Эксплуатируемые и новые серьёзные CVE: июнь 2018 г.

webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebK

• Без аутентификации
• Отказ в обслуживании

webkitgtk · webkitgtk\+1 июн. 2018 г.

CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HT

• RCE без входа

cirt.net · nikto1 июн. 2018 г.

There is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON->Auto-Dialer->Agents->Name" field.

• RCE без входа
• XSS

nch · axon pbx1 июн. 2018 г.

servlet/UserServlet in SearchBlox 8.6.6 has CSRF via the u_name, u_passwd1, u_passwd2, role, and X-XSRF-TOKEN POST parameters because of CSR

• Без аутентификации
• CSRF

searchblox · searchblox1 июн. 2018 г.

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 1 of 46).

• RCE без входа
• Инъекция команд

quest · disk backup1 июн. 2018 г.

Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and

• Без аутентификации
• XXE

ge · mds pulsenet4 июн. 2018 г.

An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0

• Без аутентификации

tp-link · tl-wr840n firmware4 июн. 2018 г.

XML external entity (XXE) vulnerability in api/rest/status in SearchBlox 8.6.7 allows remote unauthenticated users to read arbitrary files o

• Без аутентификации
• SSRF
• XXE

searchblox · searchblox5 июн. 2018 г.

A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column

• RCE без входа

node-postgres · pg6 июн. 2018 г.

ua-parser is a port of Browserscope's user agent parser.

• Без аутентификации
• Отказ в обслуживании

ua-parser project · ua-parser6 июн. 2018 г.

A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause

• Без аутентификации
• Обход аутентификации
• Обход пути

cisco · adaptive security appliance software7 июн. 2018 г.

Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgrade_srv.js directory t

• Без аутентификации
• Обход пути

eaton · intelligent power manager7 июн. 2018 г.

Unrestricted file upload (RCE) in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine.

• RCE
• Обход пути
• Загрузка файлов

express-cart project · express-cart7 июн. 2018 г.

Arbitrary File Deletion exists in PHP Scripts Mall Schools Alert Management Script via the img parameter in delete_img.php by using director

• Без аутентификации
• Обход пути

schools alert management script project · schools alert management script8 июн. 2018 г.

Arbitrary File Read exists in PHP Scripts Mall Schools Alert Management Script via the f parameter in img.php, aka absolute path traversal.

• Без аутентификации
• Обход пути

schools alert management script project · schools alert management script8 июн. 2018 г.

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725.

• Без аутентификации
• Ошибки памяти

xiongmaitech · uc-httpd8 июн. 2018 г.

Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demon

• Без аутентификации
• Утечка информации

splunk · splunk8 июн. 2018 г.

An issue was discovered in certain Apple products.

• RCE без входа
• Состояние гонки

apple · safari8 июн. 2018 г.

An issue was discovered in certain Apple products.

• RCE без входа
• Ошибки памяти

apple · safari8 июн. 2018 г.

An issue was discovered in certain Apple products.

• RCE без входа
• Ошибки памяти

apple · safari8 июн. 2018 г.

An issue was discovered in certain Apple products.

• Локальное повышение привилегий

apple · iphone os8 июн. 2018 г.

An issue was discovered in certain Apple products.

• RCE
• Локальное повышение привилегий
• Ошибки памяти

apple · apple tv8 июн. 2018 г.

A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amounts of incoming data.

• Без аутентификации
• Ошибки памяти
• Отказ в обслуживании

mozilla · firefox11 июн. 2018 г.

A use-after-free vulnerability in SVG Animation has been discovered.

• Без аутентификации
• Ошибки памяти

debian · debian linux11 июн. 2018 г.

Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption.

• Без аутентификации
• Ошибки памяти

debian · debian linux11 июн. 2018 г.

JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks.

• Без аутентификации
• Ошибки памяти

redhat · enterprise linux desktop11 июн. 2018 г.

A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of

• Без аутентификации
• Ошибки памяти

debian · debian linux11 июн. 2018 г.

An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:" as the protocol, leading to user confusion

• Без аутентификации

mozilla · firefox11 июн. 2018 г.

An out-of-bounds read during the processing of glyph widths during text layout.

• Без аутентификации
• Ошибки памяти

debian · debian linux11 июн. 2018 г.

An out-of-bounds read while processing SVG content in "ConvolvePixel".

• Без аутентификации
• Ошибки памяти

debian · debian linux11 июн. 2018 г.

If a long user name is used in a username/password combination in a site URL (such as " http://UserName:Password@example.com"), the resultin

• Без аутентификации
• Отказ в обслуживании

mozilla · firefox11 июн. 2018 г.

A heap buffer overflow vulnerability may occur in WebAssembly during Memory/Table resizing, resulting in a potentially exploitable crash.

• Без аутентификации
• Ошибки памяти
• Отказ в обслуживании

mozilla · firefox11 июн. 2018 г.

A heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is called followed by garbage collection on memory that

• Без аутентификации
• Ошибки памяти
• Отказ в обслуживании

mozilla · firefox11 июн. 2018 г.

An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest.

• Без аутентификации
• Ошибки памяти

redhat · enterprise linux desktop11 июн. 2018 г.

The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafte

• RCE без входа

debian · debian linux11 июн. 2018 г.

An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possib

• Без аутентификации
• Ошибки памяти

debian · debian linux11 июн. 2018 г.

VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component.

• RCE без входа
• Инъекция команд

vmware · nsx sd-wan by velocloud11 июн. 2018 г.

Client DoS due to large DH parameter

• Без аутентификации
• Отказ в обслуживании

openssl · openssl12 июн. 2018 г.

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor

• RCE без входа
• Ошибки памяти

microsoft · internet explorer14 июн. 2018 г.

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptio

• RCE без входа
• Ошибки памяти

microsoft · edge14 июн. 2018 г.

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptio

• RCE без входа
• Ошибки памяти

microsoft · edge14 июн. 2018 г.

A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerabi

• RCE

microsoft · windows 1014 июн. 2018 г.

A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses,

• RCE без входа

microsoft · windows 1014 июн. 2018 г.

A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2.

• Без аутентификации
• Отказ в обслуживании

microsoft · windows 1014 июн. 2018 г.

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

• RCE без входа
• Ошибки памяти

microsoft · edge14 июн. 2018 г.

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

• RCE без входа

microsoft · edge14 июн. 2018 г.

A remote code execution vulnerability exists when HTTP Protocol Stack (Http.sys) improperly handles objects in memory, aka "HTTP Protocol St

• RCE без входа

microsoft · windows 1014 июн. 2018 г.

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruptio

• RCE без входа
• Ошибки памяти

microsoft · edge14 июн. 2018 г.

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows

• Утечка информации

microsoft · windows 1014 июн. 2018 г.

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engin

• RCE без входа
• Ошибки памяти

microsoft · chakracore14 июн. 2018 г.

A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when i

• RCE

microsoft · publisher14 июн. 2018 г.

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel In

• Утечка информации

microsoft · excel14 июн. 2018 г.

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "

• RCE

microsoft · office14 июн. 2018 г.

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor

• RCE без входа
• Ошибки памяти

microsoft · internet explorer14 июн. 2018 г.

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip

• RCE без входа
• Ошибки памяти

microsoft · internet explorer14 июн. 2018 г.

The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, caused by improper vali

• Без аутентификации
• XSS

balbooa · gridbox14 июн. 2018 г.

Type confusion in the xgroupCommand function in t_stream.c in redis-server in Redis before 5.0 allows remote attackers to cause denial-of-se

• Без аутентификации
• Отказ в обслуживании

redislabs · redis16 июн. 2018 г.

Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0

• Без аутентификации
• Ошибки памяти

redislabs · redis17 июн. 2018 г.

JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbit

• RCE без входа

redhat · richfaces18 июн. 2018 г.

An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary

• RCE без входа

broadcom · privileged access manager18 июн. 2018 г.

DoS for HTTP/2 connections by crafted requests

• Без аутентификации
• Отказ в обслуживании

apache · http server18 июн. 2018 г.

An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary code o

• RCE без входа
• Обход аутентификации

broadcom · privileged access manager18 июн. 2018 г.

OpenWrt mishandles access control in /etc/config/rpcd and the /usr/share/rpcd/acl.d files, which allows remote authenticated users to call a

openwrt · openwrt19 июн. 2018 г.

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKit

• Без аутентификации
• Ошибки памяти

canonical · ubuntu linux19 июн. 2018 г.

Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher pri

• Без аутентификации
• Ошибки памяти

ntp · ntp20 июн. 2018 г.

GreenCMS 2.3.0603 allows remote attackers to obtain sensitive information via a direct request for Data/Log/year_month_day.log.

• Без аутентификации
• Утечка информации

njtech · greencms20 июн. 2018 г.

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft a packet to the manag

• RCE без входа

cisco · nx-os20 июн. 2018 г.

qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer overfl

• Без аутентификации
• Ошибки памяти
• Отказ в обслуживании

qemu · qemu21 июн. 2018 г.

An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the serve

• RCE
• Обход аутентификации

phpmyadmin · phpmyadmin21 июн. 2018 г.

CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system

• Без аутентификации
• Утечка информации

circontrol · circarlife scada21 июн. 2018 г.

The iThemes Security (better-wp-security) plugin before 7.0.3 for WordPress allows SQL Injection (by attackers with Admin privileges) via th

• SQL-инъекция

ithemes · security22 июн. 2018 г.

TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to execute arbitrary commands via shell me

• RCE
• Инъекция команд

tp-link · tl-wa850re firmware23 июн. 2018 г.

Stack-based buffer overflow in TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to cause a

• Ошибки памяти
• Отказ в обслуживании

tp-link · tl-wa850re firmware23 июн. 2018 г.

GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that already exists, as demon

• Без аутентификации

gimp · gimp24 июн. 2018 г.

IPConfigure Orchid Core VMS 2.0.5 allows Directory Traversal.

• Без аутентификации
• Обход пути

ipconfigure · orchid core vms25 июн. 2018 г.

Untrusted search path vulnerability in Self-extracting archive files created by IExpress bundled with Microsoft Windows allows an attacker t

• Локальное повышение привилегий

microsoft · windows26 июн. 2018 г.

In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled

• Без аутентификации

eclipse · jetty26 июн. 2018 г.

BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflow vulnerability in Bu

• Без аутентификации
• Ошибки памяти

busybox · busybox26 июн. 2018 г.

GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulnerability in change pa

• Без аутентификации
• XSS

gonicus · gosa26 июн. 2018 г.

klaussilveira GitList version <= 0.6 contains a Passing incorrectly sanitized input to system function vulnerability in `searchTree` functio

• Без аутентификации

gitlist · gitlist26 июн. 2018 г.

In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when pr

• Без аутентификации

eclipse · jetty26 июн. 2018 г.

A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.1 and earlier in GitHubTokenCredentialsCreator.java t

• Без аутентификации
• Утечка информации

jenkins · github26 июн. 2018 г.

An issue was discovered in multiple models of Axis IP Cameras.

• RCE без входа
• Инъекция команд

axis · a1001 firmware26 июн. 2018 г.

An issue was discovered in multiple models of Axis IP Cameras.

• Без аутентификации

axis · a1001 firmware26 июн. 2018 г.

An issue was discovered in multiple models of Axis IP Cameras.

• Без аутентификации

axis · a1001 firmware26 июн. 2018 г.

There is an information leak vulnerability in Sprockets.

• Без аутентификации
• Обход пути

redhat · cloudforms26 июн. 2018 г.

Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, E

• RCE без входа
• Ошибки памяти

deltaww · commgr26 июн. 2018 г.

WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin/post.php thumb param

• RCE
• Обход пути

wordpress · wordpress26 июн. 2018 г.

Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.

• Без аутентификации
• Ошибки памяти

libtiff · libtiff26 июн. 2018 г.

joyplus-cms 1.6.0 has XSS in admin_player.php, related to manager/index.php "system manage" and "add" actions.

• Без аутентификации
• XSS

joyplus-cms project · joyplus-cms27 июн. 2018 г.

Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via a

• Без аутентификации
• Утечка информации

brynamics · brynamics27 июн. 2018 г.

Webgrind 1.5 relies on user input to display a file, which lets anyone view files from the local filesystem (that the webserver user has acc

• Без аутентификации
• Обход пути

webgrind project · webgrind27 июн. 2018 г.

The PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto version 3.0.0 could allow a remote attacker to obtain se

• Без аутентификации
• Утечка информации

apache · pluto27 июн. 2018 г.

The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/apis/aggrecate_js.cg

• RCE без входа
• Инъекция команд

asustor · adm28 июн. 2018 г.

Polaris Office 2017 8.1 allows attackers to execute arbitrary code via a Trojan horse puiframeworkproresenu.dll file in the current working

• RCE

polarisoffice · polaris office 201728 июн. 2018 г.

A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manage

• Без аутентификации
• XSS

zohocorp · firewall analyzer29 июн. 2018 г.

Unauthenticated SQL injection in Micro Focus Secure Messaging Gateway

• RCE без входа
• SQL-инъекция

microfocus · secure messaging gateway29 июн. 2018 г.

Remote Code Execution in Micro Focus Secure Messaging Gateway

• RCE
• Инъекция команд

microfocus · secure messaging gateway29 июн. 2018 г.

perl-archive-zip is vulnerable to a directory traversal in Archive::Zip.

• Без аутентификации
• Обход пути

canonical · ubuntu linux29 июн. 2018 г.