CVEs published in August 2018
1,014 vulnerabilities, 149 critical, 8 exploited.
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA security feature bypass vulnerability exists in Device Guard that could allow an attacker to...5.3 Medium
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA security feature bypass vulnerability exists in Device Guard that could allow an attacker to...5.3 Medium
- tp-link tl-wr840n firmwareTP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header.7.5 High
- open-emr openemrOS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote...8.8 High
- open-emr openemrOS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote...8.8 High
- open-emr openemrOS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote...8.8 High
- open-emr openemrOS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote...8.8 High
- open-emr openemrAuthentication bypass vulnerability in portal/account/register.php in versions of OpenEMR before...9.1 Critical
- open-emr openemrSQL injection vulnerability in interface/de_identification_forms/find_code_popup.php in versions...8.8 High
- open-emr openemrSQL injection vulnerability in interface/de_identification_forms/de_identification_screen2.php in...8.8 High
- open-emr openemrSQL injection vulnerability in interface/forms/eye_mag/php/Anything_simple.php from library/forms...8.8 High
- open-emr openemrSQL injection vulnerability in interface/patient_file/encounter/search_code.php in versions of...8.8 High
- open-emr openemrSQL injection vulnerability in interface/forms_admin/forms_admin.php from library/registry.inc in...8.8 High
- open-emr openemrSQL injection vulnerability in interface/de_identification_forms/find_immunization_popup.php in...8.8 High
- ericssonlg ipecs nmsEricsson-LG iPECS NMS 30M allows directory traversal via ipecs-cm/download?filename=../ URIs.7.5 High
- all-for-one all for oneThe maxRandom function of a smart contract implementation for All For One, an Ethereum gambling...7.5 High
- bitcoin red project redAn integer overflow in the distributeBTR function of a smart contract implementation for Bitcoin...7.5 High
- [unknown] pulpWithdrawn Advisory: Pulp Improper Path Parsing6.8 Medium
- intelbras win 240 firmwareA Cross-site scripting (XSS) vulnerability was discovered on Intelbras Win 240 V1.1.0 devices. An...9.8 Critical
- microsoft visual studio, windows 10, windows 10 servers +3 more +5 moreAn Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows...7.8 High
- ibm tivoli application dependency discovery managerIBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site...4.3 Medium
- vmware fusion, workstation +1 moreVMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds...8.8 High
- atlassian confluence questions, questions for confluence +1 moreThe acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled...6.5 Medium
- atlassian confluence questions, questions for confluence +1 moreThe convertCommentToAnswer resource in Atlassian Confluence Questions before version 2.6.6, the...6.5 Medium
- talos sony, sony snc-eb600 firmware, snc-eb600b firmware +12 more +14 moreAn exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi...9.1 Critical
- talos sony, sony snc-eb600 firmware, snc-eb600b firmware +12 more +14 moreAn exploitable command injection vulnerability exists in the measurementBitrateExec functionality...9.1 Critical
- eclipse openj9, the eclipse foundation eclipse openj9, oracle enterprise manager base platform +2 moreIn Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach...7.8 High
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 moreModerate severity vulnerability that affects io.vertx:vertx-core5.3 Medium
- intel core i3, core i5, core i7 +6 more +8 moreSystems with microprocessors utilizing speculative execution and address translations may allow...5.6 Medium
- intel core i3, core i5, core i7 +6 more +8 moreSystems with microprocessors utilizing speculative execution and address translations may allow...5.6 Medium
- intel core i3, core i5, core i7 +28 more +30 moreSystems with microprocessors utilizing speculative execution and Intel software guard extensions ...6.4 Medium
- cisco ios, ios xe, cisco systems, inc. ios and ios xe +2 moreA vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS...5.9 Medium
- mingw mingw-w64mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR7.5 High
- sap hana extended application servicesXS Command-Line Interface (CLI) user sessions with the SAP HANA Extended Application Services (XS...6.6 Medium
- sap maxdb, maxdb (livecache) +1 moreSAP MaxDB (liveCache), versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges...7.2 High
- sap supplier relationship management master data management catalog, supplier relationship management mdm catalog +1 moreSAP SRM MDM Catalog versions 3.73, 7.31, 7.32 in (SAP NetWeaver 7.3) - import functionality does...8.6 High
- sap srm-mdm catalog, supplier relationship management mdm catalog +1 moreUnder certain conditions SAP SRM-MDM (CATALOG versions 3.0, 7.01, 7.02) utilities functionality...5.3 Medium
- sap businessobjects business intelligenceSAP BusinessObjects Business Intelligence (Launchpad Web Intelligence), version 4.2, allows an...6.5 Medium
- sap businessobjects business intelligenceAdmin tools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allow an...7.5 High
- sap businessobjects business intelligence, businessobjects business intelligence platform +1 moreAdminTools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allows an attacker to...9.6 Critical
- sap businessobjects financial consolidationSAP BusinessObjects Financial Consolidation, versions 10.0, 10.1, does not sufficiently encode...6.1 Medium
- sap businessobjects business intelligence, internet graphics server +1 moreIn SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web...8.8 High
- sap change and transport system (abap), kernel +1 moreUnder certain conditions the SAP Change and Transport System (ABAP), SAP KERNEL 32 NUC, SAP...5.5 Medium
- monstraMultiple cross-site scripting (XSS) vulnerabilities in Monstra CMS 3.0.4 allow remote attackers...6.1 Medium
- thank you\/like project you\/likeinc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows...6.1 Medium
- man-cgi project man-cgiman-cgi before 1.16 allows Local File Inclusion via absolute path traversal, as demonstrated by a...7.5 High
- hewlett packard enterprise hp 1810-24g, hp 1810-48g, hp 1810-8 v2 switches, hp officeconnect 1810-24g switch firmware, officeconnect 1810-48g switch firmware +1 more +3 moreA potential security vulnerability has been identified in HPE OfficeConnect 1810 Switch Series ...5.5 Medium
- hewlett packard enterprise hpe 3par service processors, hp 3par service provider +1 moreA security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110...5.5 Medium
- hewlett packard enterprise hpe 3par service processors, hp 3par service provider +1 moreA security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110...8.4 High
- hewlett packard enterprise hpe 3par service processors, hp 3par service provider +1 moreA security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110...8.8 High
- Show moreLoading…