to 3.21.21.21 did not enforce the use of TLS/SSL for a connection to iDRAC web server for certain URLsDell EMC iDRAC9
- CVE-2018-12891An issue was discovered in Xen through 4.10.x.
- CVE-2018-12892An issue was discovered in Xen 4.7 through 4.10.x.
- CVE-2018-12893An issue was discovered in Xen through 4.10.x.
- CVE-2018-12896An issue was discovered in the Linux kernel through 4.17.3.
- CVE-2018-13066There is a memory leak in util/parser.c in libming 0.4.8, which will lead to a denial of service via parseSWF_DEFINEBUTTON2, parseSWF_DEFINE
- CVE-2018-13067/upload/catalog/controller/account/password.php in OpenCart through 3.0.2.0 has CSRF via the index.php?route=account/password URI to change opencart/opencart
- CVE-2018-10075Cross-site scripting (XSS) vulnerability in Zoho ManageEngine EventLog Analyzer 11.12 allows remote attackers to inject arbitrary web script
- CVE-2018-10076An issue was discovered in Zoho ManageEngine EventLog Analyzer 11.12.
- CVE-2018-12499The Motorola MBP853 firmware does not correctly validate server certificates.
- CVE-2018-12528An issue was discovered on Intex N150 devices.
- CVE-2018-12529An issue was discovered on Intex N150 devices.
- CVE-2018-12574CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices.
- CVE-2018-12575On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n devices, all actions in the web interface are affected by bypas
- CVE-2018-12576TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking.
- CVE-2018-12577The Ping and Traceroute features on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow authenticated bl
- CVE-2018-13056An issue was discovered on zzcms 8.3.
- CVE-2018-13054An issue was discovered in Cinnamon 1.9.2 through 3.8.6.
- CVE-2017-17175Short Message Service (SMS) module of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.354(C00) has a Denial of ServiHuawei Technologies Co. Mate 9 Pro
- CVE-2017-17316Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V5Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60
- CVE-2017-17317Common Open Policy Service Protocol (COPS) module in Huawei USG6300 V100R001C10; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R00Huawei Technologies Co. DP300; IPS Module; NGFW Module; RP2…
- CVE-2018-8039It is possible to configure Apache CXF to use the com.sun.net.ssl implementation via 'System.setProperty("java.protocol.handler.pkgs", "com.Apache Software Foundation Apache CXF · org.apache.cxf:c… +1
- CVE-2018-0499A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTXapian xapian-core before · xapian-core
- CVE-2018-13053The alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an integer overflow via a large relative
- CVE-2018-13049The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted
- CVE-2018-13050A SQL Injection vulnerability exists in Zoho ManageEngine Applications Manager 13.x before build 13800 via the j_username parameter in a /j_