CVEs published in July 2018
2,161 vulnerabilities, 252 critical, 3 exploited.
- beyondcash beyondcashtokenThe mintToken function of a smart contract implementation for BeyondCashToken, an Ethereum token,...7.5 High
- buyertoken project buyertokenThe mintToken function of a smart contract implementation for BuyerToken, an Ethereum token, has...7.5 High
- icocontract project icocontractThe mintToken function of a smart contract implementation for IcoContract, an Ethereum token, has...7.5 High
- cavecoin project cavecoinThe mintToken function of a smart contract implementation for Cavecoin, an Ethereum token, has an...7.5 High
- epnex epiphanycoinThe mintToken function of a smart contract implementation for EpiphanyCoin, an Ethereum token,...7.5 High
- crystalsThe mintToken function of a smart contract implementation for Crystals, an Ethereum token, has an...7.5 High
- paulycoin project paulycoinThe mintToken function of a smart contract implementation for PaulyCoin, an Ethereum token, has...7.5 High
- t-swap-token project t-swap-tokenThe mintToken function of a smart contract implementation for t_swap, an Ethereum token, has an...7.5 High
- t-swap-token project t-swap-tokenThe mintToken function of a smart contract implementation for T-Swap-Token (T-S-T), an Ethereum...7.5 High
- moontoken project moontokenThe mintToken function of a smart contract implementation for MoonToken, an Ethereum token, has...7.5 High
- libpng, canonical ubuntu linux, oracle jdk +4 more +6 moreIn libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function ...6.5 Medium
- dolibarr erp\/crmDolibarr SQL injection vulnerability in product/card.php9.8 Critical
- dolibarr erp\/crmDolibarr SQL injection vulnerability in product/card.php9.8 Critical
- dolibarr erp\/crmDolibarr SQL injection vulnerability in product/card.php9.8 Critical
- dolibarr erp\/crmDolibarr SQL injection vulnerability in product/card.php9.8 Critical
- seacmsAn issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add a user account...8.8 High
- seacmsAn issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add an admin...8.8 High
- tencent wechat payWeChat Pay Java SDK allows XXE7.5 High
- boostnoteBoostnote v0.11.7 allows XSS during highlighting of Markdown text, as demonstrated by an onerror...6.1 Medium
- audiofile, canonical ubuntu linux +1 moreThe audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup...6.5 Medium
- omekaadmin/themes/default/items/tag-form.php in Omeka before 2.6.1 allows XSS by adding or editing a tag.6.1 Medium
- tecnick tcexamTCExam before 14.1.2 has XSS via an ff_ or xl_ field.6.1 Medium
- fast-cpp-csv-parser project fast-cpp-csv-parserFast C++ CSV Parser (aka fast-cpp-csv-parser) before 2018-07-06 has a heap-based buffer over-read...9.8 Critical
- gperftools project gperftools** DISPUTED ** Google gperftools 2.7 has a memory leak in malloc_extension.cc, related to...7.5 High
- libsndfile project libsndfile** DISPUTED ** An issue has been found in libsndfile 1.0.28. There is a memory leak in...6.5 Medium
- jirafeauscript.php in Jirafeau before 3.4.1 is affected by two stored Cross-Site Scripting (XSS)...6.1 Medium
- jirafeauAn issue was discovered in Jirafeau before 3.4.1. The file "search by name" form is affected by...6.1 Medium
- jirafeauThe administration panel of Jirafeau before 3.4.1 is vulnerable to three CSRF attacks on search...8.8 High
ca-certificatesDebianca-certificates - security updateNo score- thetrackr trackr bravo firmware, trackr bravo mobile application +1 moreTrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to various device attributes8.8 High
- thetrackr trackr bravo firmware, trackr bravo mobile application +1 moreTrackR Bravo is missing authentication for the cloud service and allows querying or sending of GPS data from unauthenticated users6.5 Medium
- thetrackr trackr firmware, trackr bravo mobile application +1 moreTrackR Bravo MAC address can be exposed in close proximity and used to obtain the device ID3.5 Low
- trackr bravo mobile application, thetrackr trackr bravo firmware +1 moreTrackR Bravo mobile application stores account passwords in cleartext8.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 morePossible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreA pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using...7.5 High
- google android, linux kernel, qualcomm, inc. android for msm, firefox os for msm, qrd android +2 moreAn issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4...7.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreWhile parsing over-the-air information elements in all Android releases from CAF using the Linux...8.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreWhile processing a debug log event from firmware in all Android releases from CAF using the Linux...5.5 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreWhile processing a WMI_APFIND event in all Android releases from CAF using the Linux kernel ...5.5 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn __wlan_hdd_cfg80211_vendor_scan() in all Android releases from CAF using the Linux kernel ...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreDue to a race condition in the MDSS MDP driver in all Android releases from CAF using the Linux...7.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn the audio debugfs in all Android releases from CAF using the Linux kernel (Android for MSM,...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreWhile padding or shrinking a nested wmi packet in all Android releases from CAF using the Linux...9.8 Critical
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreA race condition exists in a driver in all Android releases from CAF using the Linux kernel ...7.0 High
- trendmicro maximum security, trend micro maximum security (consumer), trend micro, inc. micro maximum security (consumer) +5 more +7 moreA vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below)...9.8 Critical
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn a firmware memory dump feature in all Android releases from CAF using the Linux kernel ...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreAn integer overflow to buffer overflow vulnerability exists in the ADSPRPC heap manager in all...9.8 Critical
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn the cpuidle driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android)...7.8 High
- info-zip project zip** DISPUTED ** Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows...9.8 Critical
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 morePossible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user...7.8 High
- Show moreLoading…