CVEs published in August 2018
1,014 vulnerabilities, 149 critical, 8 exploited.
- libtiff, debian linux +1 moreChopUpSingleUncompressedStrip in tif_dirread.c in LibTIFF 4.0.9 allows remote attackers to cause...8.8 High
- ignitedcmsAn issue was discovered in Ignited CMS through 2017-02-19. ign/index.php/admin/pages/add_page...6.5 Medium
- juunan06 ecommerceAn issue was discovered in Juunan06 eCommerce through 2018-08-05. There is a CSRF vulnerability...6.3 Medium
- auracmsAuraCMS 2.3 allows XSS via a Bukutamu -> AddGuestbook action.5.4 Medium
- onethinkAn issue was discovered in OneThink v1.1. There is a CSRF vulnerability in admin.php?s=/User/add...8.8 High
- onethinkAn issue was discovered in OneThink v1.1. There is a CSRF vulnerability in admin.php?s=...8.8 High
- gogsA CSRF vulnerability in the admin panel in Gogs through 0.11.53 allows remote attackers to...8.8 High
- gitea, gogs +1 moreGogs and Gitea SSRF Vulnerability8.6 High
slurm-llnlDebianslurm-llnl - regression updateNo score- gogsOpen Redirect6.1 Medium
- gxlcmsIn Gxlcms 2.0, a news/index.php?s=Admin-Admin-Insert CSRF attack can add an administrator account.8.8 High
- xnviewXnView 2.45 allows remote attackers to cause a denial of service (User Mode Write AV starting at...7.8 High
- xnviewXnView 2.45 allows remote attackers to cause a denial of service (User Mode Write AV starting at...7.8 High
- xnviewXnView 2.45 allows remote attackers to cause a denial of service (Read Access Violation at the...7.8 High
- nmapNmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of...7.5 High
- zohocorp manageengine applications managerA reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager 13...6.1 Medium
- zohocorp manageengine applications managerA SQL Injection vulnerability exists in the Zoho ManageEngine Applications Manager 13 before...9.8 Critical
- cela link clr-m20 firmwareCeLa Link CLR-M20 devices allow unauthorized users to upload any file (e.g., asp, aspx, cfm, html...9.8 Critical
- canonical ubuntu linux, debian linux, w1.fi wpa supplicant +2 moreAn issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain...6.5 Medium
- csrf-magic project csrf-magicIn csrf-magic before 1.0.4, if $GLOBALS['csrf']['secret'] is not configured, the Anti-CSRF Token...8.8 High
- linux kernelThe pcpu_embed_first_chunk function in mm/percpu.c in the Linux kernel through 4.14.14 allows...5.5 Medium
- debian linux, linux kernel +1 moreThe swiotlb_print_info function in lib/swiotlb.c in the Linux kernel through 4.14.14 allows local...5.5 Medium
- php, netapp storage automation store +1 moreAn issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7...7.5 High
- mycryptochampThe randMod() function of the smart contract implementation for MyCryptoChamp, an Ethereum game,...5.9 Medium
- siemens automation license manager 5, automation license manager +1 moreA vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4). An...5.8 Medium
- siemens automation license manager, siemens ag automation license manager 5, automation license manager 6 +1 moreA vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4),...8.8 High
- siemens simatic step 7 \(tia portal\), simatic wincc \(tia portal\), siemens ag simatic step 7 (tia portal) and wincc (tia portal) v10, v11, v12, simatic step 7 (tia portal) and wincc (tia portal) v13, simatic step 7 (tia portal) and wincc (tia portal) v14, simatic step 7 (tia portal) and wincc (tia portal) v15 +2 moreA vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10,...8.6 High
- siemens simatic step 7 \(tia portal\), simatic wincc \(tia portal\), siemens ag simatic step 7 (tia portal) and wincc (tia portal) v10, v11, v12, simatic step 7 (tia portal) and wincc (tia portal) v13, simatic step 7 (tia portal) and wincc (tia portal) v14, simatic step 7 (tia portal) and wincc (tia portal) v15 +2 moreA vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10,...7.8 High
- thinksaasThinkSAAS through 2018-07-25 has XSS via the index.php?app=group&ac=create&ts=do groupdesc...5.4 Medium
- ibm rhapsody model managerIBM Rhapsody Model Manager 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- thinksaasThinkSAAS through 2018-07-25 has XSS via the index.php?app=article&ac=comment&ts=do content...5.4 Medium
- android open source project android, apple ios, macos +3 more +5 moreBluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange8.0 High
- [unknown] jenkins-email-ext, jenkins email extension +1 moreEmails were sent to addresses not associated with actual users of Jenkins by Email Extension Plugin3.7 Low
- php template store script project template store scriptPHP Template Store Script 3.0.6 allows XSS via the Address line 1, Address Line 2, Bank name, or...5.4 Medium
- ocsinventory-ng ocs inventory serverUnrestricted file upload (with remote code execution) in require/mail/NotificationMail.php in...8.8 High
- insteon, insteon hub firmware +1 moreSpecially crafted commands sent through the PubNub service in Insteon Hub 2245-222 with firmware...8.5 High
- hewlett packard enterprise hpe intelligent management center platform (imc plat), hp intelligent management center +1 moreA potential security vulnerability has been identified in HPE Intelligent Management Center...7.5 High
- hewlett packard enterprise hpe xp p9000 command view advanced edition software (cvae), hp xp 9000 command view +1 moreHPE XP P9000 Command View Advanced Edition Software (CVAE) has open URL redirection vulnerability...6.1 Medium
- hewlett packard enterprise hpe xp p9000 command view advanced edition software (cvae) versions 7.0.0-00 to earlier than 8.60-00, hp xp 9000 command view +1 moreHPE XP P9000 Command View Advanced Edition Software (CVAE) has local and remote cross site...6.1 Medium
- hewlett packard enterprise hpe integrated lights-out 4 (ilo 4), hpe integrated lights-out 5 (ilo 5), hp integrated lights-out 4 firmware, integrated lights-out 5 firmware +2 moreA remote code execution was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than...7.2 High
- hewlett packard enterprise hpe intelligent management center (imc), hp intelligent management center, hpe intelligent management center (imc) +2 moreA remote cross-site scripting (XSS) vulnerability was identified in HPE Intelligent Management...6.1 Medium
- hewlett packard enterprise hpe intelligent management center (imc), hp intelligent management center, hpe intelligent management center (imc) +2 moreA remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC)...9.8 Critical
- hewlett packard enterprise hpe moonshot provisioning manager, hp moonshot provisioning manager, canonical ubuntu linux +2 moreA local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning...5.5 Medium
- hewlett packard enterprise hpe moonshot provisioning manager, hp moonshot provisioning manager +1 moreA remote bypass of security restrictions vulnerability was identified in HPE Moonshot...9.8 Critical
- hewlett packard enterprise hpe network function virtualization director (nfvd), hp network function virtualization director +1 moreHPE has identified a remote access to sensitive information vulnerability in HPE Network Function...4.3 Medium
- hewlett packard enterprise hpe centralview fraud risk management, hp centralview fraud risk management +1 moreHPE has identified a remote disclosure of information vulnerability in HPE CentralView Fraud Risk...5.3 Medium
- hewlett packard enterprise hpe centralview fraud risk management, hp centralview fraud risk management +1 moreHPE has identified a remote unauthenticated access to files vulnerability in HPE CentralView...7.5 High
- hewlett packard enterprise hpe centralview fraud risk management, hp centralview fraud risk management +1 moreHPE has identified a remote HOST header attack vulnerability in HPE CentralView Fraud Risk...6.1 Medium
- aruba clearpass, hewlett packard enterprise aruba clearpass +1 moreAruba ClearPass 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 is vulnerable to CSRF attacks...8.8 High
- hp aruba clearpass policy managerAruba ClearPass prior to 6.6.9 has a vulnerability in the API that helps to coordinate cluster...8.8 High
- Show moreLoading…