CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- solarwinds network performance monitorSolarWinds Network Performance Monitor 12.3 allows SQL Injection via the /api...8.8 High
- ht2labs learning lockerIn HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code...7.3 High
- citrix netscaler sd-wan, sd-wan +1 moreCitrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input...9.8 Critical
- citrix netscaler sd-wan, sd-wan +1 moreCitrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input...9.8 Critical
- citrix netscaler sd-wan, sd-wan +1 moreCitrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input...9.8 Critical
- citrix netscaler sd-wan, sd-wan +1 moreCitrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input...9.8 Critical
- citrix netscaler sd-wan, sd-wan, sd-wan and netscaler +2 moreCitrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection.9.8 Critical
- citrix netscaler sd-wan, sd-wan +1 moreCitrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory...9.8 Critical
- citrix netscaler sd-wan, sd-wan, sd-wan and netscaler +2 moreCitrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input...8.8 High
- citrix netscaler sd-wan, sd-wan +1 moreCitrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input...8.8 High
- control-webpanel webpanelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal...7.5 High
- control-webpanel webpanelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass...9.8 Critical
- control-webpanel webpanelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, the Login process allows attackers...5.3 Medium
- hidglobal digital persona u.are.u 4500 driver firmwareAn issue was discovered in the HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500...5.9 Medium
- control-webpanel webpanelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can...8.8 High
- gpacIn GPAC before 0.8.0, isomedia/isom_read.c in libgpac.a has a heap-based buffer over-read, as...7.5 High
- f5 njsnjs through 0.3.3, used in NGINX, has a heap-based buffer over-read in nxt_vsprintf in nxt...6.5 Medium
- hyland perceptive content serverA Denial of Service vulnerability in the ImageNow Server service in Hyland Perceptive Content...7.5 High
- babel, cmsmadesimple bable\ +1 moreBabel: Multilingual site Babel All is affected by: Open Redirection. The impact is: Redirection...6.1 Medium
- palo alto networks pan-os, palo alto networks pan-os +1 moreInformation disclosure in PAN-OS 7.1.23 and earlier, PAN-OS 8.0.18 and earlier, PAN-OS 8.1.8-h4...8.8 High
- palo alto networks pan-os, palo alto networks pan-os +1 moreCommand injection in PAN-0S 9.0.2 and earlier may allow an authenticated attacker to gain access...8.8 High
- linaro/op-tee op-teeLinaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks. The impact is: This...9.8 Critical
- quake3eQuake3e < 5ed740d is affected by: Buffer Overflow. The impact is: Possible code execution and...9.8 Critical
- zammadZammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting (XSS) - CWE-80. The...6.1 Medium
- altn mdaemon email serverMDaemon Email Server 19 skips SpamAssassin checks by default for e-mail messages larger than 2 MB...7.5 High
- pluck-cms pluckcmsPluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous...9.8 Critical
- nasa cfitsioNASA CFITSIO prior to 3.43 is affected by: Buffer Overflow. The impact is: arbitrary code...9.8 Critical
- nfdump, debian linux, fedoraproject fedora +2 morenfdump 1.6.16 and earlier is affected by: Buffer Overflow. The impact is: The impact could range...7.8 High
- memoffset project memoffsetExposure of uninitialized memory in memoffset7.5 High
- invenio invenio-communitiesCross-site Scripting in invenio-communities5.4 Medium
- invenio invenio-previewerCross-site Scripting in invenio-previewer6.1 Medium
- invenio invenio-recordsCross-site scripting invenio-records5.4 Medium
- invenio invenio-appInvenio-App vulnerable to host header injection attack6.1 Medium
- document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 moreLibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are...4.3 Medium
- document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 moreLibreOffice has a feature where documents can specify that pre-installed scripts can be executed...9.8 Critical
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +10 more +12 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...8.1 High
- videolan vlc media playerVideoLAN VLC media player 3.0.7.1 has a heap-based buffer over-read in mkv::demux_sys_t:...5.5 Medium
- libssh2, debian linux, f5 traffix systems signaling delivery controller +4 more +6 moreIn libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c...8.1 High
- python-engineio project python-engineiopython-engineio vulnerable to Cross-Site Request Forgery (CSRF)8.8 High
- apache rollerA Reflected Cross-site Scripting (XSS) vulnerability exists in Apache Roller. Roller's Math...6.1 Medium
- modicon m580 cpu - bmep582040 all versions before v2.90 and modicon ethernet module bmenoc0301 all versions before v2.16, schneider-electric bmeh582040 firmware, bmeh586040 firmware +11 more +13 moreA CWE-119 Buffer Errors vulnerability exists in Modicon M580 CPU - BMEP582040, all versions...7.5 High
- schneider-electric interactive graphical scada systemA CWE-787: Out-of-bounds Write vulnerability exists in Interactive Graphical SCADA System (IGSS),...7.8 High
- schneider-electric zelio soft 2, zelio soft 2 v5.2 and prior +1 moreA Use After Free: CWE-416 vulnerability exists in Zelio Soft 2, V5.2 and earlier, which could...7.8 High
- proclima all versions prior to version 8.0.0, schneider-electric proclima +1 moreA CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima (all versions prior...7.8 High
- proclima all versions prior to version 8.0.0, schneider-electric proclima +1 moreA CWE-119: Buffer Errors vulnerability exists in ProClima (all versions prior to version 8.0.0)...9.8 Critical
- proclima all versions prior to version 8.0.0, schneider-electric proclima +1 moreA CWE-94: Code Injection vulnerability exists in ProClima (all versions prior to version 8.0.0)...9.8 Critical
- microsoft exchange server, exchange server 2013, exchange server 2016 +1 more +3 moreA cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not...5.4 Medium
- microsoft exchange server, exchange server 2013, exchange server 2016 +2 moreAn elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft...8.1 High
- microsoft sharepoint server, sharepoint enterprise server +1 moreA cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not...5.4 Medium
- microsoft win32k, windows, windows server +2 more +4 moreAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to...7.8 High
- Show moreLoading…