CVEs published in July 2018
2,161 vulnerabilities, 252 critical, 3 exploited.
- f5 big-ip controller, f5 networks, inc. container connector +1 moreThe F5 BIG-IP Controller for Kubernetes 1.0.0-1.5.0 (k8s-bigip-crtl) passes BIG-IP username and...8.8 High
- red-gate .net reflector, smartassembly +1 moreRedgate .NET Reflector before 10.0.7.774 and SmartAssembly before 6.12.5 allow attackers to...7.8 High
- intenogroup iopsys firmwareread_tmp and write_tmp in Inteno IOPSYS allow attackers to gain privileges after writing to /tmp...7.8 High
- openstack keystone, redhat openstack, debian linux +2 moreIn the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an...5.3 Medium
- seeddmsPersistent Cross-Site Scripting (XSS) vulnerability in the "Categories" feature in SeedDMS ...6.1 Medium
- seeddmsCross-Site Scripting (XSS) vulnerability in every page that includes the "action" URL parameter...6.1 Medium
- seeddmsSQL injection vulnerability in the "Users management" functionality in SeedDMS (formerly LetoDMS...8.8 High
- seeddmsThis vulnerability allows remote attackers to execute arbitrary code in SeedDMS (formerly LetoDMS...8.8 High
- seeddmsUnrestricted file upload vulnerability in "op/op.UploadChunks.php" in SeedDMS (formerly LetoDMS...8.8 High
- seeddmsA directory traversal flaw in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows an...6.5 Medium
- intuit lacerteIntuit Lacerte 2017 for Windows in a client/server environment transfers the entire customer list...7.5 High
- pleasantsolutions pleasant password serverBecause of insufficient authorization checks it is possible for any authenticated user to change...4.3 Medium
- pleasantsolutions pleasant password serverDue to missing authorization checks, any authenticated user is able to list, upload, or delete...8.1 High
- huawei espace u1981 firmware, rse6500 firmware, softco firmware +2 more +4 moreSome Huawei products RSE6500 V500R002C00; SoftCo V200R003C20SPCb00; VP9660 V600R006C10; eSpace...5.9 Medium
- apache camelApache is vulnerable to XXE in XSD validation processor9.8 Critical
- apache tomcat native, debian linux +1 moreApache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 has a flaw that does not properly check...7.4 High
- apache tomcat native, debian linux +1 moreWhen using an OCSP responder Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 did not...7.4 High
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.1 - 5.2.6.3 is vulnerable to cross-site...5.4 Medium
- ibm api connectIBM API Connect 5.0.0.0-5.0.8.3 Developer Portal does not enforce Two Factor Authentication (TFA)...5.9 Medium
chancrates.iochan is end-of-life; use crossbeam-channel insteadNo score- kamailio, debian linux +1 moreIn Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header...9.8 Critical
- libraw, canonical ubuntu linux +1 moreAn integer overflow error within the "identify()" function (internal/dcraw_common.cpp) in LibRaw...6.5 Medium
- libraw, canonical ubuntu linux +1 moreAn integer overflow error within the "parse_qt()" function (internal/dcraw_common.cpp) in LibRaw...6.5 Medium
- libraw, canonical ubuntu linux +1 moreAn error within the "parse_minolta()" function (dcraw/dcraw.c) in LibRaw versions prior to 0.18...6.5 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +3 more +5 morelibxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service ...6.5 Medium
- https://github.com/microlinkhq metascrapermetascraper before v5.2.0 vulnerable to stored cross-site scripting6.1 Medium
- https://github.com/vvo whereisCommand Injection in whereis9.8 Critical
- libcgroup project libcgroup, debian linux, fedoraproject fedora +2 morelibcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the...8.1 High
- [unknown] openstack-tripleo-heat-templates, redhat openstack, openstack tripleo heat templates +2 moreA vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When...8.8 High
- lenovo xclarity administratorIn Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user can,...8.8 High
- lenovo xclarity administratorIn Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to...7.5 High
- lenovo xclarity administratorIn Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user may...8.8 High
- synology diskstation manager (dsm), diskstation manager +1 moreUse of insufficiently random values vulnerability in SYNO.Encryption.GenRandomKey in Synology...7.4 High
- pbc project pbcAn issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A use-after-free can occur...9.8 Critical
- pbc project pbcAn issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in...7.5 High
- pbc project pbcAn issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in...7.5 High
- pbc project pbcAn issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in...7.5 High
- pbc project pbcAn issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in...7.5 High
- pbc project pbcAn issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in...7.5 High
- pbc project pbcAn issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in...7.5 High
- pbc project pbcAn issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A NULL pointer dereference...7.5 High
- pbc project pbcAn issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A buffer over-read can...7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 moredrivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucma_leave_multicast to...7.8 High
- xycms project xycmssystem/edit_book.php in XYCMS 1.7 has stored XSS via a crafted add_do.php request, related to...6.1 Medium
- gxlcmsThe add function in www/Lib/Lib/Action/Admin/TplAction.class.php in Gxlcms v1.1.4 allows remote...9.8 Critical
- arm mbed tls, debian linux +1 moreARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial...4.7 Medium
- arm mbed tls, debian linux +1 moreARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve...5.9 Medium
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one...8.8 High
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad...8.8 High
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank...6.5 Medium
- Show moreLoading…