CVEs published in August 2018
1,014 vulnerabilities, 149 critical, 8 exploited.
- posim evoPOSIM EVO 15.13 for Windows includes hardcoded database credentials for the "root" database user....9.8 Critical
- posim evoPOSIM EVO 15.13 for Windows includes an "Emergency Override" administrative account that may be...7.8 High
- emerson deltav, deltav dcs +1 moreEmerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 allow a specially crafted DLL file...7.8 High
- emerson deltav, deltav dcs +1 moreEmerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 may allow non-administrative users...7.8 High
- becton, dickinson and company alaris gs, alaris gh, alaris cc, and alaris tiva, bd alaris cc firmware, alaris gh firmware +2 more +4 moreBecton, Dickinson and Company (BD) Alaris Plus medical syringe pumps (models Alaris GS, Alaris GH...9.4 Critical
- mikrotik routerosMikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory corruption vulnerability. An...6.5 Medium
- mikrotik routerosMikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a stack exhaustion vulnerability. An...6.5 Medium
- mikrotik routerosMikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory exhaustion vulnerability. An...6.5 Medium
- mikrotik routerosMikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to stack buffer overflow through the...8.8 High
- samsung smartthings hub sth-eth-250, sth-eth-250 firmware +1 moreOn Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core...7.5 High
- jenkinsIncorrect Authorization in Jenkins6.5 Medium
- jenkinsExposure of Sensitive Information to an Unauthorized Actor in Jenkins4.3 Medium
- jenkinsImproper Authentication in Jenkins5.4 Medium
- jenkinsInfinite Loop in Jenkins Core6.5 Medium
- jenkinsMissing Release of Resource after Effective Lifetime in Jenkins7.5 High
- jenkinsDeserialization of Untrusted Data in Jenkins5.3 Medium
- maprAn issue was discovered in the MapR File System in MapR Converged Data Platform and MapR-XD 6.x...8.8 High
- insteon hub firmware, hub 2245-222 +1 moreAn exploitable buffer overflow vulnerability exists in the PubNub message handler for the ...8.5 High
- google fscryptPrivilege Escalation in fscrypt6.5 Medium
- apache sentryApache Sentry may allow attacker to access/remove data from Sentry protected table8.8 High
- samsung smartthings hub sth-eth-250, sth-eth-250 firmware +1 moreAn exploitable buffer overflow vulnerability exists in the remote video-host communication of...8.5 High
- samsung smartthings hub sth-eth-250, sth-eth-250 firmware +1 moreAn exploitable stack-based buffer overflow vulnerability exists in the retrieval of database...7.5 High
- samsung smartthings hub sth-eth-250, sth-eth-250 firmware +1 moreOn Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core...7.5 High
- samsung smartthings hub sth-eth-250, sth-eth-250 firmware +1 moreAn exploitable buffer overflow vulnerability exists in the camera "create" feature of video-core...8.5 High
- samsung, samsung sth-eth-250 firmware +1 moreOn Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core...9.9 Critical
- samsung smartthings hub sth-eth-250, sth-eth-250 firmware +1 moreAn exploitable buffer overflow vulnerability exists in the camera "replace" feature of video-core...9.9 Critical
- samsung smartthings hub sth-eth-250, sth-eth-250 firmware +1 moreAn exploitable JSON injection vulnerability exists in the credentials handler of video-core's...8.8 High
- samsung smartthings hub sth-eth-250, sth-eth-250 firmware +1 moreMultiple exploitable buffer overflow vulnerabilities exist in the credentials handler of video...9.9 Critical
- samsung smartthings hub sth-eth-250, sth-eth-250 firmware +1 moreAn exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback...9.9 Critical
- samsung smartthings hub sth-eth-250, sth-eth-250 firmware +1 moreOn Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core...9.9 Critical
- dell 2335dn engine firmware, 2335dn network firmware, 2335dn printer firmware +2 moreOn Dell 2335dn printers with Printer Firmware Version 2.70.05.02, Engine Firmware Version 1.10.65...8.8 High
- insteon hub 2245-222, hub 2245-222 firmware +1 moreOn Insteon Hub 2245-222 devices with firmware version 1012, specially crafted commands sent...8.5 High
- insteon hub 2245-222, hub 2245-222 firmware +1 moreOn Insteon Hub 2245-222 devices with firmware version 1012, specially crafted replies received...8.5 High
- insteon hub 2245-222, hub 2245-222 firmware +1 moreOn Insteon Hub 2245-222 devices with firmware version 1012, specially crafted replies received...8.5 High
- insteon, insteon hub 2245-222 firmware +1 moreAn exploitable firmware downgrade vulnerability exists in Insteon Hub running firmware version...8.6 High
- insteon, insteon hub 2245-222 firmware +1 moreAn exploitable firmware update vulnerability exists in Insteon Hub running firmware version 1013....9.9 Critical
- insteon, insteon hub firmware +1 moreAn exploitable denial of service vulnerability exists in Insteon Hub running firmware version...7.5 High
- electronjs electronElectron webPreferences vulnerability can be used to perform remote code execution8.1 High
- ffmpeg, canonical ubuntu linux, debian linux +2 moreThe flv_write_packet function in libavformat/flvenc.c in FFmpeg through 2.8 does not check for an...7.5 High
- redhat libvirtA NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty...7.7 High
- fabrice bellard libbpgA vulnerability was found while fuzzing libbpg 0.9.7. It is a NULL pointer dereference issue due...6.5 Medium
- apache cayenneXML External Entity Reference in Apache Cayenne8.1 High
- philips pagewriter tc10, tc20, tc30, tc50, tc70 cardiographs, pagewriter tc10 firmware, pagewriter tc20 firmware +3 more +5 moreIn Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018,...6.2 Medium
- philips pagewriter tc10, tc20, tc30, tc50, tc70 cardiographs, pagewriter tc10 firmware, pagewriter tc20 firmware +3 more +5 moreIn Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018,...3.7 Low
- philips intellispace cardiovascular (iscv) products, intellispace cardiovascular, xcelera +2 moreIn Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 3.1 or prior and Xcelera...6.7 Medium
- philips intellispace cardiovascular (iscv) products, intellispace cardiovascular, xcelera +2 moreIn Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 2.x or prior and Xcelera...7.8 High
- gnome pango, canonical ubuntu linux +1 morelibpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote...6.5 Medium
- symantec norton power eraser, symdiag +1 moreNorton Power Eraser (prior to 5.3.0.24) and SymDiag (prior to 2.1.242) may be susceptible to a...7.8 High
- symantec norton utilitiesNorton Utilities (prior to 16.0.3.44) may be susceptible to a DLL Preloading vulnerability, which...6.0 Medium
- openstack tripleo-common, red hat openstack-tripleo-common, redhat openstack +2 moreA flaw was found in openstack-tripleo-common as shipped with Red Hat Openstack Enterprise 10 and...8.2 High
- Show moreLoading…