CVEs published in July 2018
2,161 vulnerabilities, 252 critical, 3 exploited.
- ethereum go ethereumGo Ethereum LES protocol implementation vulnerable to Denial of Service7.5 High
- beditaAn issue was discovered in BEdita before 3.7.0. A cross-site scripting (XSS) attack occurs via a...5.4 Medium
- mercurialMercurial Improper Input Validation vulnerability7.5 High
- mercurialMercurial mishandles integer addition and subtraction9.8 Critical
- mercurialMercurial Improper Input Validation vulnerability7.5 High
- chucunlingaigo project chucunlingaigoThe transfer and transferFrom functions of a smart contract implementation for ChuCunLingAIGO ...7.5 High
- bittelux project bitteluxThe transfer and transferFrom functions of a smart contract implementation for Bittelux (BTX), an...7.5 High
- mozilla thunderbird, canonical ubuntu linux, debian linux +4 more +6 morePlaintext of decrypted emails can leak through by user submitting an embedded form by pressing...4.3 Medium
- mozilla thunderbird, canonical ubuntu linux, debian linux +4 more +6 moredDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when...6.5 Medium
- mozilla thunderbird, canonical ubuntu linux, debian linux +4 more +6 moreDecrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when...6.5 Medium
- lef project lefThe mintToken, buy, and sell functions of a smart contract implementation for LEF, an Ethereum...7.5 High
- javaswaptest project javaswaptestThe mintToken function of a smart contract implementation for JavaSwapTest (JST), an Ethereum...7.5 High
- ultimatemember ultimate memberThe Ultimate Member (aka ultimatemember) plugin before 2.0.18 for WordPress has XSS via the wp...6.1 Medium
- tp-link archer c1200 firmwareTP-Link Archer C1200 1.13 Build 2018/01/24 rel.52299 EU devices have XSS via the PATH_INFO to the...6.1 Medium
- goldenfrog vyprvpnGolden Frog VyprVPN before 2018-06-21 has a vulnerability associated with the installation...7.8 High
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore...6.5 Medium
- pandora project pandoraThe transfer and transferFrom functions of a smart contract implementation for Pandora (PDX), an...7.5 High
- libsndfile project libsndfile, debian linux +1 moreA stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote...8.8 High
- spadeico project spadeicoSpadeico is a smart contract running on Ethereum. The mint function has an integer overflow that...7.5 High
- spadepresale project spadepresaleSpadePreSale is a smart contract running on Ethereum. The mint function has an integer overflow...7.5 High
- bitotalBitotal (TFUND) is a smart contract running on Ethereum. The mintTokens function has an integer...7.5 High
- sp8deSP8DE Token (SPX) is a smart contract running on Ethereum. The mint function has an integer...7.5 High
- etherty tokenEtherty Token (ETY) is a smart contract running on Ethereum. The mint function has an integer...7.5 High
- sp8de presale tokenSP8DE PreSale Token (DSPX) is a smart contract running on Ethereum. The mint function has an...7.5 High
- moxy moxyonepresaleMoxyOnePresale is a smart contract running on Ethereum. The mint function has an integer overflow...7.5 High
- atlantATLANT (ATL) is a smart contract running on Ethereum. The mint function has an integer overflow...7.5 High
- genesis vision gvtokenGVToken Genesis Vision (GVT) is a smart contract running on Ethereum. The mint function has an...7.5 High
- onefilecmsonefilecms.php in OneFileCMS through 2017-10-08 might allow attackers to read arbitrary files via...9.8 Critical
- onefilecmsonefilecms.php in OneFileCMS through 2017-10-08 might allow attackers to delete arbitrary files...6.5 Medium
- realnetworks realone playerRealOne Player 2.0 Build 6.0.11.872 allows remote attackers to cause a denial of service (array...5.5 Medium
- paloaltonetworks pan-osThe PAN-OS web interface administration page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.17 and...5.4 Medium
- paloaltonetworks pan-osThe PAN-OS session browser in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier, PAN-OS 8.0.9...5.4 Medium
- paloaltonetworks pan-osThe PAN-OS management web interface page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier,...5.5 Medium
- paloaltonetworks pan-osThe PAN-OS management web interface page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier,...5.5 Medium
- paloaltonetworks pan-osThe URL filtering "continue page" hosted by PAN-OS 8.0.10 and earlier may allow an attacker to...6.1 Medium
- query-mysql project query-mysqlSQL Injection in query-mysql8.8 High
- merge-object project merge-objectPrototype Pollution in async merge-object9.8 Critical
- merge-options project merge-optionsPrototype Pollution in merge-options9.8 Critical
- umbraengineering merge-recursivePrototype Pollution in merge-recursive9.8 Critical
- deep extend project extendPrototype Pollution in deep-extend9.8 Critical
- deap project deapImproper Input Validation in Deap9.8 Critical
- glance project glanceCross-Site Scripting in glance6.1 Medium
- public.js project public.jsCross-Site Scripting in public6.1 Medium
- dnnsoftware dotnetnukeHigh severity vulnerability that affects DotNetNuke.Core7.5 High
- gitlabGitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an...8.1 High
- gitlabGitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an...7.5 High
- ubnt ucrmUbiquiti UCRM versions 2.3.0 to 2.7.7 allow an authenticated user to read arbitrary files in the...4.7 Medium
- ui ucrmUbiquiti UCRM versions 2.5.0 to 2.7.7 are vulnerable to Stored Cross-site Scripting. Due to the...5.4 Medium
- apache pdfboxLoop with Unreachable Exit Condition in Apache PDFBox6.5 Medium
- zzcms/user/del.php in zzcms 8.3 allows SQL injection via the tablename parameter after leveraging use...9.8 Critical
- Show moreLoading…