CVEs published in August 2018
1,014 vulnerabilities, 149 critical, 8 exploited.
- samsung, samsung sth-eth-250 firmware +1 moreAn exploitable buffer overflow vulnerability exists in the camera 'update' feature of video-core...9.9 Critical
- samsung sth-eth-250 firmwareAn exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video...9.9 Critical
- asus dsl-n12e c1 firmwareMain_Analysis_Content.asp in ASUS DSL-N12E_C1 1.1.2.3_345 is prone to Authenticated Remote...8.8 High
- visiology flipboxVisiology Flipbox Software Suite before 2.7.0 allows directory traversal via %5c%2e%2e%2f because...7.5 High
- ibm websphere commerceIBM WebSphere Commerce Enterprise, Professional, Express, and Developer 9.0.0.0 - 9.0.0.4, 8.0.0...3.1 Low
- a10networks acos web application firewallA10 ACOS Web Application Firewall (WAF) 2.7.1 and 2.7.2 before 2.7.2-P12, 4.1.0 before 4.1.0-P11,...9.8 Critical
- asustor data master, tenable asustor data master +1 moreASUSTOR Data Master 3.1.5 and below makes an HTTP request for a configuration file that is...6.1 Medium
- asustor data master, tenable asustor data master +1 moreASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read...6.5 Medium
- asustor data master, tenable asustor data master +1 moreASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read...6.5 Medium
- asustor data master, tenable asustor data master +1 moreASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to...4.3 Medium
- asustor data master, tenable asustor data master +1 moreASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to...6.5 Medium
- asustor data master, tenable asustor data master +1 moreASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to...7.5 High
- qnap photo stationCross-site scripting vulnerability in QNAP Photo Station versions 5.7.0 and earlier could allow...6.1 Medium
- 1234n minicmsAn issue was discovered in MiniCMS 1.10. There is a post.php?date= XSS vulnerability.6.1 Medium
- icmsdev icmsAn SSRF vulnerability was discovered in idreamsoft iCMS 7.0.11 because the remote function in app...7.5 High
- wuzhi cms project cmsA SQL injection was discovered in /coreframe/app/admin/pay/admin/index.php in WUZHI CMS 4.1.0 via...9.8 Critical
- wuzhi cms project cmsA SQL injection was discovered in /coreframe/app/admin/copyfrom.php in WUZHI CMS 4.1.0 via the...9.8 Critical
- lansweeperLansweeper 4.x through 6.x before 6.0.0.48 allows attackers to execute arbitrary code on the...9.8 Critical
- idera uptime infrastructure monitorAn issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 (build 16) and 7.4.0...9.8 Critical
- umbraco cmsUmbraco before 7.2.0 has a remote PHP code execution vulnerability because Umbraco.Web.UI/config...9.8 Critical
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +6 more +8 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a...7.8 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +8 more +10 moreIn Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could...7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +5 more +7 moreIn Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to supply malicious PostScript...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreA flaw was found in the Linux kernel present since v4.0-rc1 and through v4.13-rc4. A crafted...5.9 Medium
- aspcmsAn issue was discovered in ASPCMS 2.5.6. When registering ordinary users in the addUser function...9.8 Critical
- ovation findmeOvation FindMe 1.4-1083-1 is intended to support transmission of network traffic from covert...7.5 High
- zyxel vmg3312 b10b firmwareZyxel VMG3312 B10B devices are affected by a persistent XSS vulnerability via the pages...6.1 Medium
- joomanager project joomanagerThe Joomanager component through 2.0.0 for Joomla! has an arbitrary file download issue,...9.8 Critical
- vanillaforums vanilla forumsIn Vanilla before 2.6.1, the polling functionality allows Insecure Direct Object Reference (IDOR)...4.3 Medium
- plainview activity monitor project activity monitorThe Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command...8.8 High
- ajax bootmodal login project bootmodal loginAn issue was discovered in the ajax-bootmodal-login plugin 1.4.3 for WordPress. The register form...5.3 Medium
- apache mod perl, canonical ubuntu linux, debian linux +4 more +6 moremod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a...9.8 Critical
- technicolor tc7200.20 firmware** DISPUTED ** Technicolor TC7200.20 devices allow remote attackers to cause a denial of service ...6.5 Medium
- flexocms project flexo cmsAn issue was discovered in Flexo CMS v0.1.6. There is a CSRF vulnerability that can add an...8.8 High
- redaxo cmsAn issue was discovered in REDAXO CMS 4.7.2. There is a CSRF vulnerability that can add an...8.8 High
- portfoliocms project portfoliocmsAn issue was discovered in portfolioCMS 1.0.5. There is CSRF to update the website settings via...4.3 Medium
- portfoliocms project portfoliocmsAn issue was discovered in portfolioCMS 1.0.5. There is CSRF to create new pages via admin...8.8 High
- puppycmsAn issue was discovered in puppyCMS 5.1. There is an XSS vulnerability via menu.php in the "Add...6.1 Medium
- fledrcms project fledrcmsAn issue was discovered in fledrCMS through 2014-02-03. There is a CSRF vulnerability that can...8.8 High
- gleezcms gleez cmsGleez CMS CSRF Allows Adding of Administrator Accounts8.8 High
- damicmsAn issue was discovered in DamiCMS 6.0.0. There is an CSRF vulnerability that can revise the...8.8 High
- get-simple getsimple cmsGetSimple CMS 3.3.14 has XSS via the admin/edit.php "Add New Page" field.4.8 Medium
- wolfcms wolf cmsWolfCMS 0.8.3.1 has XSS via the /?/admin/page/add slug parameter.4.8 Medium
- dlink dir-615 firmwareCross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows attackers to...6.1 Medium
- dlink dir-615 firmwareCross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to...6.1 Medium
- libmingAn invalid memory address dereference was discovered in decompileSingleArgBuiltInFunctionCall in...6.5 Medium
- libmingAn invalid memory address dereference was discovered in decompileGETVARIABLE in libming 0.4.8...6.5 Medium
- claxon project claxonUninitialized memory exposure in claxon6.5 Medium
- hashicorp packerRecommended update for aws-cli, python-boto3, python-botocore, python-s3transfer5.3 Medium
- xkbcommon, canonical ubuntu linux, xkbcommon libxkbcommon +2 moreUnchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2...5.5 Medium
- Show moreLoading…