CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- jenkins mashup portlets, jenkins project mashup portlets plugin +1 moreStored credentials unencrypted in Jenkins Mashup Portlets Plugin8.8 High
- jenkins embeddable build status, jenkins project embeddable build status plugin +1 moreJenkins Embeddable Build Status Plugin contains Cross-site Scripting6.1 Medium
- jenkins docker, jenkins project docker plugin +1 moreMissing permission check in Jenkins Docker Plugin4.3 Medium
- jenkins docker, jenkins project docker plugin +1 moreMissing permission check in Jenkins Docker Plugin6.5 Medium
- jenkins docker, jenkins project docker plugin +1 moreJenkins Docker Plugin contains Cross-Site Request Forgery8.8 High
- cloudera managerCloudera Manager through 5.15 has Incorrect Access Control.8.1 High
- hidea az adminhidea.com AZ Admin 1.0 has news_det.php?cod= SQL Injection.9.8 Critical
- mybb-2fa project mybb-2faAn CSRF issue was discovered in the JN-Jones MyBB-2FA plugin through 2014-11-05 for MyBB. An...8.8 High
- zohocorp manageengine assetexplorerAn issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the SearchN.do...6.1 Medium
- zohocorp manageengine servicedesk plusAn issue was discovered in the Purchase component of Zoho ManageEngine ServiceDesk Plus. There is...6.1 Medium
- zohocorp manageengine servicedesk plusAn issue was discovered in Zoho ManageEngine ServiceDesk Plus 10.5. There is XSS via the...6.1 Medium
- zohocorp manageengine assetexplorerAn issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the RCSettings.do...6.1 Medium
- zohocorp manageengine assetexplorerAn issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via SoftwareListView.do...6.1 Medium
- zohocorp manageengine assetexplorerAn issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via ResourcesAttachments...6.1 Medium
- nuxtjs nuxt.js, \@nuxt\/devalue +1 moreCross-Site Scripting in @nuxt/devalue6.1 Medium
- schedmd slurm, debian linux, fedoraproject fedora +1 more +3 moreSchedMD Slurm 17.11.x, 18.08.0 through 18.08.7, and 19.05.0 allows SQL Injection.9.8 Critical
- leanoteLeanote prior to version 2.6 is affected by: Cross Site Scripting (XSS).6.1 Medium
- dwbooster appointment hour bookingThe Appointment Hour Booking plugin 1.1.44 for WordPress allows XSS via the E-mail field, as...6.1 Medium
- cesanta mongoosemq_parse_http in mongoose.c in Mongoose 6.15 has a heap-based buffer over-read.7.5 High
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreAs part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a...8.3 High
- exiv2, debian linux +1 moreThere is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp in Exiv2 through...6.5 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7...5.9 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7. When Squid is...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreA vulnerability exists where if a user opens a locally saved HTML file, this file can use file:...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreEmpty or malformed p256-ECDH public keys may trigger a segmentation fault due values being...7.5 High
- mozilla firefox, opensuse leap +1 moreThe HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP...4.7 Medium
- mozilla firefoxA vulnerability exists where it possible to force Network Security Services (NSS) to sign...5.3 Medium
- mozilla firefox, opensuse leap +1 moreWhen a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are...6.5 Medium
- mozilla firefox, opensuse leap +1 moreApplication permissions give additional remote troubleshooting permission to the site input...6.1 Medium
- mozilla firefox, opensuse leap +1 moreA vulnerability exists during the installation of add-ons where the initial fetch ignored the...7.5 High
- mozilla firefox, opensuse leap +1 moreThe unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar...6.5 Medium
- mozilla firefox, opensuse leap +1 moreSome unicode characters are incorrectly treated as whitespace during the parsing of web content...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible...7.5 High
- mozilla firefox, opensuse leap +1 moreActivity Stream can display content from sent from the Snippet Service website. This content is...5.3 Medium
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreA vulnerability exists where the caret ("^") character is improperly escaped constructing some...5.3 Medium
- mozilla firefoxUntil explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not...8.3 High
- mozilla firefox, firefox esr, thunderbird +2 moreDue to an error while parsing page content, it is possible for properly sanitized user input to...6.1 Medium
- mozilla firefoxNecko can access a child on the wrong thread during UDP connections, resulting in a potentially...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 morePOST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen an inner window is reused, it does not consider the use of document.domain for cross-origin...8.8 High
- mozilla firefox, opensuse leap +1 moreMozilla developers and community members reported memory safety bugs present in Firefox 67. Some...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreMozilla developers and community members reported memory safety bugs present in Firefox 67 and...9.8 Critical
- redis, canonical ubuntu linux, debian linux +6 more +8 moreA stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions...7.2 High
- osbs-client project osbs-clientA flaw was found in the yaml.load() function in the osbs-client versions since 0.46 before 0.56.1...7.2 High
- wavpack, canonical ubuntu linux, debian linux +1 more +3 moreWavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is:...5.5 Medium
- wavpack, canonical ubuntu linux, debian linux +1 more +3 moreWavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is:...5.5 Medium
- wavpack, canonical ubuntu linux, debian linux +1 more +3 moreWavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero. The impact is: Divide by zero...5.5 Medium
- trape project trapeTrape through 2019-05-08 has SQL injection via the data[2] variable in core/db.py, as...9.8 Critical
- trape project trapeA cross-site scripting (XSS) vulnerability in static/js/trape.js in Trape through 2019-05-08...6.1 Medium
- Show moreLoading…