CVEs published in July 2018
2,161 vulnerabilities, 252 critical, 3 exploited.
- google chromeInsufficient policy enforcement in ServiceWorker in Google Chrome prior to 68.0.3440.75 allowed a...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA race condition in Oilpan in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to...7.5 High
- google chromeType confusion in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to...8.8 High
- google chrome, canonical ubuntu linux +1 moreIncorect derivation of a packet length in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a...8.8 High
- google chromeIncorrect handling of frames in the VP8 parser in Google Chrome prior to 68.0.3440.75 allowed a...6.5 Medium
- google chromeInsufficient data validation in WebGL in Google Chrome prior to 68.0.3440.75 allowed a remote...8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA precision error in Skia in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who...8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreThe implementation of the Page.downloadBehavior backend unconditionally marked downloaded files...9.6 Critical
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreBad cast in DevTools in Google Chrome on Win, Linux, Mac, Chrome OS prior to 66.0.3359.117...8.8 High
- google chromeIncorrect handling of CORS in ServiceWorker in Google Chrome prior to 66.0.3359.117 allowed a...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreAn out of bounds read in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker...8.8 High
- google chromeInsufficient data validation in filesystem URIs in Google Chrome prior to 68.0.3440.75 allowed a...6.5 Medium
- google chromeInsufficient data validation in Extensions API in Google Chrome prior to 68.0.3440.75 allowed an...6.5 Medium
- quickheal antivirus pro, internet security, total security +2 moreQuick Heal Total Security 64 bit 17.00 (QHTS64.exe), (QHTSFT64.exe) - Version 10.0.1.38; Quick...7.8 High
- opmantek open-auditCross-site scripting (XSS) vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows...6.1 Medium
- mondula multi step formThe Mondula Multi Step Form plugin through 1.2.5 for WordPress allows XSS via the fw_data [id][1]...6.1 Medium
- lica minicmts e8k firmwareLICA miniCMTS E8K(u/i/...) devices allow remote attackers to obtain sensitive information via a...7.5 High
- quazipQuaZIP before 0.7.6 is vulnerable to directory traversal, allowing attackers to write to...5.5 Medium
- icsharpcode sharpziplibImproper Limitation of a Pathname to a Restricted Directory in SharpZipLib5.5 Medium
- archiver project archiverArbitrary File Write via Archive Extraction in mholt/archiver5.5 Medium
- adamhathcock sharpcompressDirectory Traversal in SharpCompress5.5 Medium
- dotnetzip dotnetzip.semvered, dotnetzip.semverd project dotnetzip.semverd +1 moreDotNetZip Zip-Slip Vulnerability5.5 Medium
- adm-zip project adm-zipArbitrary File Write in adm-zip5.5 Medium
- node.js unzipperArbitrary File Write via Archive Extraction in unzipper5.5 Medium
- zip4jImproper Limitation of a Pathname to a Restricted Directory in Zip4j6.5 Medium
- jrebel zt-zipImproper Limitation of a Pathname to a Restricted Directory in zt-zip5.5 Medium
- symantec inventory, symantec corporation inventory plugin for symantec management agent +1 moreThe Inventory Plugin for Symantec Management Agent prior to 7.6 POST HF7, 8.0 POST HF6, or 8.1...8.0 High
- zte zxiptv-ucm, zxiptv-ucm firmware +1 moreSQL injection vulnerability in all versions prior to V2.01.05.09 of the ZTE ZXIPTV-UCM product...7.5 High
- zte zxcdn-sns, zxcdn-sns firmware +1 moreSQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows...7.5 High
- zte zxr10 1800-2s, zxr10 1800-2s firmware +1 moreAll versions prior to ZSRV2 V3.00.40 of the ZTE ZXR10 1800-2S products allow remote authenticated...7.2 High
- zte zxiptv-epg, zxiptv-epg firmware +1 moreAll versions prior to V5.09.02.02T4 of the ZTE ZXIPTV-EPG product use the Java RMI service in...9.8 Critical
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreF5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.6, or 11.2.1-11.6.3.2 HTTPS health monitors do not...8.1 High
- f5 big-ip (asm), big-ip application security manager +1 moreWhen F5 BIG-IP ASM 13.0.0-13.1.0.1, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.5.1-11.5.6 is...7.5 High
- f5 big-ip (asm), big-ip application security manager +1 moreUnder certain conditions, on F5 BIG-IP ASM 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, 11...7.5 High
- f5 big-ip domain name system, big-ip global traffic manager, big-ip link controller +2 more +4 moreOn F5 BIG-IP DNS 13.1.0-13.1.0.7, 12.1.3-12.1.3.5, DNS Express / DNS Zones accept NOTIFY messages...3.7 Low
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip application acceleration manager +8 more +10 moreA remote attacker may be able to disrupt services on F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5,...5.3 Medium
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreA remote attacker via undisclosed measures, may be able to exploit an F5 BIG-IP APM 13.0.0-13.1.0...7.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreThrough undisclosed methods, on F5 BIG-IP 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or...7.4 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +7 more +9 moreF5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.1 virtual servers with HTTP/2...7.5 High
- vmware esxi, fusion, workstation +2 moreVMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600...6.5 Medium
- vmware horizon view agent, horizon view agents +1 moreVMware Horizon View Agents (7.x.x before 7.5.1) contain a local information disclosure...7.8 High
- asus hg100 firmwareASUS HG100 devices with firmware before 1.05.12 allow unauthenticated access, leading to remote...9.8 Critical
- wancmswancms 1.0 through 5.0 allows remote attackers to cause a denial of service (resource consumption...7.5 High
- freedesktop poppler, canonical ubuntu linux, debian linux +5 more +7 morePoppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory...6.5 Medium
- [unknown] fuse, debian linux, redhat enterprise linux desktop +2 more +4 moreIn fuse before versions 2.9.8 and 3.x before 3.2.5, fusermount is vulnerable to a restriction...5.3 Medium
- dell rsa archer, rsa archer +1 moreRSA Archer, versions prior to 6.4.0.1, contain an authorization bypass vulnerability in the REST...8.8 High
- dell rsa archer, rsa archer +1 moreRSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerability. A...8.2 High
- cloud foundry uaa, pivotal software cloud foundry uaa +1 moreCloud Foundry UAA accepts refresh token as access token on admin endpoints7.5 High
- pivotal application servicePivotal Apps Manager included in Pivotal Application Service, versions 2.2.x prior to 2.2.1 and 2...6.5 Medium
- aveva intouch, intouch 2014, intouch 2017 +2 moreAVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update...9.8 Critical
- Show moreLoading…