CVEs published in August 2018
1,014 vulnerabilities, 149 critical, 8 exploited.
- ibm maximo asset management, maximo for aviation, maximo for life sciences +5 more +7 moreIBM Maximo Asset Management 7.6 through 7.6.3 could allow an authenticated user to obtain...4.3 Medium
- ibm rational doors next generationIBM Jazz Foundation products (IBM Rational DOORS Next Generation 5.0 through 5.0.2 and 6.0...5.4 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 could allow a local...6.5 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 generates an error message...4.3 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 does not require that...5.9 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 discloses sensitive...5.3 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 specifies permissions for...4.2 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 does not set the secure...4.3 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 uses weaker than expected...5.9 Medium
- apache airflowApache Airflow Reflected Cross-site Scripting vulnerability in 404 Endpoint6.1 Medium
xml-security-cDebianxml-security-c - security updateNo score- debian linux, linux kernel, a10networks advanced core operating system +35 more +37 moreLinux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service7.5 High
- apple icloud, itunes, safari +3 more +5 moreA type confusion issue was addressed with improved memory handling. This issue affected versions...8.8 High
- apple icloud, itunes, safari +3 more +5 moreIn Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1,...4.3 Medium
- apple icloud, itunes, safari +3 more +5 moreMultiple memory corruption issues were addressed with improved input validation. This issue...6.5 Medium
- apple icloud, itunes, safari +3 more +5 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...8.8 High
- apple icloud, itunes, safari +3 more +5 moreA memory corruption issue was addressed with improved memory handling. This issue affected...6.5 Medium
- apple icloud, itunes, safari +2 more +4 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...8.8 High
- apple icloud, itunes, safari +3 more +5 moreA race condition was addressed with additional validation. This issue affected versions prior...5.9 Medium
- apple icloud, itunes, safari +2 more +4 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...8.8 High
- apple icloud, itunes, safari +3 more +5 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...8.8 High
- apple icloud, itunes, safari +2 more +4 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...8.8 High
- apple icloud, itunes, safari +4 more +6 moreIn Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1,...8.8 High
- apple icloud, itunes, safari +2 more +4 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...8.8 High
- weaselcms project weaselcmsAn issue was discovered in WeaselCMS v0.3.5. CSRF can create new pages via an index.php?b=pages&a...8.8 High
- weaselcms project weaselcmsAn issue was discovered in WeaselCMS v0.3.5. CSRF can update the website settings (such as the...8.8 High
- squirrelmailThe mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate...6.1 Medium
- squirrelmailThe mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute.6.1 Medium
- squirrelmailThe mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math xlink:href="...6.1 Medium
- squirrelmailThe mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math><maction xlink...6.1 Medium
- squirrelmailThe mail message display page in SquirrelMail through 1.4.22 has XSS via a "<form action='data...6.1 Medium
- squirrelmailThe mail message display page in SquirrelMail through 1.4.22 has XSS via a "<svg><a xlink:href="...6.1 Medium
- sound project soundAn issue has been found in dilawar sound through 2017-11-27. The end of openWavFile in wav-file...7.8 High
- flowpaper pdf2jsonAn issue has been found in PDF2JSON 0.69. XmlFontAccu::CSStyle in XmlFonts.cc has Mismatched...8.8 High
- flowpaper pdf2jsonAn issue has been found in PDF2JSON 0.69. The HtmlString class in ImgOutputDev.cc has Mismatched...8.8 High
- jpeg encoder project encoderAn issue has been found in jpeg_encoder through 2015-11-27. It is a heap-based buffer overflow in...7.8 High
- jpeg encoder project encoderAn issue has been found in jpeg_encoder through 2015-11-27. It is a SEGV in the function...7.8 High
- harmonicinc nsg 9000 firmwareHarmonic NSG 9000 devices have a default password of nsgadmin for the admin account, a default...9.8 Critical
- harmonicinc nsg 9000 firmwareHarmonic NSG 9000 devices allow remote authenticated users to conduct directory traversal attacks...8.8 High
- harmonicinc nsg 9000Harmonic NSG 9000 devices allow remote authenticated users to read the webapp.py source code via...6.5 Medium
- phpcmsPHPCMS 9 allows remote attackers to cause a denial of service (resource consumption) via large...7.5 High
- libreofficeThe get_app_path function in desktop/unx/source/start.c in LibreOffice through 6.0.5 mishandles...9.8 Critical
- mylittleforum my little forumThe Add page option in my little forum 2.4.12 allows XSS via the Menu Link field.4.8 Medium
- mylittleforum my little forumThe Add page option in my little forum 2.4.12 allows XSS via the Title field.4.8 Medium
xml-security-cDebianxml-security-c - security updateNo scoreantDebianant - security updateNo score- nuuo nvrmini devices, nvrmini firmware +1 moreupgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell...9.8 Critical
- digitalcorpora tcpflow, canonical ubuntu linux +1 moreAn issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an...9.1 Critical
- matera bancoMatera Banco 1.0.0 is vulnerable to multiple reflected XSS, as demonstrated by the /contingency...6.1 Medium
- matera banco/contingency/servlet/ServletFileDownload executes as root and provides unauthenticated access to...7.5 High
- Show moreLoading…