CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  What's the CVSS score of your company?
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In June 2018

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
151 CVE-2018-12912 89 Sql 2018-06-27 2018-08-20
6.5
None Remote Low ??? Partial Partial Partial
An issue wan discovered in admin\controllers\database.php in HongCMS 3.0.0. There is a SQL Injection vulnerability via an admin/index.php/database/operate?dbaction=emptytable&tablename= URI.
152 CVE-2018-12909 22 Dir. Trav. 2018-06-27 2018-08-24
7.8
None Remote Low Not required Complete None None
** DISPUTED ** Webgrind 1.5 relies on user input to display a file, which lets anyone view files from the local filesystem (that the webserver user has access to) via an index.php?op=fileviewer&file= URI. NOTE: the vendor indicates that the product is not intended for a "publicly accessible environment."
153 CVE-2018-12908 200 +Info 2018-06-27 2018-08-27
5.0
None Remote Low Not required Partial None None
Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via a direct request for the /dashboard/deposit URI, as demonstrated by discovering database credentials.
154 CVE-2018-12907 200 +Info 2018-06-27 2018-08-31
5.0
None Remote Low Not required Partial None None
In Rclone 1.42, use of "rclone sync" to migrate data between two Google Cloud Storage buckets might allow attackers to trigger the transmission of any URL's content to Google, because there is no validation of a URL field received from the Google Cloud Storage API server, aka a "RESTLESS" issue.
155 CVE-2018-12905 79 XSS 2018-06-27 2018-08-20
4.3
None Remote Medium Not required None Partial None
joyplus-cms 1.6.0 has XSS in admin_player.php, related to manager/index.php "system manage" and "add" actions.
156 CVE-2018-12904 DoS 2018-06-27 2019-10-03
4.4
None Local Medium Not required Partial Partial Partial
In arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested virtualization is used, local attackers could cause L1 KVM guests to VMEXIT, potentially allowing privilege escalations and denial of service attacks due to lack of checking of CPL.
157 CVE-2018-12903 79 XSS 2018-06-26 2018-08-30
3.5
None Remote Medium ??? None Partial None
In CyberArk Endpoint Privilege Manager (formerly Viewfinity) 10.2.1.603, there is persistent XSS via an account name on the create token screen, the VfManager.asmx SelectAccounts->DisplayName screen, a user's groups in ConfigurationPage, the Dialog Title field, and App Group Name in the Application Group Wizard.
158 CVE-2018-12902 79 XSS 2018-06-26 2018-08-20
4.3
None Remote Medium Not required None Partial None
In Easy Magazine through 2012-10-26, there is XSS in the search bar of the web site.
159 CVE-2018-12900 787 DoS Overflow 2018-06-26 2021-03-05
6.8
None Remote Medium Not required Partial Partial Partial
Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file.
160 CVE-2018-12895 22 Exec Code Dir. Trav. 2018-06-26 2021-11-05
6.5
None Remote Low ??? Partial Partial Partial
WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin/post.php thumb parameter, which is passed to the PHP unlink function and can delete the wp-config.php file. This is related to missing filename validation in the wp-includes/post.php wp_delete_attachment function. The attacker must have capabilities for files and posts that are normally available only to the Author, Editor, and Administrator roles. The attack methodology is to delete wp-config.php and then launch a new installation process to increase the attacker's privileges.
161 CVE-2018-12889 787 Overflow Mem. Corr. 2018-06-26 2020-08-24
7.5
None Remote Low Not required Partial Partial Partial
An issue was discovered in CCN-lite 2.0.1. There is a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnl_populate_cache for an array lacking '\0' termination when reading a binary CCNx or NDN file. This can result in Heap Corruption. This was addressed by fixing the memory management in mkAddToRelayCacheRequest in ccn-lite-ctrl.c.
162 CVE-2018-12884 269 2018-06-26 2019-10-03
4.0
None Remote Low ??? None Partial None
In Octopus Deploy 3.0 onwards (before 2018.6.7), an authenticated user with incorrect permissions may be able to create Accounts under the Infrastructure menu.
163 CVE-2018-12882 416 2018-06-26 2019-03-12
7.5
None Remote Low Not required Partial Partial Partial
exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif_read_from_file) because it closes a stream that it is not responsible for closing. The vulnerable code is reachable through the PHP exif_read_data function.
164 CVE-2018-12735 200 +Info 2018-06-25 2018-08-30
5.0
None Remote Low Not required Partial None None
SAJ Solar Inverter allows remote attackers to obtain potentially sensitive information via a direct request for the inverter_info.htm or english_main.htm URI.
165 CVE-2018-12716 200 +Info 2018-06-25 2018-08-24
3.3
None Local Network Low Not required Partial None None
The API service on Google Home and Chromecast devices before mid-July 2018 does not prevent DNS rebinding attacks from reading the scan_results JSON data, which allows remote attackers to determine the physical location of most web browsers by leveraging the presence of one of these devices on its local network, extracting the scan_results bssid fields, and sending these fields in a geolocation/v1/geolocate Google Maps Geolocation API request.
166 CVE-2018-12714 787 DoS 2018-06-24 2018-08-21
10.0
None Remote Low Not required Complete Complete Complete
An issue was discovered in the Linux kernel through 4.17.2. The filter parsing in kernel/trace/trace_events_filter.c could be called with no filter, which is an N=0 case when it expected at least one line to have been read, thus making the N-1 index invalid. This allows attackers to cause a denial of service (slab out-of-bounds write) or possibly have unspecified other impact via crafted perf_event_open and mmap system calls.
167 CVE-2018-12713 20 2018-06-24 2018-08-21
6.4
None Remote Low Not required Partial Partial None
GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimp_write_and_read_file function in app/tests/test-xcf.c. This might be leveraged by attackers to overwrite files or read file content that was intended to be private.
168 CVE-2018-12712 20 File Inclusion 2018-06-26 2018-08-20
6.5
None Remote Low ??? Partial Partial Partial
An issue was discovered in Joomla! 2.5.0 through 3.8.8 before 3.8.9. The autoload code checks classnames to be valid, using the "class_exists" function in PHP. In PHP 5.3, this function validates invalid names as valid, which can result in a Local File Inclusion.
169 CVE-2018-12711 79 XSS 2018-06-26 2018-08-20
4.3
None Remote Medium Not required None Partial None
An XSS issue was discovered in the language switcher module in Joomla! 1.6.0 through 3.8.8 before 3.8.9. In some cases, the link of the current language might contain unescaped HTML special characters. This may lead to reflective XSS via injection of arbitrary parameters and/or values on the current page URL.
170 CVE-2018-12706 119 Overflow 2018-06-24 2018-08-30
7.5
None Remote Low Not required Partial Partial Partial
DIGISOL DG-BR4000NG devices have a Buffer Overflow via a long Authorization HTTP header.
171 CVE-2018-12705 79 XSS 2018-06-24 2018-08-30
4.3
None Remote Medium Not required None Partial None
DIGISOL DG-BR4000NG devices have XSS via the SSID (it is validated only on the client side).
172 CVE-2018-12703 20 2018-06-25 2018-08-30
5.0
None Remote Low Not required None Partial None
The approveAndCallcode function of a smart contract implementation for Block 18 (18T), an tradable Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer the contract's balances into their account) because the callcode (i.e., _spender.call(_extraData)) is not verified, aka the "evilReflex" issue. NOTE: a PeckShield disclosure states "some researchers have independently discussed the mechanism of such vulnerability."
173 CVE-2018-12702 20 2018-06-25 2018-08-30
5.0
None Remote Low Not required None Partial None
The approveAndCallcode function of a smart contract implementation for Globalvillage ecosystem (GVE), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer the contract's balances into their account) because the callcode (i.e., _spender.call(_extraData)) is not verified, aka the "evilReflex" issue. NOTE: a PeckShield disclosure states "some researchers have independently discussed the mechanism of such vulnerability."
174 CVE-2018-12700 835 2018-06-23 2021-12-23
5.0
None Remote Low Not required None None Partial
A Stack Exhaustion issue was discovered in debug_write_type in debug.c in GNU Binutils 2.30 because of DEBUG_KIND_INDIRECT infinite recursion.
175 CVE-2018-12699 787 DoS Overflow 2018-06-23 2019-08-03
7.5
None Remote Low Not required Partial Partial Partial
finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write of 8 bytes. This can occur during execution of objdump.
176 CVE-2018-12698 2018-06-23 2019-10-03
5.0
None Remote Low Not required None None Partial
demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump.
177 CVE-2018-12697 476 2018-06-23 2019-08-03
5.0
None Remote Low Not required None None Partial
A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. This can occur during execution of objdump.
178 CVE-2018-12696 79 XSS 2018-06-23 2018-08-14
4.3
None Remote Medium Not required None Partial None
mao10cms 6 allows XSS via the article page.
179 CVE-2018-12695 79 XSS 2018-06-23 2018-08-14
4.3
None Remote Medium Not required None Partial None
mao10cms 6 allows XSS via the m=bbs&a=index page.
180 CVE-2018-12694 20 DoS 2018-06-23 2018-08-24
7.8
None Remote Low Not required None None Complete
TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote attackers to cause a denial of service (reboot) via data/reboot.json.
181 CVE-2018-12693 787 DoS Overflow 2018-06-23 2020-08-24
6.8
None Remote Low ??? None None Complete
Stack-based buffer overflow in TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to cause a denial of service (outage) via a long type parameter to /data/syslog.filter.json.
182 CVE-2018-12692 78 Exec Code 2018-06-23 2019-10-03
6.5
None Remote Low ??? Partial Partial Partial
TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the wps_setup_pin parameter to /data/wps.setup.json.
183 CVE-2018-12689 2018-06-22 2020-11-16
7.5
None Remote Low Not required Partial Partial Partial
phpLDAPadmin 1.2.2 allows LDAP injection via a crafted server_id parameter in a cmd.php?cmd=login_form request, or a crafted username and password in the login panel.
184 CVE-2018-12688 20 2018-06-22 2018-08-10
7.5
None Remote Low Not required Partial Partial Partial
tinyexr 0.9.5 has a segmentation fault in the wav2Decode function.
185 CVE-2018-12687 617 2018-06-22 2019-10-03
5.0
None Remote Low Not required None None Partial
tinyexr 0.9.5 has an assertion failure in DecodePixelData in tinyexr.h.
186 CVE-2018-12684 200 DoS +Info 2018-06-22 2018-08-10
5.8
None Remote Medium Not required Partial None Partial
Out-of-bounds Read in the send_ssi_file function in civetweb.c in CivetWeb through 1.10 allows attackers to cause a Denial of Service or Information Disclosure via a crafted SSI file.
187 CVE-2018-12678 918 Bypass 2018-06-22 2018-08-13
7.5
None Remote Low Not required Partial Partial Partial
Portainer before 1.18.0 supports unauthenticated requests to the websocket endpoint with an unvalidated id query parameter for the /websocket/exec endpoint, which allows remote attackers to bypass intended access restrictions or conduct SSRF attacks.
188 CVE-2018-12659 352 Bypass CSRF 2018-06-22 2018-08-08
6.8
None Remote Medium Not required Partial Partial Partial
SLiMS 8 Akasia 8.3.1 allows remote attackers to bypass the CSRF protection mechanism and obtain admin access by omitting the csrf_token parameter.
189 CVE-2018-12658 79 XSS 2018-06-22 2020-03-16
4.3
None Remote Medium Not required None Partial None
Reflected Cross-Site Scripting (XSS) exists in the Stock Take module in SLiMS 8 Akasia 8.3.1 via an admin/modules/stock_take/index.php?keywords= URI.
190 CVE-2018-12657 79 XSS 2018-06-22 2018-08-07
4.3
None Remote Medium Not required None Partial None
Reflected Cross-Site Scripting (XSS) exists in the Master File module in SLiMS 8 Akasia 8.3.1 via an admin/modules/master_file/rda_cmc.php?keywords= URI.
191 CVE-2018-12656 79 XSS 2018-06-22 2018-08-07
4.3
None Remote Medium Not required None Partial None
Reflected Cross-Site Scripting (XSS) exists in the Membership module in SLiMS 8 Akasia 8.3.1 via an admin/modules/membership/index.php?keywords= URI.
192 CVE-2018-12655 79 XSS 2018-06-22 2018-08-07
4.3
None Remote Medium Not required None Partial None
Reflected Cross-Site Scripting (XSS) exists in the Circulation module in SLiMS 8 Akasia 8.3.1 via an admin/modules/circulation/loan_rules.php?keywords= URI, a related issue to CVE-2017-7242.
193 CVE-2018-12654 79 XSS 2018-06-22 2018-08-08
4.3
None Remote Medium Not required None Partial None
Reflected Cross-Site Scripting (XSS) exists in the Bibliography module in SLiMS 8 Akasia 8.3.1 via an admin/modules/bibliography/index.php?keywords= URI.
194 CVE-2018-12649 307 Bypass 2018-06-22 2019-10-03
5.0
None Remote Low Not required Partial None None
An issue was discovered in app/Controller/UsersController.php in MISP 2.4.92. An adversary can bypass the brute-force protection by using a PUT HTTP method instead of a POST HTTP method in the login part, because this protection was only covering POST requests.
195 CVE-2018-12648 476 2018-06-22 2019-06-27
4.3
None Remote Medium Not required None None Partial
The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support.hpp in Exempi 2.4.5 has a NULL pointer dereference.
196 CVE-2018-12642 732 2018-06-22 2019-10-03
5.0
None Remote Low Not required Partial None None
Froxlor through 0.9.39.5 has Incorrect Access Control for tickets not owned by the current user.
197 CVE-2018-12641 400 2018-06-22 2019-10-03
4.3
None Remote Medium Not required None None Partial
An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_arm_hp_template, demangle_class_name, demangle_fund_type, do_type, do_arg, demangle_args, and demangle_nested_args. This can occur during execution of nm-new.
198 CVE-2018-12640 119 Overflow 2018-06-23 2021-06-22
7.5
None Remote Low Not required Partial Partial Partial
The webService binary on Insteon HD IP Camera White 2864-222 devices has a Buffer Overflow via a crafted pid, pwd, or usr key in a GET request on port 34100.
199 CVE-2018-12636 89 Sql 2018-06-22 2020-12-16
6.5
None Remote Low ??? Partial Partial Partial
The iThemes Security (better-wp-security) plugin before 7.0.3 for WordPress allows SQL Injection (by attackers with Admin privileges) via the logs page.
200 CVE-2018-12635 20 2018-06-22 2018-08-10
5.0
None Remote Low Not required None Partial None
CirCarLife Scada v4.2.4 allows unauthorized upgrades via requests to the html/upgrade.html and services/system/firmware.upgrade URIs.
Total number of vulnerabilities : 1788   Page : 1 2 3 4 (This Page)5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.