CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- dlink dir-818lw firmwareAn issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command...8.8 High
- dlink dir-818lw firmwareAn issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command...8.8 High
- ubiquiti networks edgemax, ui edgeswitch firmware +1 moreCommand Injection in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to execute commands as...7.2 High
- lodash, f5 big-ip access policy manager, big-ip advanced firewall manager +18 more +20 morePrototype Pollution in lodash9.1 Critical
- ubiquiti networks edgemax, ui edgeswitch firmware +1 moreDoS in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to Crash the SSH CLI interface by...4.9 Medium
- serve-here.js project serve-here.jsPath Traversal in serve-here.js5.3 Medium
- hunesion i-onenetHunesion i-oneNet Missing Support for Integrity Check vulnerability7.8 High
- hunesion i-onenetHunesion i-oneNet unrestricted file upload vulnerability8.8 High
- sap se diagnostic agent (lm-service), sap diagnostics agent +1 moreThe OS Command Plugin in the transaction GPA_ADMIN and the OSCommand Console of SAP Diagnostic...9.1 Critical
- sap information stewardSAP Information Steward, version 4.2, does not sufficiently encode user-controlled inputs,...6.1 Medium
- sap netweaver process integration, sap se netweaver process integration abap tests (sap basis) +1 moreABAP Tests Modules (SAP Basis, versions 7.0, 7.1, 7.3, 7.31, 7.4, 7.5) of SAP NetWeaver Process...7.2 High
- sap netweaver application server java, sap se netweaver for java application server - web container (engineapi), netweaver for java application server - web container (servercode) +2 moreSAP NetWeaver for Java Application Server - Web Container, (engineapi, versions 7.1, 7.2, 7.3, 7...7.2 High
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform - bi workspace (enterprise) +1 moreSAP BusinessObjects Business Intelligence Platform (BI Workspace) (Enterprise), versions 4.1, 4.2...6.1 Medium
- sap erp hcm, sap se erp hcm (sap hrces) +1 moreSAP ERP HCM (SAP_HRCES) , version 3, does not perform necessary authorization checks for a report...4.2 Medium
- sap commerce cloud, sap se commerce cloud (ex sap hybris commerce) (hy com) +1 moreSAP Commerce Cloud (previously known as SAP Hybris Commerce), (HY_COM, versions 6.3, 6.4, 6.5, 6...7.5 High
- sap se abap server and abap platform (sap basis), sap netweaver application server abap, netweaver as abap +2 moreABAP Server and ABAP Platform (SAP Basis), versions, 7.31, 7.4, 7.5, do not sufficiently encode...6.1 Medium
- sap gateway, ui5 +1 moreThe SAP Gateway, versions 7.5, 7.51, 7.52 and 7.53, allows an attacker to inject content which is...7.5 High
- sap se netweaver application server for java (startup framework), sap netweaver application server java +1 moreUnder certain conditions SAP NetWeaver Application Server for Java (Startup Framework), versions...5.3 Medium
- sap openui5, sap se sapui5 +1 moreSAPUI5 and OpenUI5, before versions 1.38.39, 1.44.39, 1.52.25, 1.60.6 and 1.63.0, does not...6.1 Medium
- micro focus netiq advanced authentication framework, microfocus netiq advanced authentication +1 moreA potential Man in the Middle attack (MITM) was found in NetIQ Advanced Authentication Framework...5.9 Medium
- ge aestiva and aespire, aespire 7100 firmware, aespire 7900 firmware +2 more +4 moreIn GE Aestiva and Aespire versions 7100 and 7900, a vulnerability exists where serial devices are...5.3 Medium
- huawei mate 20 x, mate 20 x firmware +1 moreThere is a path traversal vulnerability on Huawei Share. The software does not properly validate...6.5 Medium
- huawei honor magic 2, mate 20, mate 20 x +3 more +5 moreThere is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system...4.6 Medium
- cisco asa 5506-x firmware, asa 5506h-x firmware, asa 5506w-x firmware +3 more +5 moreCisco ASA and FTD Software Cryptographic TLS and SSL Driver Denial of Service Vulnerability8.6 High
- e107In e107 v2.1.7, output without filtering results in XSS.6.1 Medium
- gitlabGitLab EE, version 11.5 before 11.5.1, is vulnerable to an insecure object reference issue that...6.5 Medium
- gitlabGitLab EE version 11.5 is vulnerable to a persistent XSS vulnerability in the Operations page....5.4 Medium
- gitlabGitLab EE, versions 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is...7.5 High
- gitlabGitLab EE, versions 8.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is...7.5 High
- gitlabGitLab EE, versions 11.4 before 11.4.8 and 11.5 before 11.5.1, is affected by an insecure direct...4.3 Medium
- gitlabGitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1,...6.5 Medium
- ozlabs patchworkA Cross Site Scripting (XSS) vulnerability exists in the template tag used to render message ids...6.1 Medium
drupal/config_permsPackagistThis module enables you to add and manage additional custom permissions through the administration UI. The module doesn't sufficiently check for the proper access permissions to this page. This vulner…No score- trendnet tew-827dru firmwareTRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple stack-based...9.8 Critical
- trendnet tew-827dru firmwareTRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple command...9.8 Critical
- trendnet tew-827dru firmwareTRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer...9.8 Critical
- gitlabAll versions of GitLab prior to 11.5.1, 11.4.8, and 11.3.11 do not send an email to the old email...5.3 Medium
- gitlabGitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1...7.7 High
- gitlabGitLab CE/EE, versions 7.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1,...5.4 Medium
- gitlabGitLab CE/EE, versions 8.8 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1,...8.8 High
- gitlabGitLab CE/EE, versions 10.1 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1...4.3 Medium
- gitlabGitLab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1,...8.1 High
- americasarmy proving groundsAn issue was discovered in the America's Army Proving Grounds platform for the Unreal Engine....7.5 High
- gitlabGitLab CE 8.17 and later and EE 8.3 and later have a symlink time-of-check-to-time-of-use race...5.9 Medium
- gitlabGitLab CE/EE, versions 11.3 before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are...5.4 Medium
- gitlabGitLab CE/EE, versions 10.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1...5.4 Medium
- gitlabGitlab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1,...5.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.3.11,...6.5 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.3.11, 11.4.x before...6.5 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.3.11, 11.4.x...4.3 Medium
- Show moreLoading…