CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- intel ssd dc s4500 firmware, ssd dc s4600 firmware, intel corporation intel(r) ssd dc s4500/s4600 series +2 moreImproper authentication in firmware for Intel(R) SSD DC S4500 Series and Intel(R) SSD DC S4600...6.8 Medium
- intel processor diagnostic tool, intel corporation intel(r) processor diagnostic tool advisory +1 moreImproper access control in the Intel(R) Processor Diagnostic Tool before version 4.1.2.24 may...7.8 High
- vmware esxiVMware ESXi 6.5 suffers from partial denial of service vulnerability in hostd process. Patch...5.3 Medium
- symantec message gatewaySymantec Messaging Gateway, prior to 10.7.1, may be susceptible to a privilege escalation...9.8 Critical
- londontrustmedia private internet access vpn clientA vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v1.0 for...7.8 High
- ibm content navigatorIBM Content Navigator 3.0CD is vulnerable to local file inclusion, allowing an attacker to access...4.3 Medium
- ibm jazz for service managementIBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters....5.9 Medium
- ctfer-io monitoring, ibm cloud application performance management +1 moreIBM Application Performance Management (IBM Monitoring 8.1.4) could allow a remote attacker to...5.3 Medium
- ibm multicloud managerIBM Multicloud Manager 3.1.0, 3.1.1, and 3.1.2 ibm-mcm-chart could allow a local attacker with...4.4 Medium
- ibm security identity manager, security identity manager virtual appliance +1 moreIBM Security Identity Manager 7.0.1 discloses sensitive information to unauthorized users. The...5.3 Medium
- londontrustmedia private internet access vpn clientA vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for Linux...7.8 High
- rockwellautomation panelview 5510 firmwareIn Rockwell Automation PanelView 5510 (all versions manufactured before March 13, 2019 that have...9.8 Critical
- londontrustmedia private internet access vpn clientA vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v0.9.8 beta ...7.1 High
- juniper junos, juniper networks junos os, debian linux +2 moreJunos OS: Insufficient validation of environment variables in telnet client may lead to stack-based buffer overflow7.8 High
- juniper junos, juniper networks junos os +1 moreSRX Series: srxpfe process crash while JSF/UTM module parses specific HTTP packets7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: RPD process crashes when BGP peer restarts7.5 High
- juniper junos, juniper networks junos os +1 moreEX4300 Series: When a firewall filter is applied to a loopback interface, other firewall filters for multicast traffic may fail5.8 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300 Series: Denial of Service upon receipt of large number of specific valid packets on management interface.6.5 Medium
- londontrustmedia private internet access vpn clientA vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for macOS...7.8 High
- giteaGitea XSS Vulnerability in Repository Description6.1 Medium
- londontrustmedia private internet access vpn clientA vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for Linux...7.1 High
- londontrustmedia private internet access vpn clientA vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for macOS...7.8 High
- pyxtrlockpyxtrlock 0.3 and earlier is affected by: Incorrect Access Control. The impact is: False locking...7.8 High
- londontrustmedia private internet access vpn clientA vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for Linux...7.8 High
- londontrustmedia private internet access vpn clientA vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for Linux...7.8 High
- citrix xenserverThe Windows Guest Tools in Citrix XenServer 6.2 SP1 and earlier allows remote attackers to cause...6.5 Medium
- alarm adc-v522ir firmwareAlarm.com ADC-V522IR 0100b9 devices have Incorrect Access Control, a different issue than CVE...7.8 High
- vanderbilt redcapMultiple stored Cross-site scripting (XSS) issues in the admin panel and survey system in REDCap...4.8 Medium
- alarm adc-v522ir firmwareAlarm.com ADC-V522IR 0100b9 devices have Incorrect Access Control.7.2 High
- intersystems cacheIntersystems Cache 2017.2.2.865.0 has Incorrect Access Control.5.4 Medium
- intersystems cacheIntersystems Cache 2017.2.2.865.0 allows XXE.6.4 Medium
- intersystems cacheIntersystems Cache 2017.2.2.865.0 allows XSS.6.1 Medium
- avaya control managerACM SQL Injection9.3 Critical
- ovirt, red hat ovirt-engine-metrics, redhat virtualization manager +2 moreSensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were...5.9 Medium
- redhat openshift container platform, red hat atomic-openshift +1 moreA reflected XSS vulnerability exists in authorization flow of OpenShift Container Platform...4.6 Medium
- sun.net wmproSUNNET WMPro v5.0 and v5.1 has OS Command Injection9.8 Critical
- broadlearning eclass, eclass ip +1 moreeClass platform allows user to download arbitrary files without authentication9.1 Critical
- cloud foundry uaa release (oss), pivotal software cloud foundry uaa-release +1 moreUAA SQL Identity Zone Vulnerability6.5 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +5 more +7 moreAn issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with...8.8 High
- ivanti endpoint managerAn issue was discovered in the Core Server in Ivanti Endpoint Manager (EPM) 2017.3 before SU7 and...9.8 Critical
- pingidentity agentless integration kitXSS exists in Ping Identity Agentless Integration Kit before 1.5.6.1 Medium
- dlink dir-655 firmwareD-Link DIR-655 C devices before 3.02B05 BETA03 allow CSRF for the entire management console.8.8 High
- dlink dir-655 firmwareD-Link DIR-655 C devices before 3.02B05 BETA03 allow XSS, as demonstrated by the /www...6.1 Medium
- dlink dir-655 firmwareD-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to execute arbitrary...9.8 Critical
- dlink dir-655 firmwareD-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to force a blank password...9.8 Critical
- parse parse-serverSensitive Data Exposure in parse-server5.3 Medium
- jenkins caliper ci, jenkins project caliper ci plugin +1 moreJenkins Caliper CI Plugin stores credentials in plain text8.8 High
- jenkins port allocator, jenkins project port allocator plugin +1 moreJenkins Port Allocator Plugin stores credentials in plain text8.8 High
- jenkins dependency graph viewer, jenkins project dependency graph viewer plugin +1 moreJenkins Dependency Graph Viewer Plugin contains Cross-site Scripting5.4 Medium
- jenkins gogs, jenkins project gogs plugin +1 moreJenkins Gogs Plugin stored credentials in plain text8.8 High
- Show moreLoading…