CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- rdbrck shiftRedbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail,...5.5 Medium
- cisco vision dynamic signage directorCisco Vision Dynamic Signage Director REST API Authentication Bypass Vulnerability9.1 Critical
- helmHelm Improper Certificate Validation9.8 Critical
- rdbrck shiftRedbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail,...7.5 High
- rdbrck shiftRedbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services ...7.5 High
- rdbrck shiftRedbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services ...7.5 High
- rdbrck shiftRedbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services ...7.5 High
- univention corporate server, univention corporate server univention-directory-notifier +1 moreUnivention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by:...7.5 High
- timesheet next gen next genTimesheet Next Gen 1.5.3 and earlier is affected by: Cross Site Scripting (XSS). The impact is:...6.1 Medium
- zohocorp manageengine admanager plus, manageengine adselfservice plus, manageengine desktop central +2 moreZoho ManageEngine ADManager Plus 6.6.5, ADSelfService Plus 5.7, and DesktopCentral 10.0.380 have...7.3 High
- linksys re6300 firmware, re6400 firmware +1 moreUnsanitized user input in the web interface for Linksys WiFi extender products (RE6400 and RE6300...9.8 Critical
- sertek xpareAn issue was discovered in Sertek Xpare 3.67. The login form does not sanitize input data....9.8 Critical
- sertek xpareAn issue was discovered in Sertek Xpare 3.67. The login form does not sanitize input data....6.1 Medium
- microsoft powershell coreSystem.Management.Automation subject to bypass via script debugging4.1 Medium
- sitecore experience platformIn Sitecore 9.0 rev 171002, Persistent XSS exists in the Media Library and File Manager. An...5.4 Medium
- computerlab maple computer wbt snmp administratorSnmpAdm.exe in MAPLE WBT SNMP Administrator v2.0.195.15 has an Unauthenticated Remote Buffer...9.8 Critical
- fanucamerica robotics virtual robot controllerThe remote admin webserver on FANUC Robotics Virtual Robot Controller 8.23 allows Directory...5.3 Medium
- fanucamerica robotics virtual robot controllerThe remote admin webserver on FANUC Robotics Virtual Robot Controller 8.23 has a Buffer Overflow...9.8 Critical
- tp-link archer c1200 firmwareCMD_SET_CONFIG_COUNTRY in the TP-Link Device Debug protocol in TP-Link Archer C1200 1.0.0 Build...9.8 Critical
- tp-link archer c1200 firmwareCMD_FTEST_CONFIG in the TP-Link Device Debug protocol in TP-Link Wireless Router Archer Router...9.8 Critical
- zeekIn Zeek Network Security Monitor (formerly known as Bro) before 2.6.2, a NULL pointer dereference...7.5 High
- tiny tinymceXSS in TinyMCE6.1 Medium
- myt project mytIn MyT 1.5.1, the User[username] parameter has XSS.6.1 Medium
- microstrategy webIn MicroStrategy Web before 10.4.6, there is stored XSS in metric due to insufficient input...6.1 Medium
- drupal, drupal core +1 moreDrupal core - Critical - Access bypass - SA-CORE-2019-0089.8 Critical
- temenos cwxTemenos CWX version 8.9 has an Broken Access Control vulnerability in the module /CWX/Employee...7.5 High
- foliovision fv flowplayer video playerA SQL injection vulnerability exists in the FolioVision FV Flowplayer Video Player plugin before...9.8 Critical
- jenkins, redhat openshift container platform +1 moreMissing Authorization in Jenkins4.3 Medium
- jenkinsCross-Site Request Forgery in Jenkins7.5 High
- jenkinsImproper Limitation of a Pathname to a Restricted Directory in Jenkins6.5 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.6 could allow a remote attacker to traverse directories on the...4.3 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm jazz for service managementIBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 is missing function level access...5.3 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.2 and 7.3 could allow a local user to obtain sensitive information when...4.0 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.2 and 7.3 discloses sensitive information to unauthorized users. The...5.3 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows...6.1 Medium
- adobe campaignIBM Campaign 9.1.0, 9.1.2, 10.1, and 11.0 is vulnerable to cross-site scripting. This...5.4 Medium
- pallets flaskPallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage7.5 High
- dancer::plugin::simplecrud, dancer\ \ +1 moreDancer::Plugin::SimpleCRUD 1.14 and earlier is affected by: Incorrect Access Control. The impact...6.5 Medium
- nsa ghidraNSA Ghidra before 9.0.1 allows XXE when a project is opened or restored, or a tool is imported,...9.1 Critical
- onosproject onosIn ONOS 1.15.0, apps/yang/web/src/main/java/org/onosproject/yang/web/YangWebResource.java...9.8 Critical
- nsa ghidraIn NSA Ghidra through 9.0.4, path traversal can occur in RestoreTask.java (from the package...7.8 High
- gnu patchIn GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than...5.9 Medium
- linux kernelIn parse_hid_report_descriptor in drivers/input/tablet/gtco.c in the Linux kernel through 5.2.1,...6.8 Medium
- debian linux, fedoraproject fedora, libsdl +1 more +3 moreSDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in...6.5 Medium
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and...7.5 High
- debian linux, linux kernel, canonical ubuntu linux +19 more +21 moreIn the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the...7.8 High
- facebook whatsapp desktop, whatsapp +1 moreAn input validation issue affected WhatsApp Desktop versions prior to 0.3.3793 which allows...5.3 Medium
- iomega and lenovoemc nas products, lenovo home media network hard drive firmware, ix12-300r firmware +4 more +6 moreA vulnerability in various versions of Iomega and LenovoEMC NAS products could allow an...8.8 High
- norton password managerNorton Password Manager, prior to 6.3.0.2082, may be susceptible to an address spoofing issue....3.9 Low
- Show moreLoading…