CVEs published in August 2018
1,014 vulnerabilities, 149 critical, 8 exploited.
- hewlett packard enterprise hpe 3par service processors, hp 3par service provider +1 moreA security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110...9.8 Critical
- hewlett packard enterprise hpe 3par service processors, hp 3par service provider +1 moreA security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110...9.8 Critical
- hewlett packard enterprise hpe 3par service processors, hpe 3par service provider +1 moreA security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-5.0.0.0-22913...5.5 Medium
- hp moonshot chassis manager firmware, hewlett packard enterprise ilo 5 for hpe gen10 servers, ilo 4, ilo 3, moonshot chassis management firmware, moonshot component packs for hpe proliant m510 and m710x server cartridges, hp integrated lights-out 3 firmware +3 more +5 moreA security vulnerability in HPE Integrated Lights-Out 3 prior to v1.90, iLO 4 prior to v2.60, iLO...8.6 High
- hewlett packard enterprise hpe xp p9000 command view advanced edition (cvae), hp xp p9000 configuration manager, xp p9000 device manager +2 moreA security vulnerability in HPE XP P9000 Command View Advanced Edition (CVAE) Device Manager ...7.5 High
- apache http servermod_userdir CRLF injection6.1 Medium
- sambaA missing input sanitization flaw was found in the implementation of LDP database used for the...6.5 Medium
- samba, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 moreA flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1...5.4 Medium
- samba, canonical ubuntu linux, debian linux +2 moreThe Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because...4.3 Medium
- samba, canonical ubuntu linux +1 moreA null pointer dereference flaw was found in the way samba checked database outputs from the LDB...5.2 Medium
- samba, canonical ubuntu linux, debian linux +5 more +7 moreA heap-buffer overflow was found in the way samba clients processed extra long filename in a...4.3 Medium
- medtronic mmt – 511 pump paradigm, mmt – 512 / mmt – 712 paradigm x12, mmt – 515 / mmt – 715 paradigm x15 +16 more +18 moreMedtronic MiniMed MMT-500/MMT-503 Remote Controllers Authentication Bypass by Capture-replay5.3 Medium
- deltaww cncsoft, screeneditor, ics-cert cncsoft with screeneditor +2 moreCNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based...8.8 High
- medtronic minimed 530g mmt-551 firmware, minimed 530g mmt-751 firmware, minimed paradigm 508 insulin pump firmware +16 more +18 moreMedtronic MiniMed MMT-500/MMT-503 Remote Controllers Cleartext Transmission of Sensitive Information4.8 Medium
- deltaww cncsoft, screeneditor, ics-cert cncsoft with screeneditor +2 moreCNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has two out-of-bounds read...8.1 High
- vmware horizon client, horizon view, horizon 6, horizon 7, and horizon client +2 moreVMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x...6.5 Medium
- kaspersky lab zipato zipabox smart home controller, zipato zipabox firmware +1 moreSensitive Information Disclosure in Zipato Zipabox Smart Home Controller allows remote attacker...7.5 High
- kaspersky lab zipato zipabox smart home controller, zipato zipabox firmware +1 moreWeak hashing algorithm in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version ...9.8 Critical
- kaspersky lab zipato zipabox smart home controller, zipato zipabox firmware +1 moreInsecure configuration storage in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System...9.8 Critical
- nextcloud talk, nextcloud/talk +1 moreA missing sanitization of search results for an autocomplete field in NextCloud Talk <3.2.5 could...5.4 Medium
- nextcloud server, nextcloud/server +1 moreA missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5...5.4 Medium
- open-emr openemrMultiple SQL injection vulnerabilities in portal/add_edit_event_user.php in versions of OpenEMR...9.8 Critical
- open-emr openemrSQL injection vulnerability in interface/de_identification_forms/find_drug_popup.php in versions...8.8 High
- open-emr openemrMultiple SQL injection vulnerabilities in portal/find_appt_popup_user.php in versions of OpenEMR...9.8 Critical
- open-emr openemrDirectory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a...8.8 High
- open-emr openemrDirectory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a...6.5 Medium
- open-emr openemrDirectory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a...6.5 Medium
- open-emr openemrUnrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5...8.8 High
- jetbrains dotpeek, resharper ultimate +1 moreJetBrains dotPeek before 2018.2 and ReSharper Ultimate before 2018.1.4 allow attackers to execute...7.8 High
- tiki tikiwiki cms\/groupwareStored XSS vulnerabilities in Tiki before 18.2, 15.7 and 12.14 allow an authenticated user...5.4 Medium
- tiki tikiwiki cms\/groupwareTiki before 18.2, 15.7 and 12.14 has XSS via link attributes, related to lib/core/WikiParser...5.4 Medium
- vuze bittorrent clientIn Vuze Bittorrent Client 5.7.6.0, the XML parsing engine for SSDP/UPnP functionality is...9.8 Critical
- plex media serverIn Plex Media Server 1.13.2.5154, the XML parsing engine for SSDP/UPnP functionality is...9.8 Critical
- german spelling dictionary project spelling dictionaryA cross-site scripting (XSS) vulnerability was found in valeuraddons German Spelling Dictionary...6.1 Medium
- redhat certification, [unknown] redhat-certification: +1 moreAn uncontrolled resource consumption flaw has been discovered in redhat-certification in the way...5.3 Medium
- edimax ew-7438rpn v2 firmwareAn issue was discovered in Edimax EW-7438RPn Mini v2 before version 1.26. There is XSS in an SSID...6.1 Medium
- [unknown] atomic-openshift, redhat openshift container platform +1 moreThe OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker...5.0 Medium
- ibm urbancode deployIBM UrbanCode Deploy 6.1 through 6.9.6.0 could allow a remote attacker to traverse directories on...5.3 Medium
- ibm urbancode deploySensitive information about the configuration of the IBM UrbanCode Deploy 6.1 through 6.9.6.0...6.5 Medium
- ibm rational clearquestIBM Rational ClearQuest 8.0 through 8.0.1.9 and 9.0 through 9.0.1.3 (CQ OSLC linkages, EmailRelay...3.7 Low
- hikvision ip cameras, ds-2de4xxxw,ds-2de5xxxw,ds-2de7xxxw +1 moreA buffer overflow vulnerability in the web server of some Hikvision IP Cameras allows an attacker...9.8 Critical
- hp inc. inkjet printers, hp 1dt61a firmware, 1jl02a firmware +268 more +270 moreA security vulnerability has been identified with certain HP Inkjet printers. A maliciously...7.8 High
- hp inc. inkjet printers, hp 1dt61a firmware, 1jl02a firmware +268 more +270 moreA security vulnerability has been identified with certain HP Inkjet printers. A maliciously...9.8 Critical
- atlassian crucible, fisheye, fisheye and crucible +2 moreSeveral resources in Atlassian Fisheye and Crucible before version 4.6.0 allow remote attackers...6.1 Medium
- qnap helpdesk, helpdesk in qts +1 moreCommand injection vulnerability in Helpdesk versions 1.1.21 and earlier in QNAP QTS 4.2.6 build...9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +48 more +50 moreThe Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets7.5 High
- gnome display managerThe daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus...7.8 High
- apache sparkorg.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 Improper Authentication vulnerability4.2 Medium
- hackerone nextcloud server, nextcloud server +1 moreImproper input validator in Nextcloud Server prior to 12.0.3 and 11.0.5 could lead to an attacker...5.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreImproper Authentication in Nextcloud Server prior to version 12.0.3 would allow an attacker that...8.8 High
- Show moreLoading…