CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- f5 big-ip (afm, analytics, asm), big-ip advanced firewall manager, big-ip analytics +1 more +3 moreOn BIG-IP (AFM, Analytics, ASM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4,...6.1 Medium
- dosbox, debian linux, fedoraproject fedora +2 moreA buffer overflow in DOSBox 0.74-2 allows attackers to execute arbitrary code.9.8 Critical
- xpertsol server status by hostname\/ipA SQL injection vulnerability in the Xpert Solution "Server Status by Hostname/IP" plugin 4.6 for...8.8 High
- digisol dg-hr3400 firmwareDIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged.6.1 Medium
- rapid7 nexpose, nexpose/insightvm security console +1 moreRapid7 Nexpose/InsightVM Security Console CSRF5.9 Medium
- elitecms elite cmsAn issue was discovered in Elite CMS Pro 2.01. In /admin/add_sidebar.php, the ?page= parameter is...7.2 High
- dnnsoftware dotnetnukeInsufficient Entropy in DotNetNuke7.5 High
- dnnsoftware dotnetnuke, dotnetnuke (dnn) (dnn) +1 moreInadequate Encryption Strength in DotNetNuke7.5 High
- archon project archonpackages/subjects/pub/subjects.php in Archon 3.21 rev-1 has XSS in the referer parameter in an...6.1 Medium
- dnnsoftware dotnetnukeInsufficient Entropy in DotNetNuke7.5 High
- web-gooroo cms web-goorooSQL injection vulnerability in /wbg/core/_includes/authorization.inc.php in CMS Web-Gooroo...9.8 Critical
- flowpaper flexpaperThe Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via...9.8 Critical
- novaksolutions infusionsoft-php-sdkinfusionsoft-php-sdk reflected Cross-site Scripting6.1 Medium
- riello-ups netman 204 firmwareAn issue was discovered in Riello NetMan 204 14-2 and 15-2. The issue is with the login script...9.8 Critical
- dnnsoftware dotnetnuke, dotnetnuke (dnn) (dnn) +1 moreInadequate Encryption Strength in DotNetNuke7.5 High
- cloudera cdhThe provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on ...7.5 High
- cloudera managerThe keystore password for the Spark History Server may be exposed in unsecured files under the ...7.5 High
- cloudera managerSecret data of processes managed by CM is not secured by file permissions.6.5 Medium
- open-xchange ox guardOX Guard 2.8.0 has CSRF.8.8 High
- 1234n minicmsIn MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php. An attacker can use it to get a...6.1 Medium
- cloudera data science workbenchRemote code execution is possible in Cloudera Data Science Workbench version 1.3.0 and prior...9.8 Critical
- monstra cmsMonstra CMS before 3.0.4 has XSS via index.php.6.1 Medium
- dotnetblogengine blogengine.netBlogEngine.NET 3.3.7.0 allows /api/filemanager Directory Traversal via the path parameter.7.1 High
- intelliants subrionSubrion CMS XSS6.1 Medium
- moxa oncell g3150-hspa-t firmware, oncell g3150-hspa firmware +1 moreThere is Memory corruption in the web interface of Moxa OnCell G3100-HSPA Series version 1.5...9.8 Critical
- moxa oncell g3150-hspa-t firmware, oncell g3150-hspa firmware +1 moreMoxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary monitoring...9.8 Critical
- moxa oncell g3150-hspa-t firmware, oncell g3150-hspa firmware +1 moreMoxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary...9.8 Critical
- dotnetblogengine blogengine.netBlogEngine.NET 3.3.7.0 allows a Client Side URL Redirect via the ReturnUrl parameter, related to...6.1 Medium
- moxa oncell g3150-hspa-t firmware, oncell g3150-hspa firmware +1 moreThere is Memory corruption in the web interface Moxa OnCell G3100-HSPA Series version 1.6 Build...7.5 High
- moxa oncell g3470a-lte-eu-t firmware, oncell g3470a-lte-eu firmware, oncell g3470a-lte-us-t firmware +1 more +3 moreThere is Memory corruption in the web interface of Moxa OnCell G3470A-LTE Series version 1.6...7.5 High
- moxa oncell g3470a-lte-eu-t firmware, oncell g3470a-lte-eu firmware, oncell g3470a-lte-us-t firmware +1 more +3 moreMemory corruption issue was discovered in Moxa OnCell G3470A-LTE Series version 1.6 Build...9.8 Critical
- moxa oncell g3150-hspa-t firmware, oncell g3150-hspa firmware +1 moreA weak Cookie parameter is used in the web application of Moxa OnCell G3100-HSPA Series version 1...9.8 Critical
- moxa oncell g3150-hspa-t firmware, oncell g3150-hspa firmware +1 moreCSRF tokens are not used in the web application of Moxa OnCell G3100-HSPA Series version 1.4...8.8 High
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreqemu-bridge-helper.c in QEMU 4.0.0 does not ensure that a network interface name (obtained from...7.8 High
- mcafee epolicy orchestrator, mcafee, llc mcafee epolicy orchestrator (epo) +1 moreInformation Disclosure vulnerability in the Agent Handler in McAfee ePolicy Orchestrator (ePO) 5...6.8 Medium
- red hat virt-install, redhat virt-manager, enterprise linux +2 moreVirt-install(1) utility used to provision new virtual machines has introduced an option '-...3.2 Low
- jetbrains kotlinJetBrains IntelliJ IDEA projects created using the Kotlin (JS Client/JVM Server) IDE Template...8.1 High
- jetbrains kotlin, ktor +1 moreJetBrains Ktor framework (created using the Kotlin IDE template) versions before 1.1.0 were...8.1 High
- jetbrains kotlinJetBrains Kotlin versions before 1.3.30 were resolving artifacts using an http connection during...8.1 High
- calamaresCalamares through 3.2.4 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600...7.5 High
- calamaresmodules/luksbootkeyfile/main.py in Calamares through 3.2.4 has a race condition between the time...8.1 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, undisclosed...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, an undisclosed...7.5 High
- blipcare wi-fi blood pressure monitor firmwareBlipcare Wifi blood pressure monitor BP700 10.1 devices allow memory corruption that results in...6.5 Medium
- blipcare wi-fi blood pressure monitor firmwareIn the most recent firmware for Blipcare, the device provides an open Wireless network called ...7.1 High
- blipcare wi-fi blood pressure monitor firmwareIt was discovered as a part of the research on IoT devices in the most recent firmware for...5.9 Medium
- dlink dcs-1100 firmware, dcs-1130 firmware +1 moreAn issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device runs a custom daemon...8.8 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.5, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, and 11.5.1-11.6.4,...7.2 High
- f5 big-ip, big-iq, big-ip access policy manager +13 more +15 moreOn BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.5, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, 11.6.1-11.6.3.4,...7.2 High
- dlink dcs-1100 firmware, dcs-1130 firmware +1 moreAn issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device runs a custom daemon...8.8 High
- Show moreLoading…