CVEs published in July 2018
2,161 vulnerabilities, 252 critical, 3 exploited.
- mutt, neomutt, canonical ubuntu linux +1 more +3 moreAn issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c...5.3 Medium
- mutt, neomutt, canonical ubuntu linux +7 more +9 moreAn issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote...9.8 Critical
- mutt, neomutt, canonical ubuntu linux +1 more +3 moreAn issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in...9.8 Critical
- mutt, neomutt, canonical ubuntu linux +1 more +3 moreAn issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in...9.8 Critical
- mutt, neomutt, canonical ubuntu linux +1 more +3 moreAn issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c...9.8 Critical
- mutt, neomutt, canonical ubuntu linux +1 more +3 moreAn issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a...9.8 Critical
- mutt, neomutt, canonical ubuntu linux +1 more +3 moreAn issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c...9.8 Critical
- techotronic all in one faviconMultiple Persistent cross-site scripting (XSS) issues in the Techotronic all-in-one-favicon (aka...4.8 Medium
- resiprocate, debian linux +1 moreThe ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate...9.8 Critical
- [unknown] git-annex, debian linux +1 moregit-annex is vulnerable to a private data exposure and exfiltration attack. It could expose the...5.9 Medium
- fortinet fortianalyzer firmware, fortimanager firmware, fortimanager, fortianalyzer +2 moreA Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below...6.1 Medium
- redhat openshift, [unknown] atomic-openshift, redhat openshift container platform +2 moreThe OpenShift image import whitelist failed to enforce restrictions correctly when running...4.3 Medium
- oracle glassfish serverThe demo feature in Oracle GlassFish Open Source Edition 5.0 has TCP port 7676 open by default...9.8 Critical
- [unknown] git-annex, debian linux +1 moregit-annex is vulnerable to an Information Exposure when decrypting files. A malicious server for...5.9 Medium
- symantec norton app lockNorton App Lock prior to v1.3.0.332 can be susceptible to a bypass exploit. In this type of...6.2 Medium
- cisco secure firewall management centerA vulnerability in the detection engine parsing of Security Socket Layer (SSL) protocol packets...7.5 High
- cisco secure firewall management centerA vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an...5.8 Medium
- cisco secure firewall management centerA vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an...8.6 High
- cisco secure firewall management centerA vulnerability in the detection engine of Cisco Firepower System Software could allow an...7.5 High
- cisco starosA vulnerability in the reassembly logic for fragmented IPv4 packets of Cisco StarOS running on...8.6 High
- cisco application policy infrastructure controller enterprise moduleA vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an authenticated,...7.8 High
- cisco web security applianceA vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could...6.1 Medium
- cisco ip phone multiplatform firmwareA vulnerability in the web-based UI of Cisco IP Phone 6800, 7800, and 8800 Series with...8.8 High
- qnap q'center virtual appliance, q\'center +1 moreCommand injection vulnerability in SSH of QNAP Q'center Virtual Appliance version 1.7.1063 and...8.8 High
- qnap q'center virtual appliance, q\'center +1 moreCommand injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and...8.8 High
- qnap q'center virtual appliance, q\'center +1 moreCommand injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063...8.8 High
- qnap q'center virtual appliance, q\'center +1 moreCommand injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7...7.2 High
- qnap q'center virtual appliance, q\'center +1 moreExposure of Private Information in QNAP Q'center Virtual Appliance version 1.7.1063 and earlier...8.8 High
- zeta-producer zeta producer desktop cmsThe websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to...9.8 Critical
- zeta-producer zeta producerThe websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to...5.5 Medium
- zohocorp manageengine desktop centralAn issue was discovered in Zoho ManageEngine Desktop Central before 100251. By leveraging access...9.8 Critical
- zohocorp manageengine desktop centralAn issue was discovered in Zoho ManageEngine Desktop Central before 100230. There is...9.8 Critical
- x file explorer project file explorer, debian linux +1 moreX File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain...5.5 Medium
- ibm lotus notesThe Notes Client Single Logon feature in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3,...7.0 High
- atlassian universal plugin managerThe NotificationRepresentationFactoryImpl class in Atlassian Universal Plugin Manager before...5.4 Medium
- cyberhobo geo mashupThe Geo Mashup plugin before 1.10.4 for WordPress has insufficient sanitization of post editor...9.8 Critical
- atlassian jira, jira server +1 moreThe IncomingMailServers resource in Atlassian JIRA Server before version 7.6.7, from version 7.7...6.1 Medium
- [unknown] infinispan, redhat jboss data grid +1 moreInfinispan Rest API Does Not Enforce Auth Constraints6.5 Medium
- virgo zodiactoken project zodiactokenAn issue was discovered in a smart contract implementation for Virgo_ZodiacToken, an Ethereum...7.5 High
- stex white list project white listAn issue was discovered in a smart contract implementation for STeX White List (STE(WL)), an...9.8 Critical
- encryptedtoken project encryptedtokenAn issue was discovered in a smart contract implementation for EUC (EUC), an Ethereum token. The...9.8 Critical
- mytoken project mytokenAn issue was discovered in a smart contract implementation for SingaporeCoinOrigin (SCO), an...9.8 Critical
- userwallet project userwalletAn issue was discovered in a smart contract implementation for UserWallet...7.5 High
- myadvancedtoken project myadvancedtokenAn issue was discovered in a smart contract implementation for MKCB, an Ethereum token. If the...9.8 Critical
- techsmith mp4v2In MP4v2 2.0.0, there is an integer overflow (with resultant memory corruption) when resizing...8.8 High
- techsmith mp4v2In MP4v2 2.0.0, there is an integer underflow (with resultant memory corruption) when parsing...8.8 High
- linux kernel, canonical ubuntu linux, kernel heap-based buffer overflow in fs/ext4/xattr.c +1 more +3 moreLinux kernel is vulnerable to a heap-based buffer overflow in the fs/ext4/xattr.c...5.2 Medium
- clamav, debian linux +1 moreClamAV before 0.100.1 lacks a PDF object length check, resulting in an unreasonably long time to...3.3 Low
- clamav, canonical ubuntu linux, debian linux +2 moreClamAV before 0.100.1 has an HWP integer overflow with a resultant infinite loop via a crafted...5.5 Medium
- saitoha libsixellibsixel 1.8.1 has a memory leak in sixel_allocator_new in allocator.c.7.5 High
- Show moreLoading…