CVEs published in August 2018
1,014 vulnerabilities, 149 critical, 8 exploited.
- linecorp line** DISPUTED ** An issue was discovered in the LINE jp.naver.line application 8.8.0 for iOS. The...6.3 Medium
- litecartadmin/vqmods.app/vqmods.inc.php in LiteCart before 2.1.3 allows remote authenticated attackers to...8.8 High
- asustor data masterThe tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3 has a SQL...9.8 Critical
- asustor data masterASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin username and password as it does for the...9.8 Critical
- redhat jboss core services, xmlsoft libxml2 +1 morelibxml2, as used in Red Hat JBoss Core Services, allows context-dependent attackers to cause a...6.5 Medium
- redhat jboss core services, xmlsoft libxml2 +1 morelibxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context...6.5 Medium
- ibm api connectIBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request...8.6 High
nemo-extensionsSUSESecurity update for nemo-extensionsNo score- palo alto networks pan-osThe PAN-OS Management Web Interface in Palo Alto Networks PAN-OS 8.1.2 and earlier may allow an...4.3 Medium
- palo alto networks pan-osThe PAN-OS response for GlobalProtect Gateway in Palo Alto Networks PAN-OS 6.1.21 and earlier,...6.1 Medium
- apache commons compress, oracle weblogic server +1 moreModerate severity vulnerability that affects org.apache.commons:commons-compress5.5 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to cross-site scripting. This...5.4 Medium
- xenAn issue was discovered in Xen through 4.11.x. The logic in oxenstored for handling writes...6.5 Medium
- debian linux, xen +1 moreAn issue was discovered in Xen through 4.11.x. ARM never properly implemented grant table v2,...6.5 Medium
- xenAn issue was discovered in Xen through 4.11.x. The DEBUGCTL MSR contains several debugging...6.0 Medium
- dfndr security antivirus, anti-hacking & cleaner, psafe dfndr security +1 moreDFNDR Security Antivirus, Anti-hacking & Cleaner, 5.0.9, 2017-11-01, Android application uses a hard-coded key for encryption7.5 High
- live.me, liveme +1 moreLive.me - live stream video chat, 3.7.20, 2017-11-06, Android application uses a hard-coded key for encryption7.5 High
- cheetahmobile cm launcher 3d - theme, wallpaper, secure, efficient, cmcm cm launcher 3d +1 moreCheetahmobile CM Launcher 3D - Theme, wallpaper, Secure, Efficient, 5.0.3, 2017-09-19, Android application uses a hard-coded key for encryption7.5 High
- hi security lab virus cleaner - antivirus, booster, hisecuritylab virus cleaner +1 moreHi Security Virus Cleaner - Antivirus, Booster, 3.7.1.1329, 2017-09-13, Android application accepts all SSL certificates during SSL communication5.9 Medium
- uber ubereats, uber technologies, inc. ubereats: uber for food delivery +1 moreUber Technologies, Inc. UberEATS: Uber for Food Delivery, 1.108.10001, 2017-11-02, iOS application uses a hard-coded key for encryption7.5 High
- gameloft asphalt xtreme: offroad rally racing, asphalt xtreme +1 moreGameloft Asphalt Xtreme: Offroad Rally Racing, 1.6.0, 2017-08-13, iOS application uses a hard-coded key for encryption7.5 High
- musical.ly inc. musical.lyMusical.ly Inc., musical.ly - your video social network, 6.1.6, 2017-10-03, iOS application uses a hard-coded key for encryption7.5 High
- distinctdev the moron testDistinctDev, Inc., The Moron Test, 6.3.1, 2017-05-04, iOS application uses a hard-coded key for encryption7.5 High
- cisco web security applianceA vulnerability in the account management subsystem of Cisco Web Security Appliance (WSA) could...6.7 Medium
- cisco systems, inc. digital network architecture (dna) center, cisco application policy infrastructure controller enterprise module +1 moreA vulnerability in the CronJob scheduler API of Cisco Digital Network Architecture (DNA) Center...8.8 High
- cisco email security appliance, cisco systems, inc. email security appliance (esa) +1 moreA vulnerability in certain attachment detection mechanisms of Cisco Email Security Appliances ...7.5 High
- cisco systems, inc. asr 9000 series aggregation services router software, cisco ios xr +1 moreA vulnerability in the Local Packet Transport Services (LPTS) feature set of Cisco ASR 9000...8.6 High
- cisco systems, inc. small business 100 series wireless access points, small business 300 series wireless access points, cisco wap121 firmware +7 more +9 moreA vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL)...6.8 Medium
- cisco systems, inc. small business 100 series wireless access points, small business 300 series wireless access points, cisco wap121 firmware +7 more +9 moreA vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL)...5.3 Medium
- cisco web security appliance, cisco systems, inc. asyncos software for cisco web security appliances +1 moreA vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security...8.6 High
- cisco telepresence video communication server, cisco systems, inc. telepresence video communication server (vcs) and expressway, unified communications manager im & presence service (cucm im&p) +1 more +3 moreA vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM &...7.5 High
- cisco unified communications domain manager, cisco systems, inc. unified communications domain manager software, cisco hosted collaboration solution +2 moreA vulnerability in Cisco Unified Communications Domain Manager Software could allow an...6.1 Medium
- cisco registered envelope serviceA vulnerability in the web-based management interface of the Cisco Registered Envelope Service...5.4 Medium
- trend micro control managerA vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to...7.5 High
- trend micro control managerA vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to...10.0 Critical
- trend micro control managerA Directory Traversal Remote Code Execution vulnerability in Trend Micro Control Manager ...9.8 Critical
- zyxel usg 1100 firmware, usg 110 firmware, usg 1900 firmware +14 more +16 moreZyXEL ZyWALL/USG series devices have a Bleichenbacher vulnerability in their Internet Key...5.9 Medium
- clavister cos coreThe IKEv1 implementation in Clavister cOS Core before 11.00.11, 11.20.xx before 11.20.06, and 12...5.9 Medium
- yubico piv manager, piv tool, smart card minidriver +2 moreAn out-of-bounds read issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib...4.6 Medium
- yubico piv manager, piv tool, smart card minidriver +2 moreA buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib...6.8 Medium
- btrfsmaintenance project btrfsmaintenanceAn issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in...8.1 High
- citrix xenserverCitrix XenServer 7.1 and newer allows Directory Traversal.9.8 Critical
- nasdaq bwiseThe JMX/RMI interface in Nasdaq BWise 5.0 does not require authentication for an SAP BO Component...9.8 Critical
- microsoft windows, windows 10, windows 10 servers +5 more +7 moreA remote code execution vulnerability exists when the Windows Shell does not properly validate...8.8 High
- microsoft office, office for mac +1 moreAn elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application...7.8 High
- microsoft directx graphics kernel (dxgkrnl), windows 10, windows 10 servers +8 more +10 moreAn elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver...7.8 High
- microsoft directx graphics kernel (dxgkrnl), windows 10, windows 10 servers +12 more +14 moreAn elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver...7.8 High
- microsoft windows 10, windows 10 servers, windows 7 +6 more +8 moreAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to...7.0 High
- microsoft edge, internet explorer 10, internet explorer 11 +1 more +3 moreA remote code execution vulnerability exists in the way that Microsoft browsers access objects in...7.5 High
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreAn elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver...7.8 High
- Show moreLoading…