CVEs published in July 2018
2,161 vulnerabilities, 252 critical, 3 exploited.
- siemens firmware variant dnp3 tcp for en100 ethernet module, firmware variant iec 61850 for en100 ethernet module, firmware variant iec104 for en100 ethernet module +10 more +12 moreA vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All...7.5 High
- siemens firmware variant dnp3 tcp for en100 ethernet module, firmware variant iec 61850 for en100 ethernet module, firmware variant iec104 for en100 ethernet module +12 more +14 moreA vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All...7.5 High
- niushop b2b2c multi-businessA file upload vulnerability in application/shop/controller/member.php in Niushop B2B2C Multi...8.8 High
- suricata-ids suricataSuricata before 4.0.5 stops TCP stream inspection upon a TCP RST from a server. This allows...7.5 High
- brynamics online tradeBrynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote...9.8 Critical
- suricata-ids suricataAn issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the...5.3 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreCross-site scripting vulnerability exists in Jenkins and Stapler Plugin5.4 Medium
- jenkinsExposure of Sensitive Information to an Unauthorized Actor in Jenkins4.3 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreImproper Neutralization of Input During Web Page Generation in Jenkins5.4 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreIncorrect Authorization in Jenkins4.3 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreIncorrect Authorization in Jenkins4.3 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreImproper Input Validation in Jenkins7.5 High
- jenkins, oracle communications cloud native core automated test suite +1 moreImproper Input Validation in Jenkins8.8 High
- apache openwhisk, apache software foundation docker skeleton runtime for apache openwhisk +1 moreIn Docker Skeleton Runtime for Apache OpenWhisk, a Docker action inheriting the Docker tag...9.8 Critical
- apache openwhisk, apache software foundation php runtime for apache openwhisk +1 moreIn PHP Runtime for Apache OpenWhisk, a Docker action inheriting one of the Docker tags openwhisk...9.8 Critical
- mathjaxMacro in MathJax running untrusted Javascript within a web browser5.4 Medium
- wesnoth the battle for wesnothThe Battle for Wesnoth Project version 1.7.0 through 1.14.3 contains a Code Injection...8.8 High
- html quickform project quickform, civicrm +1 morePEAR HTML_QuickForm version 3.2.14 contains an eval injection (CWE-95) vulnerability in...9.8 Critical
- mcafee data loss prevention (dlp) for windows, data loss prevention endpoint +1 more- Data Loss Prevention (DLP) for Windows - Exploiting Incorrectly Configured Access Control Security Levels vulnerability7.2 High
- gleeztech gleezcmsGleez Cms Cross-site Scripting in Profile Page5.4 Medium
- opennetworking onosOpen Networking Foundation (ONF) ONOS version 1.13.2 and earlier version contains a Directory...5.5 Medium
- chamilo lmsChamilo LMS version 11.x contains an Unserialization vulnerability in the "hash" GET parameter...9.8 Critical
- pydioPydio version 8.2.1 and prior contains an Unvalidated user input leading to Remote Code Execution...6.6 Medium
- pydioPydio version 8.2.0 and earlier contains a Server-Side Request Forgery (SSRF) vulnerability in...4.9 Medium
- pydioPydio version 8.2.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in ./core...6.1 Medium
- ffmpegFFmpeg before commit 5aba5b89d0b1d73164d3b81764828bb8b20ff32a contains an out of array read...6.5 Medium
- ffmpegFFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access...6.5 Medium
- ffmpegFFmpeg before commit 2b46ebdbff1d8dec7a3d8ea280a612b91a582869 contains a Buffer Overflow...8.8 High
- octobercms octoberOctober CMS Local File Inclusion8.1 High
- octobercms octoberOctober CMS version prior to build 437 contains a Cross Site Scripting (XSS) vulnerability in the...5.4 Medium
- thunlp thulacAn issue was discovered in libthulac.so in THULAC through 2018-02-25. A heap-based buffer over...9.8 Critical
- thunlp thulacAn issue was discovered in libthulac.so in THULAC through 2018-02-25. A SEGV can occur in...9.8 Critical
- thunlp thulacAn issue was discovered in libthulac.so in THULAC through 2018-02-25. "operator delete" is used...9.8 Critical
- thunlp thulacAn issue was discovered in libthulac.so in THULAC through 2018-02-25. A NULL pointer dereference...9.8 Critical
- mcafee web gateway (mwg), web gateway, mcafee,llc mcafee web gateway (mwg) +2 moreMcAfee Web Gateway (MWG) - Configuration/Environment manipulation vulnerability3.4 Low
- mcafee web gateway (mwg), web gateway, mcafee,llc mcafee web gateway (mwg) +2 moreMcAfee Web Gateway (MWG) - Directory Traversal vulnerability7.6 High
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0 through 5.2.6 is vulnerable to cross-site...5.4 Medium
- ibm websphere mqIBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a remotely authenticated attacker to to send...4.3 Medium
- libwav project libwavAn issue has been found in libwav through 2017-04-20. It is a SEGV in the function wav_write in...6.5 Medium
- axiosys bento4There exists one invalid memory read bug in AP4_SampleDescription::GetType() in...5.5 Medium
- axiosys bento4There exists one invalid memory read bug in AP4_SampleDescription::GetFormat() in...5.5 Medium
- axiosys bento4There exists one NULL pointer dereference vulnerability in AP4_JsonInspector::AddField in Ap4Atom...5.5 Medium
- axiosys bento4An issue was discovered in Bento4 1.5.1-624. There is a heap-based buffer over-read in...9.8 Critical
- axiosys bento4An issue was discovered in Bento4 1.5.1-624. There is an unspecified "heap-buffer-overflow" crash...9.8 Critical
- xiao5ucompany project xiao5ucompanyFeedback.asp in Xiao5uCompany 1.7 has XSS because the XSS protection mechanism in Safe.asp is...6.1 Medium
- gnu libredwgdwg_decode_eed in decode.c in GNU LibreDWG before 0.6 leads to a double free (in dwg_free_eed in...6.5 Medium
- aubio, opensuse leap, suse linux enterprise +2 moreAubio is vulnerable to out of bound read when samplerate > 50kHz8.8 High
- aubio, opensuse leap, suse linux enterprise +2 moreAubio is vulnerable to denial of service via aubio_pitch_set_unit function8.8 High
- aubioAubio is vulnerable to denial of service via aubio_source_avcodec_readframe function8.8 High
- seacmsSeaCMS 6.61 has two XSS issues in the admin_config.php file via certain form fields.6.1 Medium
- Show moreLoading…