CVEs published in August 2018
1,014 vulnerabilities, 149 critical, 8 exploited.
- wi2be smart hp wmtWi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to obtain sensitive...7.5 High
- wi2be smart hp wmtWi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to reset the admin...9.8 Critical
- wi2be smart hp wmtWi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to backup the device...7.5 High
- cobblerd cobblerCobbler Improper Validation of Security Tokens9.8 Critical
- cobblerd cobblerCobbler XSS Vulnerability6.1 Medium
- godotengine godotGodot Engine version All versions prior to 2.1.5, all 3.0 versions prior to 3.0.6. contains a...7.5 High
- surina soundtouchsoundtouch version up to and including 2.0.0 contains a Buffer Overflow vulnerability in...8.8 High
- pkgconfpkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote() that can...9.8 Critical
- open-emr openemrOpenEMR version v5_0_1_4 contains a Cross Site Scripting (XSS) vulnerability in The 'scan'...5.4 Medium
- open-emr openemrOpenEMR version v5_0_1_4 contains a Cross Site Scripting (XSS) vulnerability in The 'file'...5.4 Medium
- davegamble cjsonDave Gamble cJSON version 1.7.3 and earlier contains a CWE-416: Use After Free vulnerability in...9.8 Critical
- davegamble cjsonDave Gamble cJSON version 1.7.2 and earlier contains a CWE-415: Double Free vulnerability in...8.8 High
- davegamble cjsonDave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library...7.5 High
- rust-lang rustRust Programming Language Rust standard library version Commit...7.8 High
- palletsprojects flask, netapp active iq, hyper converged infrastructure +1 more +3 moreFlask is vulnerable to Denial of Service via incorrect encoding of JSON data7.5 High
- jsishJsish version 2.4.65 contains a CWE-476: NULL Pointer Dereference vulnerability in Function...6.5 Medium
- gnu libtasn1GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically...5.5 Medium
- zzcmszzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that...9.8 Critical
- jabrefJabRef version <=4.3.1 contains a XML External Entity (XXE) vulnerability in MsBibImporter XML...10.0 Critical
- gchq stroomStroom version <5.4.5 contains a XML External Entity (XXE) vulnerability in XML Parser that can...10.0 Critical
- librehealth ehrLibreHealthIO lh-ehr version REL-2.0.0 contains a SQL Injection vulnerability in Show Groups...8.8 High
- librehealth ehrLibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write in letter...8.8 High
- librehealth ehrLibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write...8.8 High
- librehealth ehrLibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Deletion...7.1 High
- librehealth ehrLibreHealthIO LH-EHR version REL-2.0.0 contains an Authenticated Unrestricted File Write...8.8 High
- librehealth ehrLibreHealthIO lh-ehr version <REL-2.0.0 contains an Authenticated Local File Disclosure...6.5 Medium
- eclipse rdf4jEclipse RDF4j vulnerable to XML External Entity10.0 Critical
- flightairmapFlightAirMap version <=v1.0-beta.21 contains a Cross Site Scripting (XSS) vulnerability in GET...6.1 Medium
- yeswikiYesWiki version <= cercopitheque beta 1 contains a PHP Object Injection vulnerability in...9.8 Critical
- villagedefrance opencart-overclockedOpenCart-Overclocked Cross-site Scripting Vulnerability6.1 Medium
- latexdraw project latexdrawLatexDraw version <=4.0 contains a XML External Entity (XXE) vulnerability in SVG parsing...9.6 Critical
- 1234n minicmsMiniCMS version 1.1 contains a Cross Site Scripting (XSS) vulnerability in http://example.org/mc...6.1 Medium
- nongnu zutils, debian linux +1 morezutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that...7.8 High
- jerryscriptJerryScript version Tested on commit f86d7459d195c8ba58479d1861b0cc726c8b3793. Analysing history...6.5 Medium
- openmicroscopy omeroThe Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains a Information...6.7 Medium
- openmicroscopy omeroThe Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access...7.2 High
- openmicroscopy omeroThe Open Microscopy Environment OMERO.web version prior to 5.4.7 contains an Information Exposure...7.2 High
- dom4j project dom4j, debian linux, netapp oncommand workflow automation +11 more +13 moreDom4j contains a XML Injection vulnerability7.5 High
- symantec encryption management server, symantec corporation encryption management server (sems) +1 moreThe Symantec Encryption Management Server (SEMS) product, prior to version 3.4.2 MP1, may be...7.5 High
- pyro project pyroInsecure temporary file handling7.5 High
- reprisesoftware reprise license manager** DISPUTED ** An issue was discovered in the license editor in Reprise License Manager (RLM)...6.1 Medium
- reprisesoftware reprise license manager** DISPUTED ** An issue was discovered in Reprise License Manager (RLM) through 12.2BL2....8.8 High
- bijiadao waimai super cmsIn waimai Super Cms 20150505, there is stored XSS via the /admin.php/Foodcat/editsave fcname...4.8 Medium
- mylittleforum my little forummy little forum 2.4.12 allows CSRF for deletion of users.6.5 Medium
- tp5cms project tp5cmstp5cms through 2017-05-25 has CSRF via admin.php/category/delete.html.8.8 High
- cmsuno project cmsunoCMSUno before 1.5.3 has XSS via the title field.6.1 Medium
- tp5cms project tp5cmstp5cms through 2017-05-25 has XSS via the admin.php/article/index.html q parameter.6.1 Medium
- simple-cms project simple cmsAn issue was discovered in daveismyname simple-cms through 2014-03-11. admin/addpage.php does not...8.8 High
- simple-cms project simple cmsAn issue was discovered in daveismyname simple-cms through 2014-03-11. There is a CSRF...8.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 morearch/x86/kernel/paravirt.c in the Linux kernel before 4.18.1 mishandles certain indirect calls,...5.5 Medium
- Show moreLoading…