CVEs published in August 2018
1,014 vulnerabilities, 149 critical, 8 exploited.
- xkbcommon, canonical ubuntu linux, xkbcommon libxkbcommon +2 moreUnchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before...5.5 Medium
- xkbcommon, canonical ubuntu linux, xkbcommon libxkbcommon +2 moreUnchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could...5.5 Medium
- xkbcommon, canonical ubuntu linux, xkbcommon libxkbcommon +2 moreUnchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could...5.5 Medium
- xkbcommon, canonical ubuntu linux, xkbcommon libxkbcommon +2 moreUnchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in...5.5 Medium
- xkbcommon, canonical ubuntu linux, xkbcommon libxkbcommon +2 moreUnchecked NULL pointer usage when handling invalid aliases in CopyKeyAliasesToKeymap in xkbcomp...5.5 Medium
- xkbcommon, canonical ubuntu linux, xkbcommon libxkbcommon +2 moreAn invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1...7.8 High
- xkbcommon, canonical ubuntu linux +1 moreAn infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in...5.5 Medium
- xkbcommon project xkbcommon, canonical ubuntu linux +1 moreUnchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash ...5.5 Medium
- xkbcommon project xkbcommon, canonical ubuntu linux +1 moreUnchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash ...5.5 Medium
- xkbcommon libxkbcommon, xkbcommon, canonical ubuntu linux +2 moreEndless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which...5.5 Medium
- pimcorePimcore XSS Vulnerability5.4 Medium
- hazzardweb easylogin proAn issue was discovered in EasyLogin Pro through 1.3.0. Encryptor.php contains an unserialize...8.1 High
- seasofsolutions ip camera firmwareInformation disclosure in Netwave IP camera at get_status.cgi (via HTTP on port 8000) allows an...7.5 High
- seasofsolutions ip camera firmwareInformation disclosure in Netwave IP camera at //etc/RT2870STA.dat (via HTTP on port 8000) allows...9.8 Critical
- moderator log notes project log notesAn issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB. It allows moderators to...6.5 Medium
- npci bharat interface for money \(bhim\)The National Payments Corporation of India BHIM application 1.3 for Android relies on three...9.8 Critical
- npci bharat interface for money \(bhim\)The National Payments Corporation of India BHIM application 1.3 for Android uses a custom keypad...9.8 Critical
- npci bharat interface for money \(bhim\)The National Payments Corporation of India BHIM application 1.3 for Android does not properly...9.8 Critical
- npci bharat interface for money \(bhim\)The National Payments Corporation of India BHIM application 1.3 for Android relies on a four...7.5 High
- egg egg-scriptsCommand Injection in egg-scripts9.8 Critical
- couchbase serverCouchbase Server exposed the '/diag/eval' endpoint which by default is available on TCP/8091 and...8.8 High
- phpmyadminphpMyAdmin Cross-site Scripting (XSS) in the import dialog6.1 Medium
- tecrail responsive filemanager/filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 does not properly...5.5 Medium
- tecrail responsive filemanager/filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 uses external input...7.5 High
- gearsoftware gearaspiwdmGEAR Software products that include GEARAspiWDM.sys, 2.2.5.0, allow local users to cause a denial...4.7 Medium
- planex cs-qr20 firmware, smacam night vision +1 moreAn issue was discovered on the PLANEX CS-QR20 1.30. A hardcoded account / password ("admin...9.8 Critical
- planex cs-qr20 firmwareAn issue was discovered on the PLANEX CS-QR20 1.30. A hidden and undocumented management page...7.2 High
- aterm wg2600hp2 firmwareAn issue was discovered on the NEC Aterm WG2600HP2 1.0.2. The router has a set of web service...7.5 High
- planex cs-w50hd firmwareAn issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. A hardcoded...9.8 Critical
- planex cs-w50hd firmwareAn issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. The device has a...8.8 High
- dlink eyeon baby monitor firmwareThe D-Link EyeOn Baby Monitor (DCS-825L) 1.08.1 has multiple command injection vulnerabilities in...8.8 High
- dlink eyeon baby monitor firmwareD-Link EyeOn Baby Monitor (DCS-825L) 1.08.1 has a remote code execution vulnerability. A UDP ...9.8 Critical
- dell rsa archer, rsa archer +1 moreThe WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior...2.7 Low
- dell emc rsa netwitness, rsa security analytics, rsa security analytics +2 moreRSA NetWitness Platform versions prior to 11.1.0.2 and RSA Security Analytics versions prior to...9.1 Critical
- perforce puppet enterprise, puppet enterprise +1 moreWhen users are configured to use startTLS with RBAC LDAP, at login time, the user's credentials...9.8 Critical
- ibm websphere application serverIBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive...5.9 Medium
- ibm security access manager appliance, security access manager +1 moreIBM Security Access Manager Appliance 9.0.4.0 and 9.0.5.0 could allow remote code execution when...10.0 Critical
- ibm maximo asset managementIBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to SQL injection. A remote attacker...6.3 Medium
- samsung, samsung sth-eth-250 firmware +1 moreAn exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung...9.1 Critical
- samsung, samsung sth-eth-250 firmware +1 moreAn exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung...9.1 Critical
- x.org libx11, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c...9.8 Critical
- x.org libx11, canonical ubuntu linux, debian linux +4 more +6 moreAn issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is...9.8 Critical
- x.org libx11, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious...7.5 High
dpkgMageiaUpdated dpkg packages fix security vulnerabilityNo score- samsung, samsung sth-eth-250 firmware +1 moreAn exploitable HTTP header injection vulnerability exists in the remote servers of Samsung...8.6 High
- samsung, samsung sth-eth-250 firmware +1 moreAn exploitable stack-based buffer overflow vulnerability exists in the database 'find-by-cameraId...8.2 High
- samsung, samsung sth-eth-250 firmware +1 moreAn exploitable buffer overflow vulnerability exists in the credentials handler of video-core's...9.9 Critical
- samsung, samsung sth-eth-250 firmware +1 moreAn exploitable buffer overflow vulnerability exists in the samsungWifiScan handler of video-core...9.9 Critical
- samsung, samsung sth-eth-250 firmware +1 moreAn exploitable vulnerability exists in the smart cameras RTSP configuration of the Samsung...9.9 Critical
- accuposAccuPOS 2017.8 is installed with the insecure "Authenticated Users: Modify" permission for files...5.5 Medium
- Show moreLoading…