CVEs published in August 2018
1,014 vulnerabilities, 149 critical, 8 exploited.
- sensiolabs symfony, debian linux +1 moreSymfony Directory Traversal7.5 High
- sensiolabs symfony, debian linux +1 moreSymfony CSRF Vulnerability5.9 Medium
- paypal php permissions sdkpaypal/permissions-sdk-php reflected Cross-site Scripting (XSS)5.4 Medium
- paypal php invoice sdkpaypal/invoice-sdk-php reflected XSS5.4 Medium
- icmsdev icmsAn SSRF vulnerability was discovered in idreamsoft iCMS before V7.0.11 because the remote...7.5 High
- insteon, insteon hub firmware +1 moreAn exploitable permanent denial of service vulnerability exists in Insteon Hub running firmware...8.7 High
- tenable securitycenter, security center +1 moreIn SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an...5.4 Medium
- tenable securitycenter, security center +1 moreIn SecurityCenter versions prior to 5.7.0, a username enumeration issue could allow an...8.8 High
- insteon sap, sap business planning and consolidation +1 moreAn exploitable XML external entity vulnerability exists in the reporting functionality of SAP BPC...6.4 Medium
- insteon, insteon hub firmware +1 moreAn attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub...8.5 High
- insteon, insteon hub firmware +1 moreAn attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub...8.5 High
- insteon, insteon hub firmware +1 moreAn attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub...8.5 High
- insteon, insteon hub firmware +1 moreAn attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub...8.5 High
- insteon, insteon hub firmware +1 moreAn attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub...8.5 High
- insteon, insteon hub firmware +1 moreAn attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub...8.5 High
- insteon, insteon hub firmware +1 moreAn attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub...8.5 High
- insteon, insteon hub firmware +1 moreAn attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub...8.5 High
- insteon, insteon hub firmware +1 moreAn attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub...8.5 High
- insteon, insteon hub firmware +1 moreAn attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub...8.5 High
- insteon, insteon hub firmware +1 moreAn exploitable stack-based buffer overflow vulnerability exists in Insteon Hub running firmware...8.5 High
- insteon, insteon hub firmware +1 moreAn exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012....5.4 Medium
- insteon, insteon hub firmware +1 moreAn exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012....8.5 High
- [unknown] ttembedAn input validation flaw exists in ttembed. With a crafted input file, an attacker may be able to...7.5 High
- [unknown] ttembedCertain input files may trigger an integer overflow in ttembed input file processing. This...4.3 Medium
- fibranet monitorixMonitorix before 3.10.1 allows XSS via CGI variables.6.1 Medium
- php, netapp storage automation store +1 morePHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and...9.8 Critical
- php, netapp storage automation store +1 morePHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.7.5 High
- apache tomcat, debian linux +1 moreApache Tomcat Race Condition vulnerability5.9 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- apache axis, debian linux, oracle agile engineering data management +35 more +37 moreModerate severity vulnerability that affects apache axis6.1 Medium
- naver corporation whale browser, navercorp whale +1 moreWhale Browser before 1.3.48.4 displays no URL information but only a title of a web page on the...5.3 Medium
- nic knot resolver, cz.nic knot-resolver +1 moreImproper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows...7.5 High
libtirpcSUSESecurity update for libtirpcNo score- oracle fusion middleware, oracle corporation fusion middleware mapviewer +1 moreVulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware ...6.5 Medium
- oracle fusion middlewareVulnerability in the Oracle Fusion Middleware component of Oracle Fusion Middleware (subcomponent...6.5 Medium
- oracle weblogic serverVulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent:...4.9 Medium
- mikrotik routerosMikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files...9.1 Critical
- intelliants subrionSubrion CMS Cross-site Scripting6.1 Medium
- rejucms project rejucmsrejucms 2.1 has stored XSS via the admin/book.php content parameter.6.1 Medium
busyboxDebianbusybox - regression updateNo score- google android, linux kernel, canonical ubuntu linux +1 more +3 moreIn the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out...8.4 High
- libraw, canonical ubuntu linux +1 moreAn error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw...6.5 Medium
- libraw, canonical ubuntu linux +1 moreAn error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw...6.5 Medium
- libraw, canonical ubuntu linux +1 moreAn error within the "rollei_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions...8.8 High
- libraw, canonical ubuntu linux +1 moreAn error within the "samsung_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions...8.8 High
- php, canonical ubuntu linux, debian linux +1 more +3 moreexif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x...5.5 Medium
- subrion cmsSubrion 4.2.1 is vulnerable to Improper Access control because user groups not having access to...6.5 Medium
- subrion cmsSubrion CMS XSS5.4 Medium
- johnson controls bcpro (bcm), metasys system, johnsoncontrols bcpro +2 moreJohnson Controls Metasys and BCPro Generation of Error Message Containing Sensitive Information4.3 Medium
- foxit, foxitsoftware foxit reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's...8.0 High
- Show moreLoading…