CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- sony vaio updateImproper authorization vulnerability in VAIO Update 7.3.0.03150 and earlier allows an attackers...7.8 High
- chris doerr related youtube videosCross-site request forgery (CSRF) vulnerability in Related YouTube Videos versions prior to 1.9.9...8.8 High
- n-media personalized woocommerce cart pageCross-site request forgery (CSRF) vulnerability in Personalized WooCommerce Cart Page 2.4 and...8.8 High
- contest-gallery contest galleryCross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5...8.8 High
- sukimalab online lesson bookingCross-site request forgery (CSRF) vulnerability in Online Lesson Booking 0.8.6 and earlier allows...8.8 High
- sukimalab online lesson bookingCross-site scripting vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote...6.1 Medium
- sukimalab attendance managerCross-site request forgery (CSRF) vulnerability in Attendance Manager 0.5.6 and earlier allows...8.8 High
- sukimalab attendance managerCross-site scripting vulnerability in Attendance Manager 0.5.6 and earlier allows remote...6.1 Medium
- growi, inc. growiOpen redirect vulnerability in GROWI v3.4.6 and earlier allows remote attackersto redirect users...6.1 Medium
- growi, inc. growiCross-site request forgery (CSRF) vulnerability in GROWI v3.4.6 and earlier allows remote...8.8 High
- joruri cms 2017, sitebridge inc. joruri cms 2017 +1 moreCross-site scripting vulnerability in Joruri CMS 2017 Release2 and earlier allows remote...6.1 Medium
- joruri mail, sitebridge inc. joruri mail +1 moreJoruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to...5.4 Medium
- joruri mail, sitebridge inc. joruri mail +1 moreOpen redirect vulnerability in Joruri Mail 2.1.4 and earlier allows remote attackers to redirect...6.1 Medium
- a.t.works, inc. idoors reader, idoors reader +1 moreiDoors Reader 2.10.17 and earlier allows an attacker on the same network segment to bypass...8.8 High
- zoho salesiqCross-site request forgery (CSRF) vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote...8.8 High
- zoho salesiqCross-site scripting vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to...6.1 Medium
- mastodon-tootdon tootdon for mastodon, tsukurito, inc. android app 'tootdon for mastodon' +1 moreThe Android App 'Tootdon for Mastodon' version 3.4.1 and earlier does not verify X.509...7.4 High
- custom4web wp open graphCross-site request forgery (CSRF) vulnerability in WP Open Graph 1.6.1 and earlier allows remote...8.8 High
- mytinytodomyTinyTodo 1.3.3 through 1.4.3 allows CSV Injection. This is fixed in 1.5.9.8 Critical
- ffmpegblock_cmp() in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read.8.8 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error.6.5 Medium
- imagemagick, canonical ubuntu linux, opensuse leap +2 moreImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of an error in...6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of mishandling the...6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow in MagickCore/fourier.c in ComplexImage.8.8 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in...7.8 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage...7.8 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage...7.8 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage...7.8 High
- imagemagick, opensuse leap +1 moreImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/composite.c in...8.8 High
- imagemagick, opensuse leap +1 moreImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages.8.8 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an AnnotateImage error.6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in...8.8 High
- imagemagick, opensuse leap +1 moreImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/pixel-accessor.h in...8.8 High
- imagemagick, opensuse leap +1 moreImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/pixel-accessor.h in...8.8 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in...8.8 High
- imagemagick, opensuse leap +1 moreImageMagick 7.0.8-50 Q16 has direct memory leaks in AcquireMagickMemory because of an error in...6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in...8.8 High
- squid-cache squid, debian linux +1 moreThe cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.6.1 Medium
- linux kernelThe Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure ...7.5 High
- linux kernelIn the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values...6.5 Medium
- arox school-erpAROX School-ERP Pro has a command execution vulnerability. import_stud.php and upload_fille.php...9.8 Critical
- weberpA SQL Injection issue was discovered in webERP 4.15. Payments.php accepts payment data in base64...9.8 Critical
- glyphandcog xpdfreaderIn Xpdf 4.01.01, there is a heap-based buffer over-read in the function DCTStream::readScan()...5.5 Medium
- artifex mupdfArtifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz...7.8 High
- glyphandcog xpdfreaderIn Xpdf 4.01.01, there is a use-after-free vulnerability in the function JBIG2Stream::close()...7.8 High
- glyphandcog xpdfreaderIn Xpdf 4.01.01, the Parser::getObj() function in Parser.cc may cause infinite recursion via a...5.5 Medium
- glyphandcog xpdfreaderIn Xpdf 4.01.01, there is an out-of-bounds read vulnerability in the function SplashXPath:...5.5 Medium
- fedoraproject fedora, glyphandcog xpdfreader +1 moreIn Xpdf 4.01.01, there is a heap-based buffer over-read in the function JBIG2Stream:...5.5 Medium
- cisco application policy infrastructure controller, nx-os system software in aci mode 11.0.1b +1 moreCisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized Access Vulnerability7.4 High
- cisco application policy infrastructure controller, application policy infrastructure controller (apic) +1 moreCisco Application Policy Infrastructure Controller REST API Privilege Escalation Vulnerability7.2 High
- Show moreLoading…