CVEs published in August 2018
1,014 vulnerabilities, 149 critical, 8 exploited.
- apache traffic server, debian linux +1 moreWhen there are multiple ranges in a range request, Apache Traffic Server (ATS) will read the...5.3 Medium
- apache traffic server, debian linux +1 moreThere are multiple HTTP smuggling and cache poisoning issues when clients making malicious...6.5 Medium
- adobe creative cloudAdobe Creative Cloud Desktop Application before 4.5.5.342 (installer) has an insecure library...7.8 High
- apache traffic server, debian linux +1 moreAdding method ACLs in remap.config can cause a segfault when the user makes a carefully crafted...7.5 High
- adobe creative cloudAdobe Creative Cloud Desktop Application before 4.6.1 has an improper certificate validation...9.8 Critical
- adobe photoshop ccAdobe Photoshop CC 2018 before 19.1.6 and Photoshop CC 2017 before 18.1.6 have a memory...9.8 Critical
- adobe photoshop ccAdobe Photoshop CC 2018 before 19.1.6 and Photoshop CC 2017 before 18.1.6 have a memory...9.8 Critical
- adobe acrobat dc, acrobat reader dc +1 moreAdobe Acrobat and Reader versions 2018.011.20055 and earlier, 2017.011.30096 and earlier, and...9.8 Critical
- adobe experience managerAdobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have an input validation bypass...5.3 Medium
- adobe experience managerAdobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site...6.1 Medium
- adobe acrobat dc, acrobat reader dc +1 moreAdobe Acrobat and Reader versions 2018.011.20055 and earlier, 2017.011.30096 and earlier, and...8.8 High
- joomla joomla\!An issue was discovered in Joomla! before 3.8.12. Inadequate checks in the InputFilter class...9.8 Critical
- joomla joomla\!An issue was discovered in Joomla! before 3.8.12. Inadequate checks regarding disabled fields can...7.5 High
- joomla joomla\!An issue was discovered in Joomla! before 3.8.12. Inadequate output filtering on the user profile...5.4 Medium
- auth0 aspnet, aspnet-owin +1 moreAuth0-ASPNET and Auth0-ASPNET-Owin vulnerable to Cross-Site Request Forgery8.8 High
- fig2dev project fig2dev, canonical ubuntu linux +1 moreA buffer underwrite vulnerability in get_line() (read.c) in fig2dev 3.2.7a allows an attacker to...7.8 High
- website seller script project seller scriptPHP Scripts Mall Website Seller Script 2.0.5 allows remote attackers to cause a denial of service...6.5 Medium
- website seller script project seller scriptPHP Scripts Mall Website Seller Script 2.0.5 has XSS via Personal Address or Company Name.5.4 Medium
- samsung, samsung sth-eth-250 firmware +1 moreAn exploitable stack-based buffer overflow vulnerability exists in the retrieval of database...7.5 High
- infoblox netmriInfoblox NetMRI 7.1.1 has Reflected Cross-Site Scripting via the /api/docs/index.php query...6.1 Medium
- samsung, samsung sth-eth-250 firmware +1 moreAn exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung...9.1 Critical
- samsung, samsung sth-eth-250 firmware +1 moreAn exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video...9.9 Critical
- e107e107 2.1.8 has CSRF in 'usersettings.php' with an impact of changing details such as passwords of...8.8 High
- ricoh mp c4504ex firmwareRICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi...8.8 High
- sapplica sentrifugoA SQL Injection issue was discovered in Sentrifugo 3.2 via the deptid parameter.9.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus 6.5.7 has XSS on the "Workflow Delegation" "Requester Roles"...6.1 Medium
- manageengine admanager plusZoho ManageEngine ADManager Plus 6.5.7 allows HTML Injection on the "AD Delegation" "Help Desk...6.1 Medium
- mybbAn issue was discovered in inc/class_feedgeneration.php in MyBB 1.8.17. On the forum RSS...6.1 Medium
- pyconuk conference-scheduler-cliconference-scheduler-cli Arbitrary Code Execution7.8 High
- google chromeInsufficient data validation in Chromecast plugin in Google Chrome prior to 63.0.3239.84 allowed...4.3 Medium
- samsung, samsung sth-eth-250 firmware +1 moreAn exploitable integer underflow vulnerability exists in the ZigBee firmware update routine of...5.3 Medium
- dlink dir-615 firmwareD-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header.9.8 Critical
- export users to csv project users to csvThe Export Users to CSV plugin through 1.1.1 for WordPress allows CSV injection.8.6 High
- mutinyA command injection vulnerability in maintenance.cgi in Mutiny "Monitoring Appliance" before 6.1...8.8 High
- phpmyfaqphpMyFAQ before 2.8.13 allows remote attackers to bypass the CAPTCHA protection mechanism by...5.3 Medium
- phpmyfaqphpMyFAQ before 2.8.13 allows remote authenticated users with admin privileges to bypass...2.7 Low
- phpmyfaqphpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request.5.3 Medium
- phpmyfaqphpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read...5.3 Medium
- phpmyfaqMultiple cross-site request forgery (CSRF) vulnerabilities in phpMyFAQ before 2.8.13 allow remote...8.8 High
- phpmyfaqSQL injection vulnerability in phpMyFAQ before 2.8.13 allows remote authenticated users with...7.2 High
- wordfence securityCross-site scripting (XSS) vulnerability in the Wordfence Security plugin before 5.1.5 for...6.1 Medium
- atlassian jira, jira server +1 moreVarious resources in Atlassian Jira before version 7.6.8, from version 7.7.0 before version 7.7.5...6.1 Medium
- atlassian jira, jira server +1 moreThe ProfileLinkUserFormat component of Jira Server before version 7.6.8, from version 7.7.0...5.3 Medium
- ibm platform symphony, spectrum symphony +1 moreIBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2...6.5 Medium
- openbsd openssh, netapp cloud backup, cn1610 firmware +3 more +5 moreRemotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote...5.3 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 moredwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote...5.5 Medium
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +8 more +10 moreIn Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could...7.8 High
- openstack cinder, openstack foundation openstack-cinder, redhat openstack +2 moreA vulnerability was found in openstack-cinder releases up to and including Queens, allowing newly...5.1 Medium
- samsung, samsung sth-eth-250 firmware +1 moreAn exploitable information disclosure vulnerability exists in the crash handler of the hubCore...6.8 Medium
- samsung, samsung sth-eth-250 firmware +1 moreAn exploitable vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 ...6.5 Medium
- Show moreLoading…