CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- schismtracker schism tracker fmt_mtm_load_song in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow. 7.8 High
- milkytracker project milkytracker, canonical ubuntu linux, debian linux +1 more +3 more XMFile::read in XMFile.cpp in milkyplay in MilkyTracker 1.02.00 has a heap-based buffer overflow. 5.5 Medium
- libmodbus, debian linux, fedoraproject fedora +2 more An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of... 9.1 Critical
- libmodbus, debian linux, fedoraproject fedora +2 more An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of... 9.1 Critical
- the foreman project foreman-tasks, redhat satellite +1 more An authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously,... 6.5 Medium
- avaya aura conferencing Avaya Aura Conferencing XSS 5.9 Medium
- moodle Moodle CSRF Vulnerability 6.5 Medium
- moodle Moodle Ability to delete glossary entries that belong to another glossary 4.0 Medium
- moodle moodle Improper Access Control 4.0 Medium
- moodle moodle Improper Access Control 4.0 Medium
- nfdump project nfdump, debian linux, fedoraproject fedora +2 more nfdump 1.6.17 and earlier is affected by an integer overflow in the function... 7.5 High
- opengear Opengear console server firmware releases prior to 4.5.0 have a stored XSS vulnerability related... 5.4 Medium
- elmelectronics elm27 firmware A clone version of an ELM327 OBD2 Bluetooth device has a hardcoded PIN, leading to arbitrary... 9.8 Critical
- symantec endpoint protection Symantec Endpoint Protection, prior to 14.2 RU1 & 12.1 RU6 MP10 and Symantec Endpoint Protection... 7.8 High
- wallaceit wallacepos Insufficient output sanitization in WallacePOS 1.4.3 allows a remote, authenticated attacker to... 5.4 Medium
- cisco nx-os system software, nx-os +1 more Cisco Nexus 9000 Series ACI Mode Switch Software Link Layer Discovery Protocol Buffer Overflow Vulnerability 8.8 High
- wallaceit wallacepos Cross-site request forgery in WallacePOS 1.4.3 allows a remote attacker to perform sensitive... 8.8 High
- wallaceit wallacepos Unrestricted upload of file with dangerous type in WallacePOS 1.4.3 allows a remote,... 7.2 High
- i-lan draytekl firmware DrayTek routers before 2018-05-23 allow CSRF attacks to change DNS or DHCP settings, a related... 6.5 Medium
- sas drug development SAS Drug Development (SDD) before 32DRG02 mishandles logout actions, which allows a user (who was... 8.8 High
- red hat sdl, libsdl sdl2 image, opensuse backports sle +1 more +3 more An exploitable code execution vulnerability exists in the XPM image rendering function of... 8.8 High
- red hat sdl, libsdl sdl2 image, opensuse backports sle +1 more +3 more An exploitable code execution vulnerability exists in the XPM image rendering functionality of... 8.8 High
- red hat sdl, libsdl sdl2 image, opensuse backports sle +1 more +3 more An exploitable code execution vulnerability exists in the XCF image rendering functionality of... 8.8 High
- red hat sdl, libsdl sdl2 image, opensuse backports sle +1 more +3 more An exploitable code execution vulnerability exists in the PCX image-rendering functionality of... 8.8 High
- virustotal yara An exploitable denial of service vulnerability exists in the object lookup functionality of Yara... 6.5 Medium
- icedtea icedtea-web, debian linux, opensuse leap +2 more It was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip... 8.2 High
- icedtea icedtea-web, redhat enterprise linux desktop, enterprise linux server +3 more +5 more It was found that icedtea-web though 1.7.2 and 1.8.2 did not properly sanitize paths from <jar/>... 8.2 High
- icedtea icedtea-web, debian linux, opensuse leap +2 more It was found that in icedtea-web up to and including 1.7.2 and 1.8.2 executable code could be... 6.3 Medium
- ibm storediq IBM StoreIQ 7.6.0.0. through 7.6.0.18 could allow a remote attacker to cause a denial of service... 5.3 Medium
- ibm storediq IBM StoreIQ 7.6.0.0. through 7.6.0.18 could allow an authenticated user to obtain sensitive... 4.3 Medium
- cimg CImg through 2.6.7 has a heap-based buffer overflow in _load_bmp in CImg.h because of erroneous... 8.8 High
- jenkins skytap cloud ci, jenkins project skytap cloud ci plugin +1 more Skytap Cloud CI Plugin stored credentials in plain text 6.5 Medium
- google kubernetes engine, jenkins project google kubernetes engine plugin +1 more Jenkins Google Kubernetes Engine Plugin vulnerable to Exposure of Resource to Wrong Sphere 4.3 Medium
- jenkins ec2, jenkins project amazon ec2 plugin +1 more Jenkins Amazon EC2 Plugin leaked beginning of private key in system log 5.5 Medium
- jenkins configuration as code, jenkins project configuration as code plugin +1 more Cleartext Transmission of Sensitive Information in Jenkins Configuration as Code Plugin 4.9 Medium
- jenkins configuration as code, jenkins project configuration as code plugin +1 more Improper Encoding or Escaping of Output in Jenkins Configuration as Code Plugin 5.4 Medium
- jenkins project maven release plugin, jenkins m2release +1 more Jenkins Maven Release Plug-in Plugin stored credentials in plain text 5.5 Medium
- jenkins project maven release plugin, jenkins m2 release +1 more Jenkins Maven Release Plugin vulnerable to Cross-site Scripting 5.4 Medium
- jenkins m2release, jenkins project maven release plugin +1 more Jenkins Maven Release Plugin contains Cross-Site Request Forgery vulnerability 6.3 Medium
- jenkins maven, jenkins project maven integration plugin +1 more Maven Integration Plugin did not mask sensitive values in module build logs 6.5 Medium
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\, redhat openshift container platform +2 more Missing Authorization in Jenkins Pipeline: Shared Groovy Libraries Plugin 4.3 Medium
- jenkins script security, jenkins project script security plugin, redhat openshift container platform +2 more Return of Pointer Value Outside of Expected Rang in Jenkins Script Security Plugin 8.8 High
- jenkins script security, jenkins project script security plugin, redhat openshift container platform +2 more Incorrect Privilege Assignment in Jenkins Script Security Plugin 8.8 High
- jenkins configuration as code, jenkins project configuration as code plugin +1 more Plaintext Storage of a Password in Jenkins Configuration as Code Plugin 5.5 Medium
- jenkins configuration as code, jenkins project configuration as code plugin +1 more Missing Authorization in Jenkins Configuration as Code Plugin 4.3 Medium
- jenkins configuration as code, jenkins project configuration as code plugin +1 more Insertion of Sensitive Information into Log File in Jenkins Configuration as Code Plugin 3.3 Low
- denx u-boot, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 more An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an... 9.8 Critical
- denx u-boot, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 more An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing... 9.8 Critical
- denx u-boot, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 more An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed... 9.8 Critical
- denx u-boot, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 more An issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at... 9.1 Critical
- Show olderLoading…