CVEs published in July 2018
2,161 vulnerabilities, 252 critical, 3 exploited.
- ibm filenet content manager, content foundation, filenet p8 platform +2 moreIBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm api connectIBM API Connect information disclosure5.9 Medium
- ibm content foundation, filenet content manager, filenet p8 platform +2 moreIBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration...7.1 High
- ibm rational doors next generationIBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to...5.4 Medium
- adbglobal dv2210 firmware, prg av4202n firmware, vv2220 firmware +1 more +3 moreAll ADB broadband gateways / routers based on the Epicentro platform are affected by a privilege...7.5 High
- adbglobal dv2210 firmware, prg av4202n firmware, vv2220 firmware +1 more +3 moreAll ADB broadband gateways / routers based on the Epicentro platform are affected by an...7.5 High
- adbglobal dv2210 firmware, prg av4202n firmware, vv2220 firmware +1 more +3 moreAll ADB broadband gateways / routers based on the Epicentro platform are affected by a local root...7.8 High
- opmantek open-auditCross-site scripting (XSS) vulnerability in Attributes functionality in Open-AudIT Community...5.4 Medium
- ibm websphere mq, websphere mq managed file transfer +1 moreIBM WebSphere MQ 7.5, 8.0, and 9.0 through 9.0.4 could allow a local user to obtain highly...4.4 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreMultiple IBM Rational products could disclose sensitive information by an attacker that...3.1 Low
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Jazz Foundation products could allow an authenticated user to obtain sensitive information...4.3 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreAn undisclosed vulnerability in Jazz common products exists with potential for information...3.7 Low
- ibm rational quality manager, rational collaborative lifecycle management +1 moreIBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote...5.4 Medium
- ibm rational quality manager, rational collaborative lifecycle management +1 moreIBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote...5.4 Medium
- ibm rational quality manager, rational collaborative lifecycle management +1 moreIBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote...5.4 Medium
- ibm rational quality manager, rational collaborative lifecycle management +1 moreIBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 could reveal sensitive information in HTTP...4.3 Medium
- ibm rational quality manager, rational collaborative lifecycle management +1 moreIBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to cross-site scripting....5.4 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Jazz based applications are vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- mongodb, [unknown] rhscon-core, redhat storage console +2 moreThe skyring-setup command creates random password for mongodb skyring database but it writes...4.8 Medium
- sophos ssl vpn clientImproper restriction of communication channel to intended endpoints vulnerability in HTTP daemon...7.3 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +24 more +26 moreThe inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users...7.8 High
amd64-microcodeUbuntuamd64-microcode regressionNo score- gleeztech gleez cmsGleez CMS 1.2.0 has CSRF, as demonstrated by a /page/add request.8.8 High
- angular redactor project redactorAngular Redactor XSS Vulnerability6.1 Medium
- bitcoin core, bitcoin-qt, bitcoind +2 moreIn Bitcoin Core before v0.13.0, a non-final alert is able to block the special "final alert" ...7.5 High
- bitcoin core, bitcoin-qt, bitcoind +2 moreBitcoin Core before v0.13.0 allows denial of service (memory exhaustion) triggered by the remote...7.5 High
- open-xchange appsuiteOpen-Xchange OX App Suite before 7.6.3-rev37, 7.8.x before 7.8.2-rev40, 7.8.3 before 7.8.3-rev48,...6.5 Medium
- open-xchange appsuiteCross-site scripting (XSS) vulnerability in mail compose in Open-Xchange OX App Suite before 7.6...6.1 Medium
- airties 5444 firmware, 5444tt firmware +1 moreAirties 5444 1.0.0.18 and 5444TT 1.0.0.18 devices allow XSS.6.1 Medium
- sencha ext jsThe getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS...6.1 Medium
- cyberark endpoint privilege managerIn CyberArk Endpoint Privilege Manager (formerly Viewfinity), Privilege Escalation is possible if...9.8 Critical
- damicmsDamiCMS v6.0.0 aand 6.1.0 allows CSRF via admin.php?s=/Admin/doadd to add an administrator account.8.8 High
- beescmsIn BEESCMS 4.0, CSRF allows administrators to be added arbitrarily, a related issue to CVE-2018...8.8 High
- microsoft forefront unified access gatewayuniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows...9.8 Critical
- ntop ntopngAn issue was discovered in ntopng 3.4 before 3.4.180617. The PRNG involved in the generation of...8.1 High
- coreftp core ftpCore FTP LE version 2.2 Build 1921 is prone to a buffer overflow vulnerability that may result in...9.8 Critical
- d-link dir-885l\/r firmware, dir-895l\/r firmware, dlink dir-890l firmware +2 moreAn issue was discovered on D-Link DIR-890L with firmware 1.21B02beta01 and earlier, DIR-885L/R...6.5 Medium
- diqee diqee360 firmwareAn issue was discovered on Diqee Diqee360 devices. A firmware update process, integrated into the...7.8 High
- diqee diqee360 firmwareAn issue was discovered on Dongguan Diqee Diqee360 devices. The affected vacuum cleaner suffers...7.5 High
- wisc htcondorThe condor_schedd component in HTCondor before 8.6.8 and 8.7.x before 8.7.5 allows remote...6.5 Medium
- huawei technologies co., ltd. emily-al00a, huawei emily-al00a firmware +1 moreHuawei smart phones Emily-AL00A with software 8.1.0.106(SP2C00) and 8.1.0.107(SP5C00) have a...6.8 Medium
- pfg project pfgThe transfer, transferFrom, and mint functions of a smart contract implementation for PFGc, an...7.5 High
- boodskap growchainThe _sell function of a smart contract implementation for GROWCHAIN (GROW), an Ethereum token,...7.5 High
- godoc go doc dot orgIn Go Doc Dot Org (gddo) through 2018-06-27, an attacker could use specially crafted <go-import> tags in packages being fetched by gddo to cause a directory traversal and remote code execution.9.8 Critical
- onosproject onosTime-of-check to time-of-use (TOCTOU) race condition in org.onosproject.acl (aka the access...6.8 Medium
- sylabs singularitySingularity Incorrect Access Control6.5 Medium
- siemens fin stackIn J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via...6.1 Medium
- ffmpegIn FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the...8.1 High
- ffmpegIn libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context...6.5 Medium
- Show moreLoading…