CVEs published in July 2018
2,161 vulnerabilities, 252 critical, 3 exploited.
- cloud foundry foundry, cloudfoundry cloud foundry, java buildpack +1 more +3 moreApplications deployed to Cloud Foundry, versions v166 through v227, may be vulnerable to a remote...5.9 Medium
- juniper contrail service orchestrationJuniper Networks CSO versions prior to 4.0.0 may log passwords in log files leading to an...9.8 Critical
- juniper contrail service orchestrationContrail Service Orchestration: Hardcoded credentials for Keystone service.9.8 Critical
- juniper contrail service orchestrationContrail Service Orchestration: hardcoded cryptographic certificates and keys9.8 Critical
- juniper contrail service orchestrationContrail Service Orchestration: Hardcoded credentials for Grafana service6.5 Medium
- juniper contrail service orchestrationJuniper Networks Contrail Service Orchestration releases prior to 3.3.0 have Cassandra service...9.8 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: RPD daemon crashes due to receipt of crafted BGP NOTIFICATION messages9.8 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5200 and QFX10002: Unintended ONIE partition was shipped with certain Junos OS .bin and .iso images4.4 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: A malicious crafted IPv6 DHCP packet may cause the JDHCPD daemon to core5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: RPD crash when receiving a crafted BGP UPDATE7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of specially crafted UDP packets over MPLS may bypass stateless IP firewall rules5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) and PTX1K: Line card may crash upon receipt of specific MPLS packet.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Kernel crash (vmcore) during broadcast storm after enabling 'monitor traffic interface fxp0'5.7 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of malformed RSVP packet may lead to RPD denial of service7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Stateless IP firewall filter rules stop working as expected after reboot or upgrade4.7 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Credentials exposed when using HTTP and HTTPS Firewall Pass-through User Authentication6.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: A privilege escalation vulnerability exists where authenticated users with shell access can become root7.8 High
- universal robots robot controllers version cb 3.1, sw version 3.4.5-100, universal-robots cb3.1 firmware +1 moreIn Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100, ports 30001/TCP to...9.8 Critical
- universal robots robot controller version cb 3.1, sw version 3.4.5-100, universal-robots cb3.1 firmware +1 moreUniversal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 utilizes hard-coded...9.8 Critical
- topdeskCross-site request forgery (CSRF) vulnerability in TOPdesk before 8.05.017 (June 2018 version)...6.5 Medium
- topdeskCross-site scripting (XSS) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and...6.1 Medium
- antenna house house, antennahouse office server document converter +1 moreIn Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312...8.8 High
- antenna house house, antennahouse office server document converter +1 moreAn exploitable out-of-bounds write exists in the Microsoft Word document conversion functionality...8.8 High
- antenna house house, antennahouse office server document converter +1 moreAn exploitable stack-based buffer overflow exists in the Microsoft Word document conversion...8.8 High
- antenna house house, antennahouse office server document converter +1 moreIn Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312...8.8 High
- antenna house house, antennahouse office server document converter +1 moreIn Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312...8.8 High
- antenna house house, antennahouse office server document converter +1 moreAn exploitable heap corruption exists in the PowerPoint document conversion functionality of the...8.8 High
- arcelikas grundig smart inter\@ctive firmwareGrundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085...8.8 High
- videolan vlc media player, debian linux +1 moreVideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can...8.0 High
- elo access managerThere is a time-based blind SQL injection vulnerability in the Access Manager component before 9...9.8 Critical
- crestron airmedia am-100 firmware, airmedia am-101 firmware +1 moreCross-site scripting (XSS) vulnerability in Crestron Airmedia AM-100 devices with firmware before...4.8 Medium
- crestron airmedia am-100 firmware, airmedia am-101 firmware +1 moreCrestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware...7.2 High
- ibm websphere cast iron cloud integrationIBM WebSphere Cast Iron 6.3 allows remote attackers to bypass intended access restrictions via...7.5 High
- ibm websphere portalIBM WebSphere Portal 7.0.0.x and 8.0.0.x write passwords to a trace file when tracing is enabled...7.8 High
- ibm inotesOpen redirect vulnerability in IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows...6.1 Medium
- ibm inotesCross-site scripting (XSS) vulnerability in IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0...5.4 Medium
- ibm inotesIBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to bypass the...7.5 High
- apache couchdbApache CouchDB administrative users can configure the database server via HTTP(S). Due to...7.2 High
- rocket.chatA reflected XSS issue was discovered in the registration form in Rocket.Chat before 0.66. When...5.4 Medium
- rocket.chatAn XSS issue was discovered in packages/rocketchat-mentions/Mentions.js in Rocket.Chat before 0...6.1 Medium
- microsoft .net core, .net framework, asp.net core +2 more +4 moreImproper Certificate Validation in Microsoft .NET Framework components5.5 Medium
- microsoft powershell, powershell editor, powershell extension +1 more +3 moreA remote code execution vulnerability exists in PowerShell Editor Services, aka "PowerShell...9.8 Critical
- microsoft web customizationsA cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft...5.4 Medium
- microsoft edgeAn information disclosure vulnerability exists when Microsoft Edge improperly handles objects in...4.3 Medium
- microsoft edgeAn information disclosure vulnerability exists when Microsoft Edge improperly handles objects in...4.3 Medium
- microsoft sharepoint, sharepoint enterprise server +1 moreAn elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly...5.4 Medium
- microsoft research javascript cryptography librarySensitive Data Exposure in msrcrypto9.8 Critical
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreAn elevation of privilege vulnerability exists when Windows fails a check, allowing a sandbox...4.7 Medium
- microsoft windows 10, windows 10 servers, windows 8.1 +4 more +6 moreAn elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces...7.8 High
- microsoft access, office +1 moreA remote code execution vulnerability exists when Microsoft Access fails to properly handle...7.8 High
- Show moreLoading…