CVEs published in July 2018
2,161 vulnerabilities, 252 critical, 3 exploited.
- oracle micros retail-jVulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent:...7.7 High
- oracle micros retail-jVulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent:...6.3 Medium
- oracle mysql workbenchVulnerability in the MySQL Workbench component of Oracle MySQL (subcomponent: Workbench: Security...3.7 Low
- [unknown] 389-ds-base, debian linux, fedoraproject 389 directory server +2 more389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive...3.8 Low
- eclipse mojarraPath Traversal in Eclipse Mojarra7.5 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Audit Log). Supported...4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump)....6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options)....3.3 Low
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...7.1 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached)....5.3 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported...4.3 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...4.3 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....4.9 Medium
- oracle corporation java, oracle jdk, jre +2 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). The supported...5.9 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +24 more +26 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...3.7 Low
- techsmith mp4v2MP4Atom::factory in mp4atom.cpp in MP4v2 2.0.0 incorrectly uses the MP4ItemAtom data type in a...8.8 High
- neomutt, debian linux +1 moreAn issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/'...7.5 High
- neomutt, debian linux +1 moreAn issue was discovered in NeoMutt before 2018-07-16. nntp.c proceeds even if memory allocation...9.8 Critical
- neomutt, debian linux +1 moreAn issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack...9.8 Critical
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to...5.8 Medium
- gnu libextractor, debian linux +1 moreGNU Libextractor before 1.7 contains an infinite loop vulnerability in...6.5 Medium
- gnu libextractor, debian linux +1 moreGNU Libextractor before 1.7 has a stack-based buffer overflow in ec_read_file_func (unzip.c).8.8 High
- sddm project sddmAn issue was discovered in SDDM through 0.17.0. If configured with ReuseSession=true, the...7.5 High
- trivum webtouch setup v9 firmwareTouchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allow...9.8 Critical
- trivum webtouch setup v9 firmwareTouchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allows...9.8 Critical
- trivum c4 professional firmwareMusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34...7.5 High
- trivum c4 professional firmwareMusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34...9.8 Critical
- trivum c4 professional firmwareMusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional allows...9.8 Critical
- mcafee network security management (nsm), network security manager +1 moreSB10244 - Network Security Management (NSM) - Abuse of Functionality vulnerability5.5 Medium
- exiv2samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX...8.1 High
- lightbend play frameworkPlay Framework's Assets controller vulnerable to directory traversal7.5 High
- mruby, debian linux +1 moreThe CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer...7.5 High
- joyplus-cms project joyplus-cmsmanager/editor/upload.php in joyplus-cms 1.6.0 allows arbitrary file upload because detection of...9.8 Critical
- teamviewerTeamViewer through 13.1.1548 stores a password in Unicode format within TeamViewer.exe process...8.1 High
- xiaocms x1An issue was discovered in XiaoCms X1 v20140305. There is a CSRF vulnerability to change the...8.8 High
- htslibIn HTSlib 1.8, a race condition in cram/cram_io.c might allow local users to overwrite arbitrary...4.7 Medium
- ffmpegFFmpeg before commit a7e032a277452366771951e29fd0bf2bd5c029f0 contains a use-after-free...6.5 Medium
- ffmpegFFmpeg before commit 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 contains a CWE-835: Infinite loop...6.5 Medium
- ffmpeg, debian linux +1 moreFFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array...9.8 Critical
- ffmpeglibavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service ...6.5 Medium
- mutt, neomutt, canonical ubuntu linux +7 more +9 moreAn issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not...9.8 Critical
- mutt, neomutt, canonical ubuntu linux +1 more +3 moreAn issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer...9.8 Critical
- mutt, neomutt, canonical ubuntu linux +1 more +3 moreAn issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a...9.8 Critical
- mutt, neomutt, canonical ubuntu linux +7 more +9 moreAn issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote...9.8 Critical
- mutt, neomutt, canonical ubuntu linux +1 more +3 moreAn issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a...9.8 Critical
- Show moreLoading…