CVEs published in July 2018
2,161 vulnerabilities, 252 critical, 3 exploited.
- linux kernelAn issue was discovered in the Linux kernel through 4.17.10. There is out-of-bounds access in...5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer...5.5 Medium
- thomsonreuters ultratax csThomson Reuters UltraTax CS 2017 on Windows has a password protection option; however, the level...7.5 High
- thomsonreuters ultratax cs 2017Thomson Reuters UltraTax CS 2017 on Windows, in a client/server configuration, transfers customer...7.5 High
- ibm bladecenter hs22 firmware, bladecenter hs23 firmware, bladecenter hs23e firmware +35 more +37 moreThe IMM2 First Failure Data Capture function collects management module logs and diagnostic...7.5 High
- linux kernel, [unknown] kernel:, redhat enterprise linux desktop +3 more +5 moreA flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore...7.8 High
- dhc online shop, dhc corporation online shop app for android +1 moreThe DHC Online Shop App for Android version 3.2.0 and earlier does not verify X.509 certificates...7.4 High
- logitech connection utility software, logicool co ltd. the installer of logicool connection utility software +1 moreUntrusted search path vulnerability in LOGICOOL CONNECTION UTILITY SOFTWARE versions before 2.30...7.8 High
- logitech game software, logicool co ltd. the installer of logicool game software +1 moreUntrusted search path vulnerability in LOGICOOL Game Software versions before 8.87.116 allows an...7.8 High
- glarysoft glary utilities, glarysoft ltd. installer of glary utilities +1 moreUntrusted search path vulnerability in the installer of Glarysoft Glary Utilities (Glary...7.8 High
- chama memocgiDirectory traversal vulnerability in ChamaNet MemoCGI v2.1800 to v2.2200 allows remote attackers...7.5 High
- nec platforms, ltd. calsos csdx and csdj series products, necplatforms calsos csdj-a firmware, calsos csdj-b firmware +6 more +8 moreCross-site scripting vulnerability in NEC Platforms Calsos CSDX and CSDJ series products (CSDX 1...6.1 Medium
- nec platforms, ltd. calsos csdx and csdj series products, necplatforms calsos csdj-a firmware, calsos csdj-b firmware +6 more +8 moreNEC Platforms Calsos CSDX and CSDJ series products (CSDX 1.37210411 and earlier, CSDX(P) 4...8.8 High
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreSQL injection vulnerability in the Notifications application in the Cybozu Garoon 3.5.0 to 4.6.2...8.8 High
- keycloak, redhat jboss enterprise application platform +1 morekeycloak-core discloses system properties6.5 Medium
- [unknown] satelliteRed Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you are entering...3.5 Low
- red hat httpd, redhat enterprise linux, apache http server +3 more +5 moreA regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing...6.5 Medium
- red hat eap-7, redhat jboss enterprise application platform +1 moreIt was found in EAP 7 before 7.0.9 that properties based files of the management and the...5.5 Medium
- red hat certificate systemAn input validation error was found in Red Hat Certificate System's handling of client provided...3.5 Low
clamavUbuntuclamav regressionNo score- redhat jbpm, kie jbpm-designer, redhat decision manager +1 more +3 moreXML External Entity Reference in jbpmmigration6.5 Medium
- hawt hawtio, redhat jboss fuse +1 moreInsecure cookie sharing in Hawtio8.7 High
- apache kafka, oracle database, primavera p6 enterprise project portfolio management +2 more +4 moreImproper Control of Generation of Code in Apache Kafka5.4 Medium
- openstack neutron, red hat openstack-neutron, redhat openstack +2 moreOpenStack Neutron Race Condition vulnerability5.3 Medium
- qemu, redhat openstack, virtualization +2 moreAn assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD)...5.3 Medium
- [unknown] cloudforms, redhat cloudforms management engine +1 moreCloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1 lacks RBAC controls on...6.5 Medium
- apache kafkaImproper Authentication in Apache Kafka6.8 Medium
- [unknown] pki-core, dogtagpki, redhat enterprise linux desktop +2 more +4 moreIt was found that a mock CMC authentication plugin with a hardcoded secret was accidentally...5.9 Medium
- foremanforeman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment...6.1 Medium
- red hat cfme, redhat cloudforms, cloudforms management engine +2 moreIn CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1, it was found that...8.8 High
- redhat openstack, [unknown] rhosp-director +1 moreA design flaw issue was found in the Red Hat OpenStack Platform director use of TripleO to enable...9.9 Critical
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient enforcement of file access permission in the activeTab case in Extensions in Google...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreEliding from the wrong side in an infobar in DevTools in Google Chrome prior to 68.0.3440.75...4.3 Medium
- google chromeInformation leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker...4.3 Medium
- google chromeInsufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75...7.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInteger overflows in Swiftshader in Google Chrome prior to 68.0.3440.75 potentially allowed a...8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440...6.5 Medium
- google chromeUse after free in Bluetooth in Google Chrome prior to 68.0.3440.75 allowed an attacker who...5.7 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA bad cast in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to...8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of timeout on extension install prompt in Extensions in Google Chrome prior to 68.0.3440.75...6.5 Medium
- google chromeInformation leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of reloads in Navigation in Google Chrome prior to 68.0.3440.75 allowed a...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient origin checks for CSS content in Blink in Google Chrome prior to 68.0.3440.75...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreImproper deserialization in WebGL in Google Chrome on Mac prior to 68.0.3440.75 allowed a remote...8.8 High
- google chromeInsufficient policy enforcement in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote...8.8 High
- Show moreLoading…