CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- fortinet fcm-mb40 firmwareDynacolor FCM-MB40 v1.2.0.0 devices have CSRF in all scripts under cgi-bin/.8.8 High
- fortinet fcm-mb40 firmwareDynacolor FCM-MB40 v1.2.0.0 use /etc/appWeb/appweb.pass to store administrative web-interface...9.8 Critical
- fortinet fcm-mb40 firmwareDynacolor FCM-MB40 v1.2.0.0 devices have a hard-coded SSL/TLS key that is used during an...5.9 Medium
- fortinet fcm-mb40 firmwareDynacolor FCM-MB40 v1.2.0.0 devices allow remote attackers to execute arbitrary commands via a...7.2 High
- zeromq libzmq, canonical ubuntu linux, debian linux +1 more +3 moreIn ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote,...9.8 Critical
- imagemagickIn ImageMagick 7.0.8-50 Q16, ComplexImages in MagickCore/fourier.c has a heap-based buffer over...8.8 High
- ffmpegIn FFmpeg 4.1.3, there is a division by zero at adx_write_trailer in libavformat/rawenc.c. This...6.5 Medium
- avtech room alert 3e firmwareOn AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web...8.8 High
- flarumFlarum before 0.1.0-beta.9 allows CSRF against all POST endpoints, as demonstrated by changing admin settings.8.8 High
- dlink central wifimanagerA SQL Injection was discovered in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 in...9.8 Critical
- dlink central wifimanagerA cross-site scripting (XSS) vulnerability in resource view in PayAction.class.php in D-Link...6.1 Medium
- dlink central wifimanagerAn issue was discovered in the D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6....9.8 Critical
- dlink central wifimanager/web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM(100) before v1...9.8 Critical
- ignitedcmsindex.php/admin/permissions in Ignited CMS through 2017-02-19 allows CSRF to add an administrator.8.8 High
- codedoc project codedocCodedoc v3.2 has a stack-based buffer overflow in add_variable in codedoc.c, related to...7.8 High
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center RSS Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center RSS Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco advanced malware protection for endpoints, amp for endpoints +1 moreCisco Advanced Malware Protection for Endpoints Windows Command Injection Vulnerability6.7 Medium
- cisco email security appliance (esa), email security appliance +1 moreCisco Email Security Appliance Content Filter Bypass Vulnerability5.8 Medium
- cisco email security appliance (esa), email security appliance +1 moreCisco Email Security Appliance Content Filter Bypass Vulnerability5.8 Medium
- cisco ip phone 8800 series software, ip conference phone 7832 firmware, ip conference phone 8832 firmware +10 more +12 moreCisco IP Phone 7800 and 8800 Series Session Initiation Protocol Denial of Service Vulnerability5.3 Medium
- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software Command Injection Vulnerability7.8 High
- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software Arbitrary File Read and Write Vulnerability7.2 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability6.8 Medium
- cisco unified communications domain manager, hosted collaboration solution +1 moreCisco Unified Communications Domain Manager Restricted Shell Escape Vulnerability5.3 Medium
- cisco unified communications managerCisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability8.6 High
- cisco small business 300 series managed switches, esw2-350g52dc firmware, esw2-550x48dc firmware +55 more +57 moreCisco Small Business Series Switches HTTP Denial of Service Vulnerability7.5 High
- cisco small business 300 series managed switches, esw2-350g52dc firmware, esw2-550x48dc firmware +55 more +57 moreCisco Small Business Series Switches Memory Corruption Vulnerability7.5 High
memnpmDenial of Service in mem5.1 Mediumserve-herenpmPath Traversal in serve-here.jsNo score- postfix-mta-sts-resolver project postfix-mta-sts-resolverdowngrade of effective Strict Transport Security (STS) policy in postfix-mta-sts-resolver6.9 Medium
- opencatslib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files...7.5 High
- swift alliance web platformAn issue was discovered in SWIFT Alliance Web Platform 7.1.23. A log injection (and an arbitrary...7.5 High
- odooThe Odoo Community Association (OCA) dbfilter_from_header module makes Odoo 8.x, 9.x, 10.x, and...7.5 High
- invoxia nvx220 firmwareInvoxia NVX220 devices allow access to /bin/sh via escape from a restricted CLI, leading to...7.5 High
- invoxia nvx220 firmwareInvoxia NVX220 devices allow TELNET access as admin with a default password.9.8 Critical
- g-u bks ebk ethernet-buskoppler pro firmwareBKS EBK Ethernet-Buskoppler Pro before 3.01 allows Unrestricted Upload of a File with a Dangerous...9.8 Critical
- wolfvision cynapWolfVision Cynap before 1.30j uses a static, hard-coded cryptographic secret for generating...9.8 Critical
- alsa-project alsa, jackaudio jack2 +1 moreposix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 (as distributed with alsa-plugins 1...8.1 High
- eventum project eventumAn issue was discovered in Eventum 3.5.0. /htdocs/switch.php has an Open Redirect via the...6.1 Medium
- digisol dg-hr-3300 firmwareDigisol Wireless Wifi Home Router HR-3300 allows XSS via the userid or password parameter to the...6.1 Medium
- crudlab wp like buttonAn authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0 for...5.3 Medium
- 1234n minicmsIn MiniCMS V1.10, stored XSS was found in mc-admin/conf.php (comment box), which can be used to...4.8 Medium
- 1234n minicmsIn MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the content box. An attacker...4.8 Medium
- 1234n minicmsIn MiniCMS V1.10, stored XSS was found in mc-admin/page-edit.php (content box), which can be used...4.8 Medium
- redhat virt-bootstrapvirt-bootstrap 1.1.0 allows local users to discover a root password by listing a process, because...7.8 High
- libosinfo, fedoraproject fedora, redhat enterprise linux +3 more +5 morelibosinfo 1.5.0 allows local users to discover credentials by listing a process, because...7.8 High
- waspthemes custom css proCross-site request forgery (CSRF) vulnerability in Custom CSS Pro 1.0.3 and earlier allows remote...8.8 High
- fla-shop html5 mapsCross-site request forgery (CSRF) vulnerability in HTML5 Maps 1.6.5.6 and earlier allows remote...8.8 High
- sony vaio updateImproper download file verification vulnerability in VAIO Update 7.3.0.03150 and earlier allows...7.5 High
- Show moreLoading…