CVEs published in August 2018
1,014 vulnerabilities, 149 critical, 8 exploited.
- matera bancoMatera Banco 1.0.0 is vulnerable to path traversal (allowing access to system files outside the...5.3 Medium
- matera bancoMatera Banco 1.0.0 allows CSRF, as demonstrated by a /contingency/web/messageSend...8.8 High
- matera bancoMatera Banco 1.0.0 mishandles Java errors in the backend, as demonstrated by a stack trace...9.8 Critical
- matera bancoMatera Banco 1.0.0 is vulnerable to multiple stored XSS, as demonstrated by the sca/privilegio...6.1 Medium
- sonicwall global management system (gms), global management system +1 moreA vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on...9.8 Critical
- restforce, https://github.com/restforce restforce ruby gem +1 morerestforce vulnerable to Improper Input Validation9.8 Critical
- uniview ezplayerA vulnerability in uniview EZPlayer 1.0.6 could allow an attacker to execute arbitrary code on a...7.8 High
- netapp clustered data ontapRead-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release...8.8 High
- cgit project cgit, debian linux +1 morecgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http...7.5 High
- ukcmsA file upload vulnerability exists in ukcms v1.1.7 and earlier. The vulnerability is due to the...7.2 High
- seacmsSeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address (aka ip)...8.8 High
- servicenowreport_viewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to...8.8 High
- samsung syncthru web serviceSamsung Syncthru Web Service V4.05.61 is vulnerable to CSRF on every request, as demonstrated by...8.8 High
- 3cx web serverThe Web server in 3CX version 15.5.8801.3 is vulnerable to Information Leakage, because of...5.3 Medium
- 3cx web serverThe Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on all stack traces'...6.1 Medium
- 3cx web serverThe Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on the api/CallLog...6.1 Medium
- samsung syncthru web serviceSamsung Syncthru Web Service V4.05.61 is vulnerable to Multiple unauthenticated XSS attacks on...6.1 Medium
- tecrail responsive filemanagerupload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.9.8 Critical
- cryptogsThe endCoinFlip function and throwSlammer function of the smart contract implementations for...7.5 High
- suncontractThe mintTokens function of a smart contract implementation for SunContract, an Ethereum token,...7.5 High
- mantisbtMantisBT allows XSS on the Edit Filter page via crafted filter name6.1 Medium
- mantisbtMantisBT allows XSS via View Filters page6.1 Medium
- pearsonvue console 8, iqsystem 7 +1 moreThe report-viewing feature in Pearson VUE Certiport Console 8 and IQSystem 7 before 2018-06-26...6.7 Medium
- gitlabAn issue was discovered in GitLab Community Edition and Enterprise Edition before 10.7.6, 10.8.x...5.4 Medium
- gitlabAn issue was discovered in GitLab Community Edition and Enterprise Edition before 10.7.6, 10.8.x...5.4 Medium
- gitlabAn issue was discovered in GitLab Community Edition and Enterprise Edition 10.7.x before 10.7.6....5.4 Medium
- charlesproxy charlesRace condition in the Charles Proxy Settings suid binary in Charles Proxy before 4.2.1 allows...7.0 High
- sensiolabs symfonySymfony Host Header Injection7.2 High
- sensiolabs symfony, debian linux, drupal +2 moreSymfony HTTP Foundation web cache poisoning6.5 Medium
- spirton universal media serverIn Universal Media Server (UMS) 7.1.0, the XML parsing engine for SSDP/UPnP functionality is...9.8 Critical
- otrs open ticket request system, debian linux +1 moreAn issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.9, 5.0.x through 5...8.8 High
- readymadeb2bscript basic b2bPHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last...5.4 Medium
- tendacn d152 firmwareTenda D152 ADSL routers allow XSS via a crafted SSID.5.4 Medium
- ocsinventory-ng ocsinventory ngOCS Inventory 2.4.1 lacks a proper XML parsing configuration, allowing the use of external...9.1 Critical
- softnas cloudA command injection vulnerability was found in the web administration console in SoftNAS Cloud...9.8 Critical
- ocsinventory-ng ocsinventory ngOCS Inventory 2.4.1 is prone to a remote command-execution vulnerability. Specifically, this...8.8 High
- ocsinventory-ng ocsinventory ngOCS Inventory 2.4.1 contains multiple SQL injections in the search engine. Authentication is...8.8 High
yast2-ftp-serverSUSERecommended update for yast2-ftp-serverNo score- ibm maximo asset management, maximo for aviation, maximo for life sciences +5 more +7 moreIBM Maximo Asset Management 7.6 through 7.6.3 installs with a default administrator account that...8.8 High
- jetbrains intellij ideaIntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can...7.5 High
- broadcom ca api developer portal, ca technologies api developer portal +1 moreCA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross...6.1 Medium
- netapp 7-mode transition toolNetApp 7-Mode Transition Tool allows users with valid credentials to access functions and...6.5 Medium
- php, netapp storage automation store +1 moreAn issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1....7.5 High
busyboxDebianbusybox - regression updateNo score- php, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x...7.5 High
- weaselcms project weaselcmsAn issue was discovered in WeaselCMS v0.3.5. XSS exists via Site Language, Site Title, Site...5.4 Medium
- flifAn issue was discovered in image_save_png in image/image-png.cpp in Free Lossless Image Format ...5.5 Medium
- rincewind project rincewindAn issue was discovered in Rincewind 0.1. There is a cross-site scripting (XSS) vulnerability...5.4 Medium
- rincewind project rincewindAn issue was discovered in Rincewind 0.1. A reinstall vulnerability exists because the parameter...7.5 High
- sensiolabs symfony, debian linux +1 moreSymfony SSRF Vulnerability via Form Component6.5 Medium
- Show moreLoading…