CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- apple icloud, icloud for windows, ios +7 more +9 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ios +7 more +9 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ios +7 more +9 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ios +7 more +9 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ios +7 more +9 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ios +8 more +10 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ios +7 more +9 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ios +7 more +9 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- fitbit charge 2 firmwareOn Fitbit activity-tracker devices, certain addresses never change. According to the popets-2019...6.5 Medium
- deepsoft weblibrarianDeepwoods Software WebLibrarian 3.5.2 and earlier is affected by: SQL Injection. The impact is:...6.5 Medium
- php scripts mall pvt. ltd. school college portal with erp script, school college portal with erp script project college portal with erp script +1 morephpscriptsmall.com School College Portal with ERP Script 2.6.1 and earlier is affected by: Cross...6.1 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap...5.3 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Libc current is affected by: Re-mapping current loaded libray with malicious ELF file. The...8.8 High
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using...5.3 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack...9.8 Critical
- libnmapXML Injection in python-libnmap7.5 High
- dolibarr, dolibarr erp\/crm +1 moreDolibarr Cross Site Scripting (XSS)6.1 Medium
- dglogik dglux serverDGLogik Inc DGLux Server All Versions is affected by: Insecure Permissions. The impact is: Remote...9.8 Critical
- openenergymonitor emoncmsOpenEnergyMonitor Project Emoncms 9.8.8 is affected by: Cross Site Scripting (XSS). The impact is...5.4 Medium
- hexoeditorHexoEditor v1.1.8-beta is affected by: XSS to code execution.6.1 Medium
- zipios project zipiosZipios before 0.1.7 does not properly handle certain malformed zip archives and can go into an...6.5 Medium
- kyzer libmspack, canonical ubuntu linux, debian linux +1 more +3 morelibmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The...5.5 Medium
- getvera vera edge firmwareLuaUPnP in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute...9.8 Critical
- sahipro sahi pro_s_/sprm/_s_/dyn/Player_setScriptFile in Sahi Pro 8.0.0 allows command execution. It allows one...9.8 Critical
- mirumee saleorMirumee Saleor CSRF Protection Disabled8.8 High
- anjlab paranoid2paranoid2 gem Code backdoor9.8 Critical
- videolan vlc media player, canonical ubuntu linux, debian linux +2 more +4 moreAn Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media...7.8 High
- sound exchange project exchangeAn issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h (startread function), there is an...5.5 Medium
- evince team evince, canonical ubuntu linux, debian linux +1 more +3 moreEvince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The...7.8 High
- rapid7 insight agentRapid7 Insight Agent, version 2.6.3 and prior, suffers from a local privilege escalation due to...7.8 High
- pythonhttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 Medium
- digium asterisk, certified asterisk, debian linux +2 moreAn issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2,...5.3 Medium
- digium asterisk, certified asterisk +1 moreBuffer overflow in res_pjsip_messaging in Digium Asterisk versions 13.21-cert3, 13.27.0, 15.7.2,...6.5 Medium
- cohesity dataplatformA man-in-the-middle vulnerability related to vCenter access was found in Cohesity DataPlatform...8.1 High
- glpi product, glpi-project glpi +1 moreGLPI GLPI Product 9.3.1 is affected by: Frame and Form tags Injection allowing admins to phish...3.5 Low
- mikogoThe Windows versions of Snapview Mikogo, versions before 5.10.2 are affected by insecure...7.8 High
- blackberry qnx software development platform, qnx software development platform (qnx sdp) +1 moreAn information disclosure vulnerability leading to a potential local escalation of privilege in...7.8 High
- realization concerto critical chain plannerRealization Concerto Critical Chain Planner (aka CCPM) 5.10.8071 has SQL Injection in at least in...9.8 Critical
- netfilter iptables, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreA buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least...4.2 Medium
- castlerock simple network management protocol consolenodeimp.exe in Castle Rock SNMPc before 9.0.12.1 and 10.x before 10.0.9 has a stack-based buffer...7.8 High
- zoomThe Zoom Client before 4.4.53932.0709 on macOS allows remote code execution, a different...8.8 High
- minimagick project minimagick, debian linux +1 moreOS Command Injection in MiniMagick7.8 High
- siemens simatic pcs 7 v8.0 and earlier, simatic pcs 7 v8.1, simatic pcs 7 v8.2 +14 more +16 moreA vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS...7.2 High
- siemens spectrum power 3 (corporate user interface), spectrum power 4 (corporate user interface), spectrum power 5 (corporate user interface) +5 more +7 moreA vulnerability has been identified in Spectrum Power 3 (Corporate User Interface) (All versions ...6.1 Medium
- siemens digsi 5 engineering software, siemens ag all other siprotec 5 device types with cpu variants cp300 and cp100 and the respective ethernet communication modules, siprotec 5 device types 6md85, 6md86, 6md89, 7um85, 7sa87, 7sd87, 7sl87, 7vk87, 7sa82, 7sa86, 7sd82, 7sd86, 7sl82, 7sl86, 7sj86, 7sk82, 7sk85, 7sj82, 7sj85, 7ut82, 7ut85, 7ut86, 7ut87 and 7ve85 with cpu variants cp300 and cp100 and the respective ethernet communication modules +4 more +6 moreA vulnerability has been identified in SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87,...7.5 High
- siemens digsi 5 engineering software, siemens ag all other siprotec 5 device types with cpu variants cp300 and cp100 and the respective ethernet communication modules, siprotec 5 device types 6md85, 6md86, 6md89, 7um85, 7sa87, 7sd87, 7sl87, 7vk87, 7sa82, 7sa86, 7sd82, 7sd86, 7sl82, 7sl86, 7sj86, 7sk82, 7sk85, 7sj82, 7sj85, 7ut82, 7ut85, 7ut86, 7ut87 and 7ve85 with cpu variants cp300 and cp100 and the respective ethernet communication modules +3 more +5 moreA vulnerability has been identified in SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87,...7.5 High
- siemens tia administrator, sinetplan +1 moreA vulnerability has been identified in TIA Administrator (All versions < V1.0 SP1 Upd1). The...7.8 High
ffmpegMageiaUpdated ffmpeg packages fix security vulnerabilityNo score- zte mw, zxmw nr8000 firmware +1 moreZTE MW NR8000V2.4.4.03 and NR8000V2.4.4.04 are impacted by path traversal vulnerability. Due to...5.7 Medium
- apache kafkaImproper Input Validation in Apache Kafka8.8 High
- Show moreLoading…