CVEs published in August 2018
1,014 vulnerabilities, 149 critical, 8 exploited.
- ca technologies ppm, broadcom project portfolio management +1 moreInsufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5...9.8 Critical
- ca technologies ppm, broadcom project portfolio management +1 moreAn XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15...7.5 High
- ca technologies ppm, broadcom project portfolio management +1 moreUnprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and...7.5 High
- broadcom unified infrastructure managementA lack of authentication, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows...9.8 Critical
- broadcom unified infrastructure managementA hardcoded passphrase, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows...7.5 High
- broadcom unified infrastructure managementA hardcoded secret key, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows...7.5 High
- bijiadao waimai super cmswaimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form...5.3 Medium
- lightbend akka httpHigh severity vulnerability that affects com.typesafe.akka:akka-http-core_2.11 and com.typesafe.akka:akka-http-core_2.127.5 High
- [unknown] libtirpcAn infinite loop vulnerability was found in libtirpc before version 1.0.2-rc2. With the port to...5.3 Medium
- [unknown] postgresql, postgresql jdbc driver, redhat enterprise linux +2 moreModerate severity vulnerability that affects org.postgresql:pgjdbc-aggregate8.1 High
- [unknown] kernelA flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The ...6.2 Medium
- foxit reader, foxitsoftware foxit reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- tencent foxmailThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- mosca project moscaMosca REDoS Vulnerability7.5 High
libtirpcSUSESecurity update for libtirpcNo score- opensuse libzypplibzypp does not reevaluate malicious rpms once downloaded7.8 High
- eaton power xpert meter 4000 firmware, power xpert meter 6000 firmware, power xpert meter 8000 firmware +2 moreEaton Power Xpert Meter 4000, 6000, and 8000 devices before 13.4.0.10 have a single SSH private...9.8 Critical
- phpokPHPOK 4.8.278 has a Reflected XSS vulnerability in framework/www/login_control.php via the _back...6.1 Medium
- thinkcmf thinkcmfxThinkCMF X2.2.3 has an arbitrary file deletion vulnerability in do_avatar in \application\User...6.5 Medium
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth AVDTP dissector...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth Attribute...7.5 High
- [unknown] libtirpc, canonical ubuntu linux, debian linux +5 more +7 moreA null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The...5.3 Medium
- redhat 389 directory server, red hat 389-ds-base +1 moreA flaw was found in the 389 Directory Server that allows users to cause a crash in the LDAP...6.5 Medium
- cybrotech cybrohttpserverCybrotech CyBroHttpServer 1.0.3 allows XSS via a URI.6.1 Medium
- cybrotech cybrohttpserverCybrotech CyBroHttpServer 1.0.3 allows Directory Traversal via a ../ in the URI.5.3 Medium
- signalThe image rendering component (createGenericPreview) of the Open Whisper Signal app through 2.29...8.6 High
- lightbend akkaCryptographically Weak Pseudo-Random Number Generator (PRNG) in akka-actor9.1 Critical
- schneider electric se modicon m221, all references, all versions prior to firmware v1.6.2.0, schneider-electric modicon m221 firmware +1 moreA Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's...7.5 High
- schneider electric se modicon m221, all references, all versions prior to firmware v1.6.2.0, schneider-electric modicon m221 firmware +1 moreA Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's...9.8 Critical
- schneider electric se modicon m221, all references, all versions prior to firmware v1.6.2.0, schneider-electric modicon m221 firmware +1 moreAn Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product...9.8 Critical
- schneider electric se powerlogic - pm5560 prior to fw version 2.5.4, schneider-electric powerlogic pm5560 firmware +1 moreA Cross Protocol Injection vulnerability exists in Schneider Electric's PowerLogic (PM5560 prior...6.1 Medium
- schneider electric se modicon m221, all references, all versions prior to firmware v1.6.2.0, schneider-electric modicon m221 firmware +1 moreAn Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider...7.5 High
- symantec norton password manager, symantec corporation norton identity safe for android +1 moreThe Norton Identity Safe product prior to 5.3.0.976 may be susceptible to a privilege escalation...5.9 Medium
- orbic wonder rc555l firmwareAn issue was discovered on Orbic Wonder Orbic/RC555L/RC555L:7.1.2/N2G47H/329100b:user/release...5.5 Medium
- orbic wonder rc555l firmwareAn issue was discovered on Orbic Wonder Orbic/RC555L/RC555L:7.1.2/N2G47H/329100b:user/release...7.1 High
- alcatel a30 firmwareThe Alcatel A30 device with a build fingerprint of TCL/5046G/MICKEY6US:7.0/NRD90M/J63:user...6.8 Medium
- manjaro linuxAn issue was discovered in manjaro-update-system.sh in manjaro-system 20180716-1 on Manjaro Linux...7.8 High
- technicolor tc8305c firmware** DISPUTED ** Technicolor (formerly RCA) TC8305C devices allow remote attackers to cause a...6.5 Medium
- qemuqemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service (guest crash...5.5 Medium
- iswebCMS ISWEB 3.5.3 has XSS via the ordineRis, sezioneRicerca, or oggettiRicerca parameter to index.php.6.1 Medium
- vivotek cameraVarious VIVOTEK FD8*, FD9*, FE9*, IB8*, IB9*, IP9*, IZ9*, MS9*, SD9*, and other devices before...8.8 High
- dlink dir-601 firmwareAn issue was discovered on D-Link DIR-601 2.02NA devices. Being local to the network and having...8.0 High
- episerverXML external entity (XXE) vulnerability in Episerver 7 patch 4 and earlier allows remote...7.5 High
drupal/commercePackagistThis module enables you to build eCommerce websites and applications with Drupal. The module doesn't sufficiently check access for some of its entity types.No score- hitachienergy esoms, ics-cert abb esoms +1 moreABB eSOMS version 6.0.2 may allow unauthorized access to the system when LDAP is set to allow...9.8 Critical
ImageMagickSUSESecurity update for ImageMagickNo score- grafana, redhat ceph storage +1 moreGrafana Authentication Bypass9.8 Critical
- apache traffic server, debian linux +1 morePages that are rendered using the ESI plugin can have access to the cookie header when the plugin...5.3 Medium
- apache traffic serverA carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault. This...7.5 High
- Show moreLoading…