CVEs published in July 2018
2,161 vulnerabilities, 252 critical, 3 exploited.
- imagely nextgen gallery plugin, nextgen gallery +1 moreThe Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 may execute code from an uploaded malicious file7.5 High
- ragentek android software, beeline pro 2 firmware, bluproducts studio 6.0 hd firmware +17 more +19 moreRagentek Android software contains an over-the-air update mechanism that communicates over an unencrypted channel, which can allow a remote attacker to execute arbitrary code with root privileges8.1 High
- d-link dir-818l(w), dir-822, dir-823 +15 more +17 moreD-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action9.8 Critical
- mitel shortel mobility client, shoretel mobility client andoid, mobility client ios +2 moreShoreTel Mobility Client for iOS and Android, version 9.1.3.109 and earlier, fails to properly validate SSL certificates provided by HTTPS connections7.5 High
- bsd libc library, freebsd +1 moreThe BSD libc library's link_ntoa() function may be vulnerable to a classic buffer overflow9.8 Critical
- asus rp-ac52 access point, ea-n66 firmware, rp-ac52 firmware +5 more +7 moreThe ASUS RP-AC52 access point, firmware version 1.0.1.1s and possibly earlier, is vulnerable to command injection9.8 Critical
- asus rp-ac52 access point, ea-n66 firmware, rp-ac52 firmware +5 more +7 moreThe ASUS RP-AC52 access point, firmware version 1.0.1.1s and possibly earlier, is vulnerable to cross-site request forgery8.8 High
- synology ds107 firmware, ds116 firmware, ds213 firmware +3 more +5 moreSynology NAS servers DS107, DS116, and DS213, use default credentials9.8 Critical
- nuuo nt-4040 titan, nt-4040 titan firmware +1 moreNuuo NT-4040 Titan, firmware NT-4040_01.07.0000.0015_1120, uses default credentials9.8 Critical
- green packet wifi access point, greenpacket dx-350 firmware +1 moreGreen Packet DX-350 uses default credentials9.8 Critical
- intellian satellite tv antennas, intelliantech t100q firmware, t100w firmware +11 more +13 moreIntellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses default credentials9.8 Critical
- zizai technology tech nut, nutspace nut mobile +1 moreZizai Tech Nut allows for unauthenticated Bluetooth pairing4.3 Medium
- nutspace nut mobile, zizai technology tech nut mobile application +1 moreZizai Tech Nut mobile application makes requests using HTTP, which includes the users session token9.8 Critical
- nutspace nut mobile, zizai technology tech nut mobile application +1 moreZizai Tech Nut stores the account password in cleartext7.8 High
- itrack easy, kkmcn itrackeasy +1 moreiTrack Easy mobile application stores the user password in base-64 encoding/cleartext7.8 High
- itrack easy, ieasytec itrackeasy +1 moreiTrack Easy does not use session cookies to maintain sessions and POSTs the users password over HTTPS for each request9.8 Critical
- ieasytec itrack easy, itrack easy +1 moreiTrack Easy's getgps data can be modified without authentication7.5 High
- ieasytec itrack easy, itrack easy +1 moreA captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS data5.9 Medium
- itrack easy, ieasytec itrackeasy +1 moreThe MAC address/device tracking ID of an iTrack Easy can be obtained within range of the device3.7 Low
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player 30.0.0.113 and earlier versions have an Out-of-bounds read vulnerability....7.5 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability....8.8 High
- ics-cert eaton 9000x drive, eaton 9000x firmware +1 moreEaton 9000X DriveA versions 2.0.29 and prior has a stack-based buffer overflow vulnerability,...9.8 Critical
- ics-cert medtronic n'vision clinician programmer, ics cert medtronic n vision clinician programmer, medtronic 8840 n’vision clinician programmer +3 more +5 moreMedtronic N'Vision Clinician Programmer Protection Mechanism Failure6.3 Medium
- doorkeeper project doorkeeperDoorkeeper subject to Incorrect Permission Assignment7.5 High
- yamldotnet project yamldotnetHigh severity vulnerability that affects YamlDotNet and YamlDotNet.Signed7.8 High
- sensu coreSensu, Inc. Sensu Core version Before version 1.4.2-3 contains a Insecure Permissions...8.8 High
- modx revolutionMODX Revolution version <=2.6.4 contains a Directory Traversal vulnerability in /core/model/modx...7.5 High
- modx revolutionMODX Revolution Incorrect Access Control vulnerability7.2 High
- jfrog artifactoryJFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in...8.8 High
- totalavAn issue was discovered in TotalAV v4.1.7. An unprivileged user could modify or overwrite all of...7.8 High
- dell rsa identity governance and lifecycle, rsa identity governance and lifecycle +1 moreReflected Cross-Site Scripting Vulnerability6.1 Medium
- dell rsa identity governance and lifecycle, rsa identity governance and lifecycle +1 moreAuthorization ByPass Vulnerability9.0 Critical
- escanav escan internet security suiteIn MicroWorld eScan Internet Security Suite (ISS) for Business 14.0.1400.2029, the driver...5.5 Medium
- gdata-software total securityThe GDASPAMLib.AntiSpam ActiveX control ASK\GDASpam.dll in G DATA Total Security 25.4.0.3 has a...8.8 High
- lenovo smart assistantFor the Lenovo Smart Assistant Android app versions earlier than 12.1.82, an attacker with...6.4 Medium
- lenovo help, lenovo group ltd. help android application +1 moreThe Lenovo Help Android app versions earlier than 6.1.2.0327 had insufficient access control for...7.5 High
- libwav project libwavAn issue has been found in libwav through 2017-04-20. It is a SEGV in the function apply_gain in...6.5 Medium
- libwav project libwavThe function wav_read in libwav.c in libwav through 2017-04-20 has an infinite loop.7.5 High
- libwav project libwavAn issue has been found in libwav through 2017-04-20. It is a SEGV in the function wav_free in...6.5 Medium
- libwav project libwavAn issue has been found in libwav through 2017-04-20. It is a SEGV in the function print_info in...6.5 Medium
- libpng, oracle jdk, jre +2 moreAn issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c,...6.5 Medium
- pngwriter project pngwriter** DISPUTED ** An issue has been found in PNGwriter 0.7.0. It is a SEGV in pngwriter:...5.5 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence Virtual Appliance 5.2 through 5.2.3.2 could...5.9 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence Virtual Appliance 5.2 through 5.2.3.2 stores...3.7 Low
- exiv2Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp.8.8 High
- surina soundtouchThe FIRFilter::evaluateFilterMulti function in FIRFilter.cpp in libSoundTouch.a in Olli...7.5 High
- surina soundtouchThe RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli...7.5 High
- monetra mstdlibmstdlib (aka the M Standard Library for C) 1.2.0 has incorrect file access control in situations...9.8 Critical
- getbootstrap bootstrapBootstrap Cross-site Scripting vulnerability6.1 Medium
- getbootstrap bootstrapBootstrap Cross-site Scripting vulnerability6.1 Medium
- Show moreLoading…