CVEs published in July 2018
2,161 vulnerabilities, 252 critical, 3 exploited.
- apache stormCode execution in org.apache.storm:storm-core8.8 High
firefoxUbuntufirefox regressionsNo score- crestron dge-100, dm-dge-200-c, ts-1542-c +3 more +5 moreCrestron DGE-100 Console Command Injection (FIXED)9.8 Critical
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could...8.4 High
- ibm rational quality managerIBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to HTTP...5.4 Medium
- ibm rational quality managerIBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site...5.4 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Jazz Foundation products could allow a user with physical access to the system to log in as...4.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5 and 11.1...8.4 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10,1, 10.5 and 11.1 could...7.4 High
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Jazz Foundation products could disclose sensitive information to an authenticated attacker...4.3 Medium
- ibm rational quality managerIBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site...5.4 Medium
- ibm rational quality managerIBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site...5.4 Medium
- ibm rational quality managerIBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site...5.4 Medium
- ibm rational quality managerIBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site...5.4 Medium
- ibm rational quality managerIBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 contains an undisclosed...6.3 Medium
- ibm rational quality managerIBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site...5.4 Medium
- ibm rational team concertIBM Rational Team Concert 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site...5.4 Medium
- ibm rational team concertIBM Rational Team Concert 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site...5.4 Medium
- ibm rational team concertIBM Rational Team Concert 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site...5.4 Medium
- cmft project cmftAn issue was discovered in cmft through 2017-09-24. The cmft::rwReadFile function in image.cpp...7.8 High
- barco clickshare cs-100 firmware, clickshare cse-200 firmware +1 moreAn issue was discovered on Barco ClickShare CSE-200 and CS-100 Base Units with firmware before 1...7.5 High
- freesshdInsecure access control in freeSSHd version 1.3.1 allows attackers to obtain the privileges of...9.8 Critical
- symfony twig** DISPUTED ** Twig before 2.4.4 allows Server-Side Template Injection (SSTI) via the search...9.8 Critical
- libgit2, debian linux +1 moreA flaw was found in libgit2 before version 0.27.3. A missing check in git_delta_apply function in...6.5 Medium
- libgit2, debian linux +1 moreA flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign...8.1 High
- atlassian confluenceThe attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to...4.7 Medium
- atlassian crucible, fisheye, fisheye and crucible +2 moreThe review attachment resource in Atlassian Fisheye and Crucible before version 4.5.3 allows...5.4 Medium
- apache directory ldap api, apache software foundation directory +1 moreCredential leak in org.apache.directory.api:apache-ldap-api9.8 Critical
- node-macaddress project node-macaddressCommand Injection in macaddress9.8 Critical
- remicoin project remicoinAn wrong logical check identified in the transferFrom function of a smart contract implementation...7.5 High
- duraspace dspaceHigh severity vulnerability that affects org.dspace:dspace-xmlui7.5 High
- ceph, debian linux, opensuse leap +7 more +9 moreA flaw was found in the way signature calculation was handled by cephx authentication protocol....6.5 Medium
- ceph, debian linux, opensuse leap +7 more +9 moreIt was found that cephx authentication protocol did not verify ceph clients correctly and was...7.5 High
- ceph, redhat ceph storage, debian linux +6 more +8 moreA flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having...8.1 High
- [unknown] polkit, canonical ubuntu linux, debian linux +2 moreA flaw was found in polkit before version 0.116. The implementation of the...4.7 Medium
- creolabs gravityGravity before 0.5.1 does not support a maximum recursion depth.7.5 High
- catimg project catimgA heap-based buffer overflow exists in stbi__bmp_load_cont in stb_image.h in catimg 2.4.0.9.8 Critical
- abbyy flexicaptureMultiple Cross Site Request Forgery (CSRF) vulnerabilities in the HTTP API in ABBYY FlexiCapture...8.8 High
- abbyy flexicaptureThe HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 allows an attacker to conduct...9.8 Critical
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x...8.1 High
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x...8.1 High
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x...8.1 High
- concretecms concrete cmsA Server Side Request Forgery (SSRF) vulnerability in tools/files/importers/remote.php in...7.2 High
- siemens ag plm software teamcenter, siemens teamcenter product lifecycle management +1 moreA reflected Cross-Site-Scripting (XSS) vulnerability has been identified in Siemens PLM Software...6.1 Medium
- jfrog artifactoryJFrog JFrog Artifactory version Prior to version 6.0.3, since version 4.0.0 contains a Directory...7.2 High
- rust-lang rustThe Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427:...7.8 High
- mycroft mycroft-coreMycroft AI mycroft-core version 18.2.8b and earlier contains a Incorrect Access Control...8.1 High
- cryptiles project cryptilesInsufficient Entropy in cryptiles9.8 Critical
- ovidentiaOvidentia version 8.4.3 and earlier contains a Unsanitized User Input vulnerability in utilit.php...8.8 High
- eosio project eosEOSIO/eos eos version after commit f1545dd0ae2b77580c2236fdb70ae7138d2c7168 contains a stack...9.8 Critical
- Show moreLoading…