CVEs published in July 2018
2,161 vulnerabilities, 252 critical, 3 exploited.
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one...6.5 Medium
- debian linux, linux kernel, xen +1 more +3 moreAn issue was discovered in the Linux kernel through 4.17.11, as used in Xen through 4.11.x. The...7.8 High
- qemu, canonical ubuntu linux, redhat enterprise linux +2 moreA stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before...8.3 High
- red hat subscription-managerIt was found that subscription-manager's DBus interface before 1.19.4 let unprivileged user...8.2 High
- jenkins distributed fork, jenkins project distfork jenkins plugin +1 moreMissing permission checks in Jenkins Distributed Fork Plugin8.8 High
- jenkins pipeline classpath step, jenkins project pipeline: classpath step jenkins plugin +1 moreJenkins Pipeline Classpath Step plugin allowed Script Security sandbox bypass8.5 High
- jenkins active directory, jenkins project active directory jenkins plugin +1 moreJenkins Active Directory Plugin did not verify certificate of AD server8.1 High
- jenkins jenkins-ssh-slaves-plugin, ssh slaves +1 moreJenkins SSH Build Agents Plugin did not verify host keys6.8 Medium
- red hat postgresql init script, redhat enterprise linux desktop, enterprise linux server +3 more +5 morePrivilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. An...6.5 Medium
- linux kernel, kernel:, redhat enterprise linux desktop +3 more +5 moreIt was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation...7.5 High
- redhat cloudforms, red hat cfme, redhat cloudforms management engine +2 moreA logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant...4.9 Medium
- red hat business-central, redhat jboss bpm suite +1 moreJBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a reflected XSS via artifact upload....6.1 Medium
- red hat business-central, redhat jboss bpm suite +1 moreJBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a stored XSS via several lists in...6.1 Medium
- redhat jboss bpm suite, red hat bpms, jdv +1 more +3 moreIt was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2...2.6 Low
- [unknown] cloudforms, redhat cloudforms management engine +1 moreA number of unused delete routes are present in CloudForms before 5.7.2.1 which can be accessed...4.1 Medium
- jenkins jenkins-mailer-plugin, mailer +1 moreExposure of Sensitive Information to an Unauthorized Actor in Jenkins-mailer-plugin3.7 Low
- keycloakKeycloak vulnerable to infinite loop based Denial of Service7.5 High
- qemu, qemu qemu: +1 moreA stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the...5.5 Medium
- rpm-ostree, rpm-ostree rpm-ostree-client, project atomic rpm-ostree, +1 more +3 moreIt was discovered that rpm-ostree and rpm-ostree-client before 2017.3 fail to properly check GPG...5.3 Medium
- openstack heat, redhat openstack, red hat openstack-heat +2 moreAn access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1...5.9 Medium
- red hat ovirt-engine-extension-aaa-jdbc, redhat enterprise virtualization +1 moreWhen updating a password in the rhvm database the ovirt-aaa-jdbc-tool tools before 1.1.3 fail to...6.8 Medium
- red hat ipa, freeipa, redhat enterprise linux +5 more +7 moreA vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did...8.1 High
- foreman katello-debug, theforeman katello, redhat satellite +1 more +3 moreA flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure...7.3 High
superstaticnpmPath Traversal in superstaticNo score- ovirt, red hat ovirt-engine, redhat virtualization +2 moreovirt-engine Logs Plaintext Passwords To File7.2 High
- red hat ansible tower, redhat cloudforms +1 moreA flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. If a...8.4 High
- [unknown] cfme, redhat cloudforms management engine +1 moreThe dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud...4.1 Medium
- [unknown] wildfly, redhat jboss enterprise application platform +1 moreIt was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows...7.7 High
- [unknown] cloudforms, redhat cloudforms management engine +1 moreA flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the...6.5 Medium
- red hat openshift, redhat openshift container platform +1 moreA flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin....6.5 Medium
- red hat undertow, redhat jboss enterprise application platform +1 moreUndertow Request Smuggling vulnerability2.6 Low
- redhat wildfly core, jboss enterprise application platform, virtualization +2 moreImproper Limitation of a Pathname to a Restricted Directory in WildFly5.5 Medium
- mcafee drive encryption (mde), drive encryption +1 moreDrive Encryption (MDE) - Authentication Bypass vulnerability7.0 High
- [unknown] cloudforms, redhat cloudforms management engine +1 moreIt was found that CloudForms does not verify that the server hostname matches the domain name in...6.5 Medium
- redhat openstack, [unknown] openstack-mistral +1 moreAn accessibility flaw was found in the OpenStack Workflow (mistral) service where a service log...5.9 Medium
- [unknown] jboss, redhat jboss enterprise application platform +1 moreIt was found that the JAXP implementation used in JBoss EAP 7.0 for SAX and DOM parsing is...8.7 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before...5.4 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before...5.4 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before...6.1 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before...8.8 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before...7.5 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.2. A Denial...7.5 High
mailmanDebianmailman - regression updateNo score- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference...5.5 Medium
- linux kernelAn issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference...5.5 Medium
- linux kernelAn issue was discovered in the Linux kernel through 4.17.10. There is a buffer overflow in...5.5 Medium
- linux kernelAn issue was discovered in the Linux kernel through 4.17.10. There is an out-of-bounds access in...5.5 Medium
- linux kernelAn issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer...5.5 Medium
- linux kernelAn issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer...5.5 Medium
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel through 4.17.10. There is a use-after-free in...5.5 Medium
- Show moreLoading…