CVEs published in August 2018
1,014 vulnerabilities, 149 critical, 8 exploited.
- red hat ansible tower, redhat cloudforms management engine +1 moreAnsible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF...5.2 Medium
- theforeman katello, the foreman project foreman katello plugin +1 morekatello Improper Privilege Management vulnerability4.3 Medium
- red hat satelliteIt was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to...5.4 Medium
- redhat ansible tower, red hat ansible-tower +1 moreAnsible Tower before versions 3.1.8 and 3.2.6 is vulnerable to cross-site request forgery (CSRF)...8.8 High
- apache struts, netapp active iq unified manager, oncommand insight +5 more +7 moreApache Struts vulnerable to remote command execution (RCE) due to improper input validation8.1 High
temporarycrates.io`temporary` makes use of uninitialized memoryNo score- ibm api connectIBM API Connect 5.0.0.0 through 5.0.8.3 could allow a remote attacker to hijack the clicking...5.4 Medium
linuxDebianlinux - regression updateNo score- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreA cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM...5.3 Medium
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreIt was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen...5.9 Medium
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreIt was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen...5.9 Medium
- hdfgroup hdf5An issue was discovered in the HDF HDF5 1.10.2 library. Excessive stack consumption has been...6.5 Medium
- bloop airmailAn issue was discovered in Bloop Airmail 3 3.5.9 for macOS. Its primary WebView instance...4.3 Medium
- bloop airmail 3An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. Its primary WebView instance...5.3 Medium
- bloop airmail 3An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. The "send" command in the airmail://...5.3 Medium
- airmailapp airmailAn issue was discovered in Bloop Airmail 3 3.5.9 for macOS. It registers and uses the airmail://...7.5 High
- intel lldptoollldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when...4.3 Medium
- olacabs ola money** DISPUTED ** An issue was discovered in the Ola Money (aka com.olacabs.olamoney) application 1...7.5 High
- olacabs olamoney** DISPUTED ** An issue was discovered in the Ola Money (aka com.olacabs.olamoney) application 1...5.9 Medium
- geutebrueck re porter 16 firmwareGeutebrueck re_porter 16 before 7.8.974.20 has a possibility of unauthenticated access to...9.8 Critical
- geutebrueck re porter 16 firmwareA reflected cross-site scripting vulnerability exists in Geutebrueck re_porter 16 before 7.8.974...6.1 Medium
- javasystemsolutions sso pluginReflected Cross-Site Scripting exists in the Java System Solutions SSO plugin 4.0.13.1 for BMC...6.1 Medium
- ucopia wireless appliance firmwareImproper input sanitization within the restricted administration shell on UCOPIA Wireless...8.8 High
- belkin wemo insight smart plug, wemo insight smart plug firmware +1 moreWemo Insight Smart Plug - Remote Code Execution vulnerability5.9 Medium
- emerson deltavDeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable due to improper path...8.8 High
- emerson deltavDeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable to a buffer overflow exploit...8.8 High
- huawei usg2205bsr firmware, usg2220bsr firmware, usg5120bsr firmware +2 more +4 moreSome Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR...7.5 High
- huawei usg2205bsr firmware, usg2220bsr firmware, usg5120bsr firmware +2 more +4 moreSome Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR...7.5 High
- huawei usg2205bsr firmware, usg2220bsr firmware, usg5120bsr firmware +2 more +4 moreSome Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR...5.9 Medium
- node.jsIn all versions of Node.js 10 prior to 10.9.0, an argument processing flaw can cause `Buffer...7.5 High
- node.js, redhat openshift container platform +1 moreIn all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding ...7.5 High
- victor cms project cmsAn issue was discovered in Victor CMS through 2018-05-10. There is XSS via the Author field of...6.1 Medium
- elefantcmsElefant CMS Improper Input Validation9.8 Critical
- dropbear ssh project ssh, debian linux +1 moreThe recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a...5.3 Medium
- traefikTraefik Missing Authentication7.5 High
- base-files project base-files, canonical ubuntu linux +1 moreInsecure temporary file use in base-files7.0 High
- imagemagickIn ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36...6.5 Medium
- linux kernel, canonical ubuntu linux, debian linux +3 more +5 moreIt was found that the raw midi kernel driver does not protect against concurrent access which...7.8 High
- signal signal-desktopOpen Whisper Signal (aka Signal-Desktop) before 1.15.0-beta.10 allows information leakage.4.0 Medium
- paymorrowPaymorrow Improper Input Validation vulnerability5.3 Medium
- oxid-esales eshopAn issue was discovered in OXID eShop Enterprise Edition before 5.3.8, 6.0.x before 6.0.3, and 6...8.1 High
- ibm sdk, sdk, java technology edition, oracle enterprise manager base platform +4 more +6 moreThe IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java...7.4 High
- ibm sdk, java technology edition, software development kit, redhat enterprise linux desktop +3 more +5 moreA flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow...5.9 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreMultiple IBM Rational products are vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreMultiple IBM Rational products are vulnerable to HTML injection. A remote attacker could inject...5.4 Medium
- tridium niagara, niagara ax framework, ics-cert niagara ax framework and niagara 4 framework +2 moreAn attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior...9.8 Critical
- tridium niagara, ics-cert niagara ax framework and niagara 4 framework, tridium niagara ax framework +2 moreA path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems...7.2 High
- postgresqlThe interactive installer in PostgreSQL before 9.3.15, 9.4.x before 9.4.10, and 9.5.x before 9.5...8.1 High
- phpwhois project phpwhoisphpWhois arbitrary code execution via a crafted whois record9.8 Critical
- libvirt, redhat enterprise linux, enterprise linux desktop +7 more +9 morelibvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block...5.5 Medium
- Show moreLoading…