CVEs published in July 2018
2,161 vulnerabilities, 252 critical, 3 exploited.
- saitoha libsixellibsixel 1.8.1 has a memory leak in sixel_decoder_decode in decoder.c, image_buffer_resize in...7.5 High
- srcms project srcmsAn issue was discovered in SRCMS V2.3.1. There is a CSRF vulnerability that can add a user...8.8 High
- srcms project srcmsAn issue was discovered in SRCMS V2.3.1. There is a CSRF vulnerability that can add an admin...8.8 High
- google androidThe content://wappush content provider in com.android.provider.telephony, as found in some custom...9.8 Critical
- phpoffice project commonPHPOffice Common Improper Restriction of XML External Entity Reference9.8 Critical
- velotismart project wifi firmwareThe uc-http service 1.0.0 on VelotiSmart WiFi B-380 camera devices allows Directory Traversal, as...9.8 Critical
- tractoThe increaseApproval function of a smart contract implementation for Tracto (TRCT), an Ethereum...9.8 Critical
- mi xiaomi r3d firmwareOS command injection in the AP mode settings feature in /cgi-bin/luci /api/misystem...9.8 Critical
- mi xiaomi r3, xiaomi r3c firmware, xiaomi r3d firmware +1 more +3 moreOS command injection in the guest Wi-Fi settings feature in /cgi-bin/luci on Xiaomi R3P before 2...9.8 Critical
linuxDebianlinux - regression updateNo score- znc, debian linux +1 moreZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files...5.3 Medium
- znc, debian linux +1 moreZNC before 1.7.1-rc1 does not properly validate untrusted lines coming from the network, allowing...6.5 Medium
linux-latest-4.9Debianlinux-latest-4.9 - security updateNo score- google android, debian linux +1 moreIn get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead...7.8 High
- [unknown] kernel, debian linux, canonical ubuntu linux +4 more +6 moreA flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds...4.8 Medium
- [unknown] kernel, debian linux, canonical ubuntu linux +1 more +3 moreA flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound...4.8 Medium
- [unknown] kernel, debian linux, canonical ubuntu linux +5 more +7 moreA flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound...4.2 Medium
- [unknown] kernel, debian linux, canonical ubuntu linux +1 more +3 moreLinux kernel is vulnerable to a stack-out-of-bounds write in the ext4 filesystem code when...5.5 Medium
- [unknown] kernel, debian linux, canonical ubuntu linux +4 more +6 moreA flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a use-after-free...4.2 Medium
- [unknown] kernel, debian linux, canonical ubuntu linux +3 more +5 moreA flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds...4.8 Medium
- [unknown] kernel, debian linux, canonical ubuntu linux +1 more +3 moreLinux kernel ext4 filesystem is vulnerable to an out-of-bound access in the ext4_ext_drop_refs()...7.3 High
- [unknown] kernel, debian linux, canonical ubuntu linux +2 moreA flaw was found in Linux kernel in the ext4 filesystem code. A use-after-free is possible in...5.0 Medium
- ibm network operating systemThe Fibre Channel over Ethernet (FCoE) feature in IBM System Networking and Blade Network...5.3 Medium
- -, ieee standard +1 moreThe P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of Rights Block to remove or relax license requirement7.8 High
- -, ieee standard +1 moreThe P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of Rights Block to remove or relax access control7.8 High
- -, ieee standard +1 moreThe P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of a license-deny response to a license grant7.8 High
- -, ieee standard +1 moreThe P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of the encryption key and insertion of hardware trojans in any IP7.8 High
- -, ieee standard +1 moreThe P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of encrypted IP cyphertext to insert hardware trojans7.8 High
- -, ieee standard +1 moreThe P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including improperly specified HDL syntax allows use of an EDA tool as a decryption oracle7.8 High
- -, ieee standard +1 moreThe P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including improperly specified padding in CBC mode allows use of an EDA tool as a decrypti…7.8 High
- accellion ftp serverThe Accellion FTP server prior to version FTA_9_12_220 is vulnerable to informaiton exposure6.1 Medium
- accellion ftp serverThe Accellion FTP server prior to version FTA_9_12_220 is vulnerable to cross-site scripting.5.3 Medium
- manageengine applications manager, zohocorp manageengine applications manager +1 moreManageEngine Applications Manager 12 and 13, allows unserialization of unsafe Java objects9.8 Critical
- hughes satellite modem dw7000, hn7000s/sm, hn7740s +4 more +6 moreHughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, is vulnerable to an authentication bypass using an alternate path or channel8.8 High
- hughes satellite modem dw7000, hn7000s/sm, hn7740s +4 more +6 moreHughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, lacks authentication to access certain pages6.5 Medium
- hughes satellite modem dw7000, hn7000s/sm, hn7740s +4 more +6 moreHughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, uses hard coded credentials8.8 High
- hughes satellite modem dw7000, hn7000s/sm, hn7740s +4 more +6 moreHughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, are potentially vulnerable to improper input validation, potentially leading to denial of service6.5 Medium
- jqueryform php formmail generator, php formmail generator +1 morePHP forms generated using the PHP FormMail Generator are vulnerable to stored cross-site scripting6.1 Medium
- jqueryform php formmail generator, php formmail generator +1 morePHP forms generated using the PHP FormMail Generator are vulnerable to unrestricted upload of dangerous file types9.8 Critical
- manageengine applications manager, zohocorp manageengine applications manager +1 moreManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation due to improper restriction of an XML external entity4.9 Medium
- manageengine applications manager, zohocorp manageengine applications manager +1 moreManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation and authentication bypass8.8 High
- epubcheckEpubCheck 4.0.1 is vulnerable to external XML entity processing attacks7.8 High
- forescout secureconnector, microsoft windows secureconnector agent +1 moreOn Windows endpoints, the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can obtain administrator privileges on the endpoint because files are c…7.8 High
- forescout secureconnector, microsoft windows secureconnector agent +1 moreOn Windows endpoints, the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can obtain administrator privileges on the endpoint because it fails to…7.8 High
- jqueryform php formmail generator, php formmail generator +1 morePHP FormMail Generator generates PHP code for standard web forms, and the code generated does not properly validate user input folder directories and is vulnerable to path traversal7.5 High
- jqueryform php formmail generator, php formmail generator +1 morePHP FormMail Generator generates PHP code for standard web forms, and the code generated is vulnerable to unsafe deserialization of untrusted data9.8 Critical
- jqueryform php formmail generator, php formmail generator +1 morePHP FormMail Generator generates PHP code for standard web forms, and the code generated is vulnerable to authentication bypass9.8 Critical
- codelathe filecloudCodeLathe FileCloud, version 13.0.0.32841 and earlier, is vulnerable to cross-site request forgery (CSRF)8.8 High
- shdesigns ethernet download manager, resident download manager +1 moreSHDesigns' Resident Download Manager (as well as the Ethernet Download Manager) does not authenticate firmware downloads before executing code and deploying them to devices9.8 Critical
- sungard etrakit3The Sungard eTRAKiT3 software version 3.2.1.17 may be vulnerable to SQL injection which may allow a remote unauthenticated attacker to run a subset of SQL commands against the back-end database9.8 Critical
- Show moreLoading…