CVEs published in August 2018
1,014 vulnerabilities, 149 critical, 8 exploited.
- hackerone url-parseOpen Redirect in url-parse10.0 Critical
- oracle database server, oracle corporation database +1 moreA vulnerability was discovered in the Java VM component of Oracle Database Server. Supported...9.9 Critical
- activesupport project activesupport, hackerone active-support ruby gem +1 moreactive-support impersonates 'activesupport' gem9.8 Critical
- dell wyse management suiteDell WMS versions 1.1 and prior are impacted by multiple unquoted service path vulnerabilities....7.8 High
- dell data protection advisor, emc data protection advisor, emc integrated data protection appliance +1 more +3 moreDell EMC Data Protection Advisor, versions 6.2, 6,3, 6.4, 6.5 and Dell EMC Integrated Data...8.1 High
- ics-cert netcomm wireless g lte light industrial m2m router (nwl-25) with firmware 2.0.29.11 and prior., netcommwireless nwl-25 firmware +1 moreNetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior....7.5 High
- ics-cert netcomm wireless g lte light industrial m2m router (nwl-25) with firmware 2.0.29.11 and prior., netcommwireless nwl-25 firmware +1 moreNetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior....6.1 Medium
- ics-cert netcomm wireless g lte light industrial m2m router (nwl-25) with firmware 2.0.29.11 and prior., netcommwireless nwl-25 firmware +1 moreNetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. A...8.8 High
- ics-cert netcomm wireless g lte light industrial m2m router (nwl-25) with firmware 2.0.29.11 and prior., netcommwireless nwl-25 firmware +1 moreNetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior....7.5 High
- crestron mc3 firmware, tsw-x60 firmware +1 moreCrestron TSW-X60 all versions prior to 2.001.0037.001 and MC3 all versions prior to 1.502.0047.00...8.8 High
- ics-cert crestron tsw-x60 version prior to 2.001.0037.001 and mc3 version prior to 1.502.0047.001, crestron mc3 firmware, tsw-x60 firmware +2 moreFor Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001, The...9.8 Critical
- medtronic 24950 mycarelink monitor, 24952 mycarelink monitor, mycarelink 24950 patient monitor firmware +1 more +3 moreMedtronic MyCareLink 24950 Patient Monitor Insufficient Verification of Data Authenticity4.4 Medium
- medtronic 24950 mycarelink monitor, 24952 mycarelink monitor, mycarelink 24950 patient monitor firmware +1 more +3 moreMedtronic MyCareLink Patient Monitor Network Credential Weakness5.2 Medium
- hotel booking script project booking scriptPHP Scripts Mall hotel-booking-script 2.0.4 allows remote attackers to cause a denial of service...6.5 Medium
- hotel booking script project booking scriptPHP Scripts Mall hotel-booking-script 2.0.4 allows XSS via the First Name, Last Name, or Address...5.4 Medium
- linux kernelThe aoedisk_debugfs_show function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16...5.5 Medium
- wolfcms wolf cmsWolf CMS 0.8.3.1 has XSS in the Snippets tab, as demonstrated by a ?/admin/snippet/edit/1 URI.4.8 Medium
- coremail xtCross-site scripting (XSS) vulnerability in intervalCheck.jsp in Coremail XT 3.0 allows remote...6.1 Medium
- wordpressIn WordPress 4.9.7, plugins uploaded via the admin area are not verified as being ZIP files. This...7.2 High
- asus hg100 firmwareASUS HG100 devices allow denial of service via an IPv4 packet flood.7.5 High
- advanced real estate script project real estate scriptPHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile.5.4 Medium
- advanced real estate script project real estate scriptPHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of...6.5 Medium
- advanced real estate script project real estate scriptPHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php.8.0 High
- chartered accountant \ auditor website projectPHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has CSRF via client/auditor...8.8 High
- naukri clone script project clone scriptPHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a...6.5 Medium
- atlassian cloudtokenCloudtoken Insufficiently Protects Credentials6.1 Medium
- first project first, gg token project token, mesh project mesh +3 more +5 moreThe transferProxy and approveProxy functions of a smart contract implementation for SmartMesh ...7.5 High
lftpMageiaUpdated lftp packages fix security vulnerabilityNo scoregodotMageiaUpdated godot packages fix security vulnerabilityNo score- mozilla firefox, firefox esr, thunderbird +2 moreWindows 10 does not warn users before opening executable files with the SettingContent-ms...8.1 High
- microfocus edirectory, micro focus netiq edirectory versions prior to 9.1.1 hf1 +1 moreUnvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1.6.1 Medium
- microfocus edirectory, micro focus edirectory (zdi) +1 moreInformation leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage.7.5 High
- hitachi command suite, compute systems manager, device manager +3 more +5 moreAn Information Exposure issue was discovered in Hitachi Command Suite 8.5.3. A remote attacker...7.5 High
- cobbler, redhat satellite +1 moreCobbler has Exposed Dangerous Method or Function9.8 Critical
- cisco thor video codecStack-based buffer overflow in the Cisco Thor decoder before commit...7.8 High
- naukri clone script project clone scriptPHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME...5.4 Medium
- myperfectresume \/ jobhero \/ resume clone script project \/ jobhero \/ resume clone scriptPHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the...6.1 Medium
- car rental script project rental scriptPHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields.5.4 Medium
- jio 4g hotspot m2s firmwareJioFi 4G Hotspot M2S devices allow attackers to cause a denial of service (secure configuration...6.5 Medium
- laravel, laravel framework +1 moreLaravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior8.1 High
- [unknown] vdsm, redhat virtualization +1 moreIt was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without...6.5 Medium
- freebsdOne of the data structures that holds TCP segments in all versions of FreeBSD prior to 11.2...5.3 Medium
- isc bind, bind 9, canonical ubuntu linux +9 more +11 moreA flaw in the "deny-answer-aliases" feature can cause an assertion failure in named7.5 High
- postgresql, canonical ubuntu linux, debian linux +2 moreIt was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed...7.1 High
- postgresql, canonical ubuntu linux, debian linux +6 more +8 moreA vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to...8.5 High
- aedes project aedesImproper Authorization in aedes5.3 Medium
drupal/phpconfigPackagistThis module enables you to add or overwrite PHP configuration on a drupal website. The module doesn't sufficiently allow access to set these configurations, leading to arbitrary PHP configuration exec…No score- erc20token project erc20tokenAn integer overflow in the unprotected distributeToken function of a smart contract...7.5 High
- apache couchdbCouchDB administrative users before 2.2.0 can configure the database server via HTTP(S). Due to...7.2 High
- tibco activematrix businessworks, activematrix businessworks distribution for tibco silver fabric, tibco software inc. activematrix businessworks for z/linux +2 moreTIBCO ActiveMatrix BusinessWorks 5.X XML eXternal Entity Vulnerability7.5 High
- Show moreLoading…