CVEs published in August 2018
1,014 vulnerabilities, 149 critical, 8 exploited.
- 1234n minicms An issue was discovered in MiniCMS 1.10. There is an mc-admin/post.php?tag= XSS vulnerability for... 6.1 Medium
-
squirrelmailMageia Updated squirrelmail packages fix XSS-security vulnerability No score - nvidia geforce experience NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability when... 2.5 Low
- nvidia geforce experience NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability during... 4.7 Medium
- nvidia geforce experience NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability when... 7.0 High
- dell bsafe, bsafe micro edition suite, oracle application testing suite +10 more +12 more RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x... 5.9 Medium
- dell bsafe, bsafe crypto-c micro edition, bsafe micro edition suite +12 more +14 more RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition... 6.5 Medium
- dell bsafe, bsafe micro edition suite, oracle application testing suite +10 more +12 more RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x... 4.4 Medium
- dell bsafe, bsafe micro edition suite, oracle application testing suite +10 more +12 more RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A... 7.5 High
- hackerone simplehttpserver simplehttpserver allows directory traversal and file listing 7.5 High
- phpkaiyuancms phpopensourcecms phpkaiyuancms PhpOpenSourceCMS (POSCMS) V3.2.0 allows an unauthenticated user to execute... 9.8 Critical
- opswat metadefender OPSWAT MetaDefender before v4.11.2 allows CSV injection. 7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 more An issue was discovered in yurex_read in drivers/usb/misc/yurex.c in the Linux kernel before 4.17... 7.8 High
- damicms An issue was discovered in damiCMS V6.0.1. It relies on the PHP time() function for cookies,... 9.8 Critical
- damicms An issue was discovered in damiCMS V6.0.1. Remote code execution can occur via PHP code in a... 7.2 High
- damicms An issue was discovered in damiCMS V6.0.1. There is Directory Traversal via '|' characters in the... 2.7 Low
- cpanel cPanel through 74 allows XSS via a crafted filename in the logs subdirectory of a user account,... 6.1 Medium
- morningstarsecurity whatweb MorningStar WhatWeb 0.4.9 has XSS via JSON report files. 6.1 Medium
- 1234n minicms MiniCMS V1.10 has XSS via the mc-admin/post-edit.php tags parameter. 6.1 Medium
- michael-roth-software pftp Michael Roth Software Personal FTP Server (PFTP) through 8.4f allows remote attackers to cause a... 7.5 High
- micro focus data center automation containerized suite, hybrid cloud management containerized suite, network operations management (nom) suite cdf +13 more +15 more Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite... 7.1 High
- micro focus data center automation containerized suite, hybrid cloud management containerized suite, network operations management (nom) suite cdf +7 more +9 more Micro Focus Container Deployment Foundation (CDF), Remote Code Execution 8.8 High
- trend micro officescan, trendmicro officescan xg +1 more A Named Pipe Request Processing Out-of-Bounds Read Information Disclosure vulnerability in Trend... 4.7 Medium
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus \+ security +3 more +5 more An Out-of-Bounds Read Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer)... 7.8 High
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus \+ security +3 more +5 more A Missing Impersonation Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer... 7.8 High
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus \+ security +3 more +5 more A Deserialization of Untrusted Data Privilege Escalation vulnerability in Trend Micro Security... 7.8 High
- argussurveillance dvr Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File... 7.5 High
- mystrom wifi bulb firmware, wifi button firmware, wifi button plus firmware +3 more +5 more An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi... 8.8 High
- mystrom wifi bulb firmware, wifi button firmware, wifi button plus firmware +3 more +5 more An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi... 6.5 Medium
- mystrom wifi bulb firmware, wifi button firmware, wifi button plus firmware +3 more +5 more An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi... 8.1 High
- mystrom wifi switch firmware myStrom WiFi Switch V1 devices before 2.66 did not sanitize a parameter received from the cloud... 9.8 Critical
- mystrom wifi bulb firmware, wifi button firmware, wifi button plus firmware +3 more +5 more An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi... 8.1 High
- epson wf-2750 firmware EPSON WF-2750 printers with firmware JP02I2 do not properly validate files before running updates... 7.5 High
- epson iprint The ContentProvider in the EPSON iPrint application 6.6.3 for Android does not properly restrict... 7.5 High
- epson iprint The EPSON iPrint application 6.6.3 for Android contains hard-coded API and Secret keys for the... 7.5 High
- epson wf-2750 firmware On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs. Remote... 7.5 High
- epson wf-2750 firmware On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is... 6.1 Medium
- xovis pc2 firmware, pc2r firmware, pc3 firmware +2 more Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow Directory Traversal. 7.5 High
- xovis pc2 firmware, pc2r firmware, pc3 firmware +2 more Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow XXE. 4.9 Medium
- xovis pc2 firmware, pc2r firmware, pc3 firmware +2 more Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow CSRF. 8.8 High
- ibm urbancode deploy IBM UrbanCode Deploy 6.0 through 6.2.2.1 could allow an authenticated user to read sensitive... 3.1 Low
- ibm openpages grc platform IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow a local user to obtain sensitive... 4.0 Medium
- ibm cloud orchestrator A vulnerability has been identified in IBM Cloud Orchestrator 2.3, 2.3.0.1, 2.4, and 2.4.0.1 that... 3.3 Low
- codemenschen gift vouchers The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the template_id... 9.8 Critical
-
GraphicsMagickSUSE Security update for GraphicsMagick No score -
ImageMagickSUSE Security update for ImageMagick No score - red hat spice-client, spice project spice +1 more Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling... 7.6 High
- broadcom release automation Insecure deserialization of a specially crafted serialized object, in CA Release Automation 6.5... 9.8 Critical
- ca technologies ppm, broadcom project portfolio management +1 more An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15... 9.1 Critical
- ca technologies ppm, broadcom project portfolio management +1 more Insufficient input validation in the gridExcelExport functionality, in CA PPM 14.3 and below, 14... 6.1 Medium
- Show olderLoading…