CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- field test project testfield_test gem contains injection vulnerability5.3 Medium
- razer surroundThe RzSurroundVADStreamingService (RzSurroundVADStreamingService.exe) in Razer Surround 1.1.63.0...5.5 Medium
- prestashopIn PrestaShop before 1.7.6.0 RC2, the id_address_delivery and id_address_invoice parameters are...7.5 High
- arlo basestation firmware, vmb3010 firmware, vmb3500 firmware +3 more +5 moreArlo Basestation firmware 1.12.0.1_27940 and prior contain a hardcoded username and password...9.8 Critical
- arlo basestation firmware, vmb3010 firmware, vmb3500 firmware +3 more +5 moreArlo Basestation firmware 1.12.0.1_27940 and prior firmware contain a networking misconfiguration...9.8 Critical
- apachefriends xamppiart.php in XAMPP 1.7.0 has XSS, a related issue to CVE-2008-3569.6.1 Medium
- ddrt dashcom live firmwareLack of authentication in file-viewing components in DDRT Dashcom Live 2019-05-09 allows anyone...7.5 High
- enhancesoft osticketUnauthenticated Stored XSS in osTicket 1.10.1 allows a remote attacker to gain admin privileges...6.1 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c.6.5 Medium
- ddrt dashcom live firmwareLack of authentication in case-exporting components in DDRT Dashcom Live through 2019-05-08...7.5 High
- thoughtspotAn authorization bypass vulnerability in pinboard updates in ThoughtSpot 4.4.1 through 5.1.1 ...8.1 High
- typo3Typo3 Cross-Site Scripting in Link Handling6.1 Medium
- typo3TYPO3 Vulnerable to Insecure Deserialization8.8 High
- sony bravia firmwareSony Bravia Smart TV devices allow remote attackers to cause a denial of service (device hang or...7.5 High
- sony bravia firmwareSony BRAVIA Smart TV devices allow remote attackers to cause a denial of service (device hang)...7.5 High
- intuit lacerteIntuit Lacerte 2017 has Incorrect Access Control.5.9 Medium
- stopzilla antimalwareAn issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an...5.5 Medium
- ringcentral, zoom +1 moreIn the Zoom Client through 4.4.4 and RingCentral 7.0.136380.0312 on macOS, remote attackers can...6.5 Medium
- zoomIn the Zoom Client before 4.4.2 on macOS, remote attackers can cause a denial of service ...6.5 Medium
- apport project apportApport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml6.5 Medium
- canonical whoopsie, ubuntu linux +1 moreInteger overflow in whoopsie results in out-of-bounds heap write6.5 Medium
- mailenableMailEnable Enterprise Premium 10.23 was vulnerable to stored and reflected cross-site scripting ...6.1 Medium
- mailenableMailEnable Enterprise Premium 10.23 did not use appropriate access control checks in a number of...8.8 High
- mailenableMailEnable Enterprise Premium 10.23 was vulnerable to multiple directory traversal issues, with...8.1 High
- mailenableMailEnable Enterprise Premium 10.23 was vulnerable to XML External Entity Injection (XXE) attacks...9.8 Critical
- mailenableIn MailEnable Enterprise Premium 10.23, the potential cross-site request forgery (CSRF)...6.5 Medium
- wikindx project wikindxA cross-site scripting (XSS) vulnerability in noMenu() and noSubMenu() in core/navigation/MENU...6.1 Medium
- sonatype nexus repository managerSonatype Nexus Repository Manager before 3.17.0 has a weak default of giving any unauthenticated...7.5 High
- sonatype nexus repository managerSonatype Nexus Repository Manager before 3.17.0 establishes a default administrator user with...9.8 Critical
- google androidIn multiple functions of key_store_service.cpp, there is a possible Information Disclosure due to...5.5 Medium
- google androidIn various functions of Parcel.cpp, there are uninitialized or partially initialized stack...5.5 Medium
- google androidIn checkQueryPermission of TelephonyProvider.java, there is a possible disclosure of secure data...5.5 Medium
- google androidIn save_attr_seq of sdp_discovery.cc, there is a possible out-of-bound read due to a missing...7.5 High
- google androidIn setup wizard there is a bypass of some checks when wifi connection is skipped. This could lead...5.5 Medium
- google androidIn several functions of alarm.cc, there is possible memory corruption due to a use after free....7.8 High
- google androidIn loop of DnsTlsSocket.cpp, there is a possible heap memory corruption due to a use after free....9.8 Critical
- google androidIn MakeMPEG4VideoCodecSpecificData of AVIExtractor.cpp, there is a possible out of bounds write...8.8 High
- google androidIn ihevcd_parse_pps of ihevcd_parse_headers.c, there is a possible out of bounds write due to a...8.8 High
- google androidIn ihevcd_sao_shift_ctb of ihevcd_sao.c, there is a possible out of bounds write due to a missing...8.8 High
- google androidIn FileInputStream::Read of file_input_stream.cc, there is a possible memory corruption due to...8.8 High
- google androidIn HIDL, safe_union, and other C++ structs/unions being sent to application processes, there are...5.5 Medium
- quest kace systems management applianceQuest KACE, all versions prior to version 8.0.x, 8.1.x, and 9.0.x, allows unintentional access to...7.2 High
- strong password project passwordstrong_password Ruby gem malicious version causing Remote Code Execution vulnerability9.8 Critical
- boiteasite rencontreThe Rencontre plugin before 3.1.3 for WordPress allows XSS via inc/rencontre_widget.php.6.1 Medium
- boiteasite rencontreThe Rencontre plugin before 3.1.3 for WordPress allows SQL Injection via inc/rencontre_widget.php.9.8 Critical
- hide hide.mehide.me before 2.4.4 on macOS suffers from a privilege escalation vulnerability in the...7.8 High
- dropboxDropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71...7.8 High
- otrs, debian linux +1 moreAn issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.7. A carefully...4.6 Medium
- python** DISPUTED ** The MSI installer for Python through 2.7.16 on Windows defaults to the C:\Python27...7.8 High
- fortinet fcm-mb40 firmware/usr/sbin/default.sh and /usr/apache/htdocs/cgi-bin/admin/hardfactorydefault.cgi on Dynacolor FCM...8.8 High
- Show moreLoading…