CVEs published in August 2018
1,014 vulnerabilities, 149 critical, 8 exploited.
- foxit, foxitsoftware foxit reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's...8.8 High
- focalscopeAn exploitable unauthenticated XML external injection vulnerability was identified in FocalScope...9.4 Critical
- micro focus groupwiseArbitrary File Upload in GroupWise Administration Console9.1 Critical
- cisco identity services engine softwareA vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...8.8 High
- cisco unified communications managerA vulnerability in the web-based management interface of Cisco Unified Communications Manager...6.1 Medium
- cisco sf300-08 firmware, sf300-24 firmware, sf300-24mp firmware +25 more +27 moreA vulnerability in the web-based management interface of Cisco Small Business 300 Series (Sx300)...5.4 Medium
- cisco sf300-08 firmware, sf300-24 firmware, sf300-24mp firmware +25 more +27 moreA vulnerability in the web-based management interface of Cisco Small Business 300 Series (Sx300)...5.4 Medium
- cisco web security applianceA vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could...6.1 Medium
- cisco advanced malware protection for endpointsA vulnerability in Cisco AMP for Endpoints Mac Connector Software installed on Apple macOS 10.12...5.9 Medium
- cisco prime collaboration, prime collaboration provisioning +1 moreA vulnerability in the password change function of Cisco Prime Collaboration Provisioning could...6.5 Medium
- nasa cfitsioMultiple exploitable buffer overflow vulnerabilities exist in image parsing functionality of the...8.8 High
- dleviet datalife engineAn issue was discovered in DataLife Engine (DLE) through 13.0. An attacker can use XSS (related...5.4 Medium
- davolink dvw-3200n, dvw-3200n firmware +1 moreDavolink DVW-3200N all version prior to Version 1.00.06. The device generates a weak password...9.8 Critical
- https://github.com/geopython pycswSQL Injection in pycsw9.1 Critical
- ibm platform symphony, spectrum symphony +1 moreIBM Spectrum Symphony and Platform Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user...8.8 High
- rpm yum-utils, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreA directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to...8.8 High
- canonical cloud-initThe default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0"...4.6 Medium
- keycloak, redhat single sign-on +1 moreKeycloak Authentication Error5.4 Medium
- keycloakImproper Authentication in org.keycloak:keycloak-core3.7 Low
- redhat openshift, red hat openshift enterprise, redhat openshift container platform +2 moreAn input validation flaw was found in the way OpenShift 3 handles requests for images. A user,...3.1 Low
- computerinsel photolineA memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel...8.8 High
- computerinsel photolineA memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel...8.8 High
- computerinsel photolineA memory corruption vulnerability exists in the PSD-parsing functionality of Computerinsel...8.8 High
- intel smart sound technologyDriver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a...8.8 High
- intel saffron memorybaseEscalation of privilege in Intel Saffron admin application before 11.4 allows an authenticated...5.7 Medium
- intel smart sound technologyDriver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a...8.8 High
- intel smart sound technologyDriver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a...8.8 High
- intel saffron memorybaseEscalation of privilege in Intel Saffron MemoryBase before 11.4 allows an authenticated user...5.7 Medium
- intel saffron memorybaseEscalation of privilege in Intel Saffron MemoryBase before version 11.4 potentially allows an...8.0 High
- intel distribution for pythonInsufficient Input Validation in Bleach module in INTEL Distribution for Python versions prior to...7.8 High
- opensuse openbuildservice, open build service +1 moredelete package via link exploit in open buildservice6.0 Medium
- opensuse openbuildservice, open build service +1 moreopenbuildservice allowed deleting packages via project links4.4 Medium
- intel graphics driver, intel corporation mobile, desktop, server, workstation, and embedded processors based on intel core and atom processors using an affected driver. +1 moreOut-of-bounds read condition in older versions of some Intel Graphics Driver for Windows code...5.5 Medium
- djangoproject django, canonical ubuntu linux, debian linux +2 moreDjango open redirect6.1 Medium
- [unknown] fuse, redhat jboss fuse, jboss a-mq +2 moreIt was found that the JMX endpoint of Red Hat JBoss Fuse 6, and Red Hat A-MQ 6 deserializes the...5.3 Medium
- apache karaf, redhat jboss a-mq, jboss fuse +2 moreIt was found that the Karaf container used by Red Hat JBoss Fuse 6.x, and Red Hat JBoss A-MQ 6.x,...7.2 High
- nagiosA privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when...6.7 Medium
- red hat brms, redhat jboss bpm suite, jboss business rules management system +2 moreJBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor. The flaw...5.4 Medium
- jenkins tinfoil securityExposure of sensitive information vulnerability5.5 Medium
- jenkins kubernetesExposure of Sensitive Information in Jenkins Kubernetes Plugin8.8 High
- jenkins confluence publisherServer-Side Request Forgery (SSRF) in Jenkins Confluence Publisher Plugin4.3 Medium
- jenkins publish over cifsJenkins Publisher Over CIFS Plugin confused deputy vulnerability4.2 Medium
- jenkins resource disposerJenkins Resource Disposer Plugin allows attacker to stop tracking specified resource4.3 Medium
- jenkins ssh agentJenkins SSH Agent Plugin exposes SSH private key password to users with permission to read the build log6.5 Medium
- jenkins inedo buildmasterJenkins Inedo BuildMaster Plugin globally and unconditionally disabled SSL/TLS certificate validation7.4 High
- jenkins inedo progetJenkins Inedo ProGet Plugin globally and unconditionally disabled SSL/TLS certificate validation7.4 High
- anchore container image scannerExposure of sensitive information in Anchore Container Image Scanner Jenkins Plugin6.5 Medium
- agiletestware pangolin connector for testrailJenkins Agiletestware Pangolin Connector for TestRail Plugin CSRF vulnerability and missing permission checks6.5 Medium
- jenkins meliora testlabJenkins meliora-testlab Plugin allows attackers with file system access to Jenkins master to obtain API key6.5 Medium
- jenkins maven artifact choicelistprovider \(nexus\)Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin CSRF vulnerability and missing permission checks5.4 Medium
- Show moreLoading…