CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- ladonImproper Restriction of XML External Entity Reference in ladon9.8 Critical
- syguestbook a5 project a5index.php?c=admin&a=index in SyGuestBook A5 Version 1.2 has stored XSS via a reply to a comment.5.4 Medium
- syguestbook a5 project a5SyGuestBook A5 Version 1.2 has no CSRF protection mechanism, as demonstrated by CSRF for an index...8.8 High
- syguestbook a5 project a5SyGuestBook A5 Version 1.2 allows stored XSS because the isValidData function in include...5.4 Medium
- techytalk quick chat wordpress plugin, quick chat +1 moreTechyTalk Quick Chat WordPress Plugin All up to the latest is affected by: SQL Injection. The...9.8 Critical
- pivotal software cloud foundry uaa, cloud foundry uaa release (oss) +1 moreUAA - Login app subject to clickjacking attack6.5 Medium
- dell unity, emc unity operating environment, emc unityvsa operating environment +2 moreDell EMC Unity and UnityVSA versions prior to 5.0.0.0.5.116 contain a plain-text password storage...7.8 High
- dell unity, emc unity operating environment, emc unityvsa operating environment +2 moreDell EMC Unity and UnityVSA versions prior to 5.0.0.0.5.116 contain an improper authorization...5.4 Medium
- facebook hhvm, hiphop virtual machine +1 moreCall to the scrypt_enc() function in HHVM can lead to heap corruption by using specifically...9.8 Critical
- dockerSecret insertion into debug log in Docker7.5 High
- audiocodes mediant 500-mbsr firmware, mediant 500l-msbr firmware, mediant 800c-msbr firmware +1 more +3 moreAn issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR...8.8 High
- wpeverest everest formsA SQL injection vulnerability exists in WPEverest Everest Forms plugin for WordPress through 1.4...9.8 Critical
- audiocodes mediant 500-mbsr firmware, mediant 500l-msbr firmware, mediant 800c-msbr firmware +1 more +3 moreAn issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR...6.1 Medium
- opera miniThe Opera Mini application through 16.0.14 for iOS has a UXSS vulnerability that can be triggered...6.1 Medium
- b3log wideb3log Wide unauthenticated file access7.5 High
- moinejf abcm2ps, debian linux +1 moremoinejf abcm2ps 8.13.20 is affected by: Incorrect Access Control. The impact is: Allows attackers...5.5 Medium
- lawrence livermore national laboratory msr-safe, llnl model specific registers-safe +1 moreLawrence Livermore National Laboratory msr-safe v1.1.0 is affected by: Incorrect Access Control....7.5 High
- dolibarr, dolibarr erp\/crm +1 moreDolibarr Cross Site Request Forgery (CSRF)8.8 High
- domainmoddomainmod(https://domainmod.org/) domainmod v4.10.0 is affected by: Cross Site Request Forgery ...8.8 High
- domainmoddomainmod(https://domainmod.org/) domainmod v4.10.0 is affected by: Cross Site Request Forgery ...8.8 High
- domainmoddomainmod v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a...8.8 High
- automattic camptix event ticketingThe CampTix Event Ticketing plugin before 1.5 for WordPress allows CSV injection when the export...7.5 High
- automattic camptix event ticketingThe CampTix Event Ticketing plugin before 1.5 for WordPress allows XSS in the admin section via a...4.8 Medium
- firefly-iii firefly iiiFirefly III vulnerable to image-based stored XSS5.4 Medium
- firefly-iii firefly iiiFirefly III vulnerable to reflected cross-site scripting5.4 Medium
- firefly-iii firefly iiiFirefly III vulnerable to stored XSS5.4 Medium
- firefly-iii firefly iiiFirefly III vulnerable to stored XSS5.4 Medium
- espocrmStored XSS in EspoCRM before 5.6.4 allows remote attackers to execute malicious JavaScript and...6.1 Medium
bzip2Debianbzip2 - regression updateNo score- videolan vlc media player, canonical ubuntu linux, debian linux +2 more +4 morelavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has...9.8 Critical
- huawei honor magic 2, honor magic 2 firmware +1 moreThere is an information disclosure vulnerability on Secure Input of certain Huawei smartphones in...5.5 Medium
- qbittorrentIn qBittorrent before 4.1.7, the function Application::runExternalProgram() located in app...9.8 Critical
- comodo antivirusComodo Antivirus versions 11.0.0.6582 and below are vulnerable to Denial of Service affecting...5.5 Medium
- comodo antivirusComodo Antivirus versions 12.0.0.6810 and below are vulnerable to Denial of Service affecting...5.5 Medium
- comodo antivirusComodo Antivirus versions up to 12.0.0.6810 are vulnerable to a local Denial of Service affecting...5.5 Medium
- comodo antivirusComodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp...5.5 Medium
- comodo antivirusComodo Antivirus versions up to 12.0.0.6810 are vulnerable to Local Privilege Escalation due to...7.8 High
- perl crypt::jwt crypt::jwt, perl crypt\ \ +1 morePerl Crypt::JWT prior to 0.023 is affected by: Incorrect Access Control. The impact is: allow...9.8 Critical
- cisco small business 300 series managed switches, sf200-24 firmware, sf200-24fp firmware +55 more +57 moreCisco Small Business Series Switches Open Redirect Vulnerability4.7 Medium
- cisco spa525g2 5-line ip phone, spa500ds firmware, spa500s firmware +8 more +10 moreCisco Small Business SPA500 Series IP Phones Local Command Execution Vulnerability6.6 Medium
- lodashRegular Expression Denial of Service (ReDoS) in lodash6.5 Medium
- cisco industrial network directorCisco Industrial Network Director Web Services Management Agent Unauthorized Information Disclosure Vulnerability5.3 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Cross-Site Scripting Vulnerability6.1 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Blind SQL Injection Vulnerability4.3 Medium
- cisco findit network manager, findit network probe +1 moreCisco FindIT Network Management Software Static Credentials Vulnerability8.4 High
- cisco access points, aironet 3700e firmware, aironet 3700i firmware +2 more +4 moreCisco IOS Access Points Software 802.11r Fast Transition Denial of Service Vulnerability7.4 High
- rdbrck shiftRedbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail,...5.5 Medium
- logmeininc join.meIn LogMeIn join.me before 3.16.0.5505, an attacker could execute arbitrary commands on a targeted...8.8 High
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not...9.8 Critical
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreAIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code...7.8 High
- Show moreLoading…