CVEs published in July 2018
2,161 vulnerabilities, 252 critical, 3 exploited.
- getbootstrap bootstrap, debian linux +1 moreBootstrap vulnerable to Cross-Site Scripting (XSS)6.1 Medium
- vmware toolsVMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS....7.0 High
kernel-azureSUSE,crashSUSE,dpdkSUSE +5 more +7 moreInitial update for kernel-azureNo score- freedesktop accountsserviceDirectory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an...6.5 Medium
- hdfgroup hdf5An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in...8.8 High
- hdfgroup hdf5An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the...8.8 High
- hdfgroup hdf5An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in...8.8 High
- hdfgroup hdf5An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in...8.8 High
- creatiwity witycmsCSRF vulnerability in admin/user/edit in Creatiwity wityCMS 0.6.2 allows an attacker to take over...8.8 High
- techsmith mp4v2A double free exists in the MP4StringProperty class in mp4property.cpp in MP4v2 2.0.0. A dangling...9.8 Critical
- [unknown] ansible, canonical ubuntu linux, debian linux +8 more +10 moreAnsible Arbitrary Code Execution7.8 High
- radare radare2The r_bin_java_annotation_new function in shlr/java/class.c in radare2 2.7.0 allows remote...5.5 Medium
- radare radare2The r_bin_mdmp_init_directory_entry function in mdmp.c in radare2 2.7.0 allows remote attackers...5.5 Medium
- radare radare2The sdb_set_internal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial...5.5 Medium
- super cms project cmsIn waimai Super Cms 20150505, there is a CSRF vulnerability that can add an admin account via...8.8 High
- wolfsight cmsWolfSight CMS 3.2 allows SQL injection via the PATH_INFO to the default URI.9.8 Critical
- f5 big-ip access policy manager, big-ip edge, f5 networks, inc. big-ip apm client for linux and mac osx +2 moreThe svpn component of the F5 BIG-IP APM client prior to version 7.1.7 for Linux and Mac OS X runs...7.8 High
- gnu mailmanModerate severity vulnerability that affects mailman6.5 Medium
- nagios coreqh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability,...5.5 Medium
- nagios coreqh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability,...5.5 Medium
- nagiosqh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference...5.5 Medium
- wago 762-3000 firmware, 762-3001 firmware, 762-3002 firmware +1 more +3 moreAn issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before...5.4 Medium
- wago 762-3000 firmware, 762-3001 firmware, 762-3002 firmware +1 more +3 moreAn issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before...8.8 High
- wago 762-3000 firmware, 762-3001 firmware, 762-3002 firmware +1 more +3 moreAn issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before...6.5 Medium
- codiadCodiad remote code execution vulnerability9.8 Critical
- hp fortify software security centerMFSBGN03811 rev.1 - Fortify Software Security Center (SSC), Multiple vulnerabilities7.3 High
- shein shein-fashion shopping onlineThe Shein Group Ltd. "SHEIN - Fashion Shopping" app -- aka shein fashion-shopping/id878577184 --...5.9 Medium
- komootThe komoot GmbH "Komoot - Cycling & Hiking Maps" app before 9.3.2 -- aka komoot-cycling-hiking...7.4 High
- shpock"Shpock Boot Sale & Classifieds" app before 3.17.0 -- aka shpock-boot-sale-classifieds...5.9 Medium
dnsmasqUbuntudnsmasq updateNo scoredns-root-dataUbuntudns-root-data updateNo score- ngtoken project ngtokenAn integer overflow vulnerability exists in the function multipleTransfer of Neo Genesis Token ...7.5 High
- malaysiancoin project malaysiancoinAn integer overflow vulnerability exists in the function transferAny of Malaysia coins (Xmc), an...7.5 High
- globecoin project globecoinAn integer overflow vulnerability exists in the function transfer_tokens_after_ICO of GlobeCoin ...7.5 High
- wmctoken project wmctokenAn integer overflow vulnerability exists in the function batchTransfer of WeMediaChain (WMC), an...7.5 High
- mp3 coin project coinAn integer overflow vulnerability exists in the function distribute of MP3 Coin (MP3), an...7.5 High
- sharktech project sharktechAn integer overflow vulnerability exists in the function batchTransfer of SHARKTECH (SKT), an...7.5 High
- rocket coin project coinAn integer overflow vulnerability exists in the function multiTransfer of Rocket Coin (XRC), an...7.5 High
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 moreHigh severity vulnerability that affects io.vertx:vertx-web8.8 High
- qualcomm msm8996au firmware, sd 450 firmware, sd 625 firmware +4 more +6 moreWhile playing HEVC content using HD DMB in Snapdragon Automobile and Snapdragon Mobile in version...7.8 High
- apache spark, mozilla firefox +1 moreExposure of Sensitive Information to an Unauthorized Actor in Apache Spark via crafted URL5.4 Medium
- apache sparkExposure of Sensitive Information to an Unauthorized Actor in Apache Spark4.7 Medium
- catfish-cms catfish cmsCatfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter (aka an...4.8 Medium
- clippercmsClipperCMS 1.3.3 has stored XSS via the Full Name field of (1) Security -> Manager Users or (2)...4.8 Medium
- codeplea genannGenann through 2018-07-08 has a SEGV in genann_run in genann.c.7.5 High
- codeplea genannGenann through 2018-07-08 has a stack-based buffer over-read in genann_train in genann.c.9.8 Critical
- qutebrowser, qutebrowser cross-site request forgery flaw allows sites to access 'qute +1 moreQutebrowser CSRF Vulnerability9.3 Critical
- gnu mailman, debian linux +1 moreCross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated...5.4 Medium
- emc rsa identity governance and lifecycle, rsa via lifecycle and governance, emc rsa identity management and governance +1 more +3 moreRSA Identity Governance and Lifecycle Uncontrolled Search Path Vulnerability7.3 High
- pivotal operations managerPivotal Operations Manager, versions 2.1 prior to 2.1.6 and 2.0 prior to 2.0.15 and 1.12 prior to...5.9 Medium
- Show moreLoading…