CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- layerbbLayerBB 1.1.3 allows admin/general.php arbitrary file upload because the custom_logo filename...9.8 Critical
- layerbbLayerBB 1.1.3 allows XSS via the application/commands/new.php pm_title variable, a related issue...6.1 Medium
- otcmsOTCMS 3.81 allows XSS via the mode parameter in an apiRun.php?mudi=autoRun request.6.1 Medium
- antsword project antswordAntSword RCE and XSS via code injection6.1 Medium
- metinfoMetinfo 6.x allows SQL Injection via the id parameter in an admin/index.php?n=ui_set&m=admin&c...8.8 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...5.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)....4.2 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +2 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Plug-in)...3.8 Low
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...5.4 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +1 more +3 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...5.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +2 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Log)....5.3 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML)....6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...5.1 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Compiling)....3.1 Low
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +3 more +5 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable...4.9 Medium
- linux kernelIn the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is...5.5 Medium
- adobe bridge ccAdobe Bridge CC version 9.0.2 and earlier versions have an out of bound read vulnerability....6.5 Medium
- adobe experience managerAdobe Experience Manager version 6.4 and ealier have a Cross-Site Request Forgery vulnerability....6.5 Medium
- adobe experience managerAdobe Experience Manager version 6.4 and ealier have a Stored Cross-site Scripting vulnerability....6.1 Medium
- adobe experience managerAdobe Experience Manager version 6.4 and ealier have a Reflected Cross-site Scripting...6.1 Medium
- adobe dreamweaverAdobe Dreamweaver direct download installer versions 19.0 and below, 18.0 and below have an...7.8 High
- adobe campaignAdobe Campaign Classic version 18.10.5-8984 and earlier versions have an Insufficient input...7.5 High
- adobe campaignAdobe Campaign Classic version 18.10.5-8984 and earlier versions have an Information Exposure...7.5 High
- adobe campaignAdobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper error handling...7.5 High
- adobe campaignAdobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper Restriction of...7.5 High
- adobe campaignAdobe Campaign Classic version 18.10.5-8984 and earlier versions have an Inadequate access...7.5 High
- adobe campaignAdobe Campaign Classic version 18.10.5-8984 and earlier versions have a Command injection...9.8 Critical
- flatcoreA CSRF vulnerability was found in flatCore before 1.5, leading to the upload of arbitrary .php...8.8 High
- libjpeg-turbo** DISPUTED ** In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of...5.5 Medium
- axiosys bento4In Bento4 1.5.1-627, AP4_DataBuffer::SetDataSize does not handle reallocation failures, leading...6.5 Medium
- kaspersky anti-virus, internet security, anti-virus, kaspersky internet security, kaspersky total security +3 more +5 moreInformation Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total...4.3 Medium
- oecmsOECMS v4.3.R60321 and v4.3 later is affected by: Cross Site Request Forgery (CSRF). The impact is...8.8 High
- oisf suricataOpen Information Security Foundation Suricata prior to version 4.1.3 is affected by: Denial of...7.5 High
- mailcleanerMailCleaner before c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9 is affected by: Unauthenticated MySQL...7.5 High
- mcafee agent, mcafee, llc mcafee agent (ma) +1 moreMA for Windows update addresses weak directory permissions7.2 High
- i-doitSynetics GmbH I-doit 1.12 and earlier is affected by: SQL Injection. The impact is:...9.8 Critical
- the linux foundation onos, linuxfoundation open network operating system +1 moreThe Linux Foundation ONOS 2.0.0 and earlier is affected by: Integer Overflow. The impact is: A...4.9 Medium
- the linux foundation onos, linuxfoundation open network operating system +1 moreThe Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is:...4.9 Medium
- oisf suricataOpen Information Security Foundation Suricata prior to version 4.1.2 is affected by: Denial of...7.5 High
- the linux foundation onos, linuxfoundation open network operating system +1 moreThe Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is:...4.9 Medium
- codersclub discuz\!mlDiscuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified...9.8 Critical
- avast antivirusIn Avast Antivirus before 19.4, a local administrator can trick the product into renaming...4.4 Medium
- salt project salt, saltstack salt 2018, salt 2019 +2 moreSaltStack Salt SQL Injection vulnerability in mysql.user_chpass function9.8 Critical
- giteaGitea XSS Vulnerability6.1 Medium
- gdnsdThe set_ipv6() function in zscan_rfc1035.rl in gdnsd 3.2.0 has a stack-based buffer overflow via...9.8 Critical
- gdnsdThe set_ipv4() function in zscan_rfc1035.rl in gdnsd 3.2.0 has a stack-based buffer overflow via...9.8 Critical
- sleuthkit the sleuth kit, the sleuth kit sleuth kit, debian linux +1 more +3 moreThe Sleuth Kit 4.6.0 and earlier is affected by: Integer Overflow. The impact is: Opening crafted...6.5 Medium
- Show moreLoading…