CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- jetbrains teamcityIncorrect handling of user input in ZIP extraction was detected in JetBrains TeamCity. The issue...7.5 High
- jetbrains teamcityA possible stored JavaScript injection requiring a deliberate server administrator action was...6.1 Medium
- jetbrains teamcityThe generated Kotlin DSL settings allowed usage of an unencrypted connection for resolving...5.3 Medium
- jetbrains teamcityA possible stored JavaScript injection was detected on one of the JetBrains TeamCity pages. The...6.1 Medium
- amcrest ipm-721s firmwareThe Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 allows HTTP requests that...9.8 Critical
- amcrest ipm-721s firmwareAmcrest IPM-721S V2.420.AC00.16.R.20160909 devices mishandle reboots within the past two hours....8.8 High
- amcrest ipm-721s firmwareAmcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait for 5 minutes in...9.8 Critical
- amcrest ipm-721s firmwareOn Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, the users on the device are divided into 2...8.8 High
- amcrest ipm-721s firmwareAmcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are hardcoded in...9.8 Critical
- amcrest ipm-721s firmwareAmcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download...9.8 Critical
- odooIncorrect access control in the password reset component in Odoo Community 11.0 and earlier and...8.1 High
- odooImproper sanitization of dynamic user expressions in Odoo Community 11.0 and earlier and Odoo...9.1 Critical
- odooImproper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0...6.5 Medium
- odooIncorrect access control in the mail templating system in Odoo Community 11.0 and earlier and...6.5 Medium
- odooIncorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo...8.1 High
- freebsdIn FreeBSD 12.0-STABLE before r349628, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE...8.8 High
- jetbrains intellij ideaIn several JetBrains IntelliJ IDEA Ultimate versions, an Application Server run configuration ...9.8 Critical
- freebsdIn FreeBSD 12.0-STABLE before r347474, 12.0-RELEASE before 12.0-RELEASE-p7, 11.2-STABLE before...6.5 Medium
- odooIncorrect access control in asset bundles in Odoo Community 9.0 through 11.0 and earlier and Odoo...6.5 Medium
- freebsdIn FreeBSD 12.0-STABLE before r349622, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE...9.8 Critical
- canonical ubuntu linux, cisco systems, inc. simple directmedia, debian linux +3 more +5 moreAn exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in...8.8 High
- jetbrains intellij ideaIn several versions of JetBrains IntelliJ IDEA Ultimate, creating Task Servers configurations...9.8 Critical
- canonical ubuntu linux, cisco systems, inc. simple directmedia, debian linux +3 more +5 moreAn exploitable integer overflow vulnerability exists when loading a PCX file in SDL2_image 2.0.4....8.8 High
- odooReport engine in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0...6.5 Medium
- jetbrains intellij ideaIn several versions of JetBrains IntelliJ IDEA Ultimate, creating run configurations for cloud...8.1 High
- jetbrains intellij ideaIn several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default...9.8 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 12.1.0-12.1.4.1, undisclosed requests can cause iControl REST processes to crash. The...6.5 Medium
- jetbrains hubIn JetBrains Hub versions earlier than 2018.4.11298, the audit events for SMTPSettings show a...7.2 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and...5.3 Medium
- jetbrains youtrackAn Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was...9.8 Critical
- f5 big-ip (afm, pem), big-ip advanced firewall manager, big-ip policy enforcement manager +2 moreOn BIG-IP (AFM, PEM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11...4.8 Medium
- jetbrains youtrackCertain actions could cause privilege escalation for issue attachments in JetBrains YouTrack. The...9.8 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, Malformed http requests made to an undisclosed...6.5 Medium
- jetbrains youtrackA query injection was possible in JetBrains YouTrack. The issue was fixed in YouTrack 2018.4.49168.9.8 Critical
- f5 big-ip (asm), big-ip application security manager +1 moreOn BIG-IP (ASM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, Application...6.5 Medium
- jetbrains youtrackA CSRF vulnerability was detected in one of the admin endpoints of JetBrains YouTrack. The issue...8.8 High
- f5 big-ip (afm, asm), big-ip advanced firewall manager, big-ip application security manager +2 moreOn BIG-IP (AFM, ASM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, and 11.5.1...8.4 High
- jetbrains youtrack integrationIn JetBrains YouTrack Confluence plugin versions before 1.8.1.3, it was possible to achieve...9.8 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, a high volume of...6.5 Medium
- jetbrains intellij ideaIn several JetBrains IntelliJ IDEA versions, creating remote run configurations of JavaEE...9.8 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and...4.4 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, under certain...5.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, and 11.5.1-11.6.4,...4.4 Medium
- f5 ssl orchestratorOn F5 SSL Orchestrator 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, undisclosed traffic flow may cause...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 11.5.1-11.6.4, iRules performing HTTP header manipulation may cause an interruption to...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.1.0-14.1.0.5, undisclosed SSL traffic to a virtual server configured with a Client...7.5 High
- f5 ssl orchestratorOn F5 SSL Orchestrator 14.1.0-14.1.0.5, on rare occasions, specific to a certain race condition,...5.9 Medium
- f5 big-ip pem, big-ip policy enforcement manager +1 moreOn BIG-IP PEM 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, under certain conditions, the TMM process may...7.5 High
- odooIncorrect access control in the TransientModel framework in Odoo Community 11.0 and earlier and...4.3 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, and 11.5.1-11.6.4, a...6.1 Medium
- Show moreLoading…