CVEs published in July 2018
2,161 vulnerabilities, 252 critical, 3 exploited.
- libconfuse project libconfuse, debian linux +1 moretrim_whitespace in lexer.l in libConfuse v3.2.1 has an out-of-bounds read.8.8 High
- axiosys bento4In Bento4 v1.5.1-624, AP4_File::ParseStream in Ap4File.cpp allows remote attackers to cause a...6.5 Medium
- libdxfrw project libdxfrwlibdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to...7.5 High
- gnu libredwgget_first_owned_object in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a...6.5 Medium
- foxitsoftware foxit reader, phantompdf +1 moreFoxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to Remote Code...9.8 Critical
dnsmasqDebiandnsmasq - regression updateNo scorelinux-baseDebianlinux-base - security updateNo score- techsmith mp4v2MP4Integer32Property::Read in atom_avcC.cpp in MP4v2 2.1.0 allows remote attackers to cause a...8.8 High
- ssh companywebsite project companywebsiteAn issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. admin/admin...9.8 Critical
- ssh companywebsite project companywebsiteAn issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. SQL injection exists...9.8 Critical
- eblock eos4jespritblock eos4j, an unofficial SDK for EOS, through 2018-07-12 mishandles floating-point...7.5 High
- wiresharkIn Wireshark through 2.6.2, the create_app_running_mutex function in wsutil/file_util.c calls...7.5 High
- [unknown] python-cryptography, canonical ubuntu linux, redhat openstack +2 morePyCA Cryptography vulnerable to GCM tag forgery7.5 High
- sensiolabs symfony** DISPUTED ** The debug handler in Symfony before v2.7.33, 2.8.x before v2.8.26, 3.x before v3.2...6.1 Medium
- gnome evolution, canonical ubuntu linux +1 morecamel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server...9.8 Critical
- redhat certification, redhat-certification rhcertstore.py +1 moreredhat-certification does not properly sanitize paths in rhcertStore.py:__saveResultsFile. A...9.8 Critical
- [unknown] redhat-certification, redhat certification, enterprise linux +2 moreredhat-certification does not properly restrict files that can be download through the /download...7.5 High
- tp-link wr840nTP-Link WR840N devices allow remote attackers to cause a denial of service (connectivity loss)...7.5 High
- aditustoken project aditustokenThe approveAndCall function of a smart contract implementation for Aditus (ADI), an Ethereum...7.5 High
- lenovo e42-80 firmware, e42-80 isk firmware, e52-80 firmware +37 more +39 moreBIOS Modules Unprotected by Intel Boot Guard Vulnerable to Physical Attack6.8 Medium
- acd systems canvas drawAn exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version...8.8 High
- acd systems canvas drawAn exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version...8.8 High
- acd systems canvas drawAn exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw...8.8 High
- acd systems canvas drawAn exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw...8.8 High
- acd systems canvas drawAn exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0...8.8 High
- acd systems canvas drawAn exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0...8.8 High
- aveva indusoft web studio, aveva software, llc intouch machine edition, aveva intouch machine 2017 +2 moreAVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1...9.8 Critical
- apache igniteCode execution via deserialization in org.apache.ignite:ignite-core9.8 Critical
- sanscmsblog/index.php in SansCMS 0.7 has XSS via the q parameter.6.1 Medium
- seacmsSeaCMS v6.61 allows Remote Code execution by placing PHP code in a movie picture address (aka v&...8.8 High
- metinfoMetInfo 6.0.0 allows a CSRF attack to add a user account via a doaddsave action to admin/index...8.8 High
- metinfoMetInfo 6.0.0 allows XSS via a modified name of the navigation bar on the home page.4.8 Medium
- msvod cmsIn Msvod Cms v10, SQL Injection exists via an images/lists?cid= URI.9.8 Critical
- icmsdev icmsAn issue was discovered in idreamsoft iCMS before 7.0.10. XSS exists via the fourth and fifth...6.1 Medium
- webedition cmsThe installer script in webEdition CMS before 6.2.7-s1 and 6.3.x before 6.3.8-s1 allows remote...9.8 Critical
- check mk project mkCheck_MK through 1.2.5i2p1 allows local users to read arbitrary files via a symlink attack to a...5.5 Medium
- clementine-player clementineAn issue was discovered in Clementine Music Player 1.3.1. Clementine.exe is vulnerable to a user...5.5 Medium
- f5 big-iq centralized management, big-iq cloud and orchestration, enterprise manager +4 more +6 moreOn F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise...4.4 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1-11.6.3 specifically crafted HTTP...7.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreUnder certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1,...7.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreUnder certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6,...7.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within...5.3 Medium
- ibm rational rhapsody design manager, rational software architect design manager +1 moreIBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational...4.3 Medium
- ibm rational rhapsody design manager, rational software architect design manager +1 moreIBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational...5.4 Medium
- ibm rational rhapsody design manager, rational software architect design manager +1 moreIBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational...5.4 Medium
- ibm rational rhapsody design manager, rational software architect design manager +1 moreIBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational...5.4 Medium
- ibm rational doors next generation, rational requirements composer +1 moreIBM Rational DOORS Next Generation 5.0 through 5.0.2, 6.0 through 6.0.5 and IBM Rational...5.4 Medium
- servo smallvecDouble free in smallvec9.8 Critical
- axmldec project axmldecaxmldec 1.2.0 has an out-of-bounds write in the jitana::axml_parser::parse_start_namespace...7.5 High
- axml parser project parserCopyData in AxmlParser.c in AXML Parser through 2018-01-04 has an out-of-bounds read.7.5 High
- Show moreLoading…