CVEs published in July 2018
2,161 vulnerabilities, 252 critical, 3 exploited.
- phpcms project phpcmslibs\classes\attachment.class.php in PHPCMS 9.6.0 allows remote attackers to upload and execute...9.8 Critical
- ffmpeg, debian linux +1 morelibavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service ...6.5 Medium
- mybb new threadsThe New Threads plugin before 1.2 for MyBB has XSS.6.1 Medium
- wiresharkIn Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash....7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector...7.5 High
- wiresharkIn Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was...7.5 High
- wiresharkIn Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash....7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go...7.5 High
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c.6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c.6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c.6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c.6.5 Medium
- uclouvain openjpeg, debian linux +1 moreDivision-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in...7.5 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +3 more +5 moreNokogiri NULL Pointer Dereference7.5 High
- techsmith mp4v2MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to...9.8 Critical
- canonical ubuntu linux, webkitgtk webkitgtk\+ +1 moreWebKitGTK+ 2.20.3 has an off-by-one error, with a resultant out-of-bounds write, in the...9.8 Critical
- cisco unified contact center express, unified ip interactive voice response +1 moreMultiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center...9.8 Critical
- cisco unified contact center express, unified ip interactive voice response +1 moreMultiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center...8.8 High
- cisco unified contact center express, unified ip interactive voice response +1 moreMultiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center...6.1 Medium
- cisco unified contact center express, unified ip interactive voice response +1 moreMultiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center...6.1 Medium
- cisco finesseMultiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an...9.8 Critical
- cisco finesseMultiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an...9.8 Critical
- cisco unified communications manager im and presence serviceA vulnerability in the web framework of the Cisco Unified Communications Manager IM and Presence...6.1 Medium
- cisco cloud services platform 2100A vulnerability in the web upload function of Cisco Cloud Services Platform 2100 could allow an...8.8 High
- cisco mobility services engine 3310 firmware, mobility services engine 3355 firmware, mobility services engine 3365 firmware +2 moreA Read-Only User Effect Change vulnerability in the Policy Builder interface of Cisco Policy...6.5 Medium
- cisco mobility services engine 3310 firmware, mobility services engine 3355 firmware, mobility services engine 3365 firmware +2 moreA vulnerability in the CLI of Cisco Policy Suite could allow an authenticated, local attacker to...5.5 Medium
- cisco webex meetingsA vulnerability in the web framework of Cisco Webex could allow an unauthenticated, remote...6.1 Medium
- cisco webex teamsA vulnerability in Cisco Webex Teams (for Windows and macOS) could allow an unauthenticated,...8.8 High
- cisco webex meetings onlineMultiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording...5.5 Medium
- cisco webex meetings online, webex business suite, webex meeting server +2 moreMultiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording...7.8 High
- cisco policy suite, mobility services engine +1 moreA vulnerability in the Open Systems Gateway initiative (OSGi) interface of Cisco Policy Suite...9.8 Critical
- cisco policy suite, mobility services engine +1 moreA vulnerability in the Policy Builder interface of Cisco Policy Suite before 18.2.0 could allow...9.8 Critical
- cisco policy suite, mobility services engine +1 moreA vulnerability in the Cluster Manager of Cisco Policy Suite before 18.2.0 could allow an...9.8 Critical
- cisco mobility services engineA vulnerability in the Policy Builder database of Cisco Policy Suite before 18.2.0 could allow an...9.8 Critical
- cisco nx-osA vulnerability in the DHCPv6 feature of the Cisco Nexus 9000 Series Fabric Switches in...7.5 High
- cisco vbond orchestrator, vmanage network management, vsmart controller +9 more +11 moreA vulnerability in the command-line tcpdump utility in the Cisco SD-WAN Solution could allow an...7.8 High
- cisco vbond orchestrator, vmanage network management, vsmart controller +9 more +11 moreA vulnerability in the VPN subsystem configuration in the Cisco SD-WAN Solution could allow an...8.8 High
- cisco vbond orchestrator, vmanage network management, vsmart controller +9 more +11 moreA vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to...9.8 Critical
- cisco vbond orchestrator, vmanage network management, vsmart controller +9 more +11 moreA vulnerability in the CLI of the Cisco SD-WAN Solution could allow an authenticated, remote...7.2 High
- cisco vbond orchestrator, vedge-1000 firmware, vedge-100 firmware +9 more +11 moreA vulnerability in the Zero Touch Provisioning (ZTP) subsystem of the Cisco SD-WAN Solution could...7.8 High
- cisco vbond orchestrator, vmanage network management, vsmart controller +9 more +11 moreA vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow...7.5 High
- cisco vbond orchestrator, vmanage network management, vsmart controller +9 more +11 moreA vulnerability in the configuration and management database of the Cisco SD-WAN Solution could...8.8 High
- cisco vbond orchestrator, vmanage network management, vsmart controller +9 more +11 moreA vulnerability in the vManage dashboard for the configuration and management service of the...7.2 High
- cisco vbond orchestrator, vmanage network management, vsmart controller +9 more +11 moreA vulnerability in the configuration and management service of the Cisco SD-WAN Solution could...8.8 High
- cisco vbond orchestrator, vmanage network management, vsmart controller +9 more +11 moreA vulnerability in the configuration and monitoring service of the Cisco SD-WAN Solution could...6.7 Medium
- Show moreLoading…