CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- oracle corporation java, oracle jdk, jre +2 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported...3.1 Low
- oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...4.8 Medium
- oracle corporation java, canonical ubuntu linux, hp xp7 command view +9 more +11 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...3.4 Low
- oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +5 more +7 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported...5.1 Medium
- wp-code-highlightjs project wp-code-highlightjsAn issue was discovered in the wp-code-highlightjs plugin through 0.6.2 for WordPress. wp-admin...8.8 High
- printeron central print servicesAn issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. The core...8.8 High
- audiocodes median 500-msbr firmware, median 500l-msbr firmware, median 800c-msbr firmware +1 more +3 moreAn issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR...8.8 High
- proftpd, debian linux, fedoraproject fedora +1 more +3 moreAn arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code...9.8 Critical
- audiocodes median 500-msbr firmware, median 500l-msbr firmware, median 800c-msbr firmware +1 more +3 more** DISPUTED ** An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and...7.5 High
- icegram email subscribers \& newslettersA SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin...9.8 Critical
- zeroshellZeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue...9.8 Critical
- hp universal internet of thingsA security vulnerability in HPE IceWall SSO Agent Option and IceWall MFA (Agent module ) could be...8.8 High
- hp icewall sso agent, mfa proxy +1 moreA security vulnerability in HPE IceWall SSO Agent Option and IceWall MFA (Agent module ) could be...5.9 Medium
- palo alto networks pan-osRemote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and earlier, and PAN-OS 8.1.2...8.1 High
- exacq technologies, inc. exacqvision serverexacqVision Server Unquoted Service Path6.7 Medium
- arduino firmwareEmbedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs ...6.5 Medium
- nvidia jetson tx1, jetson tx1 firmware +1 moreIn NVIDIA Jetson TX1 L4T R32 version branch prior to R32.2, Tegra bootloader contains a...6.7 Medium
- dpic project dpicdpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.7.8 High
- jisiwei i3 firmwareA vulnerability was found in the app 2.0 of the Shenzhen Jisiwei i3 robot vacuum cleaner, while...4.8 Medium
- jisiwei i3 firmwareA vulnerability was found in the app 2.0 of the Shenzhen Jisiwei i3 robot vacuum cleaner. Actions...5.6 Medium
- microstrategy webIn MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to...6.1 Medium
- altn mdaemon webmailMDaemon Webmail (formerly WorldClient) has CSRF.8.8 High
- code42Code42 for Enterprise through 6.8.4 has Incorrect Access Control.8.8 High
- gnome pango, canonical ubuntu linux, debian linux +10 more +12 moreGnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer...9.8 Critical
- cjson project cjson, oracle timesten in-memory database +1 moreDaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions...7.5 High
- jenkins credentials binding, jenkins credentials binding plugin jenkins +1 moreJenkins Credentials Binding Plugin Stores Passwords in a Recoverable Format6.5 Medium
- h3c h3cloud osH3C H3Cloud OS all versions allows SQL injection via the ear/grid_event sidx parameter.9.8 Critical
- scapy, fedoraproject fedora +1 moreInfinite Loop in scapy7.5 High
- mongodbAuthentication bypass when using LDAP authentication in MongoDB Enterprise Server8.1 High
- chinamobile gpn2.4p21-c-cn, chinamobileltd gpn2.4p21-c-cn firmware +1 moreChinaMobile GPN2.4P21-C-CN W2001EN-00 is affected by: Incorrect Access Control - Unauthenticated...7.5 High
- akeo rufusAkeo Consulting Rufus 3.0 and earlier is affected by: Insecure Permissions. The impact is:...9.8 Critical
- akeo rufusAkeo Consulting Rufus 3.0 and earlier is affected by: DLL search order hijacking. The impact is:...7.8 High
- premium software cleditorCross-site scripting in CLEditor6.1 Medium
- the linux foundation onos sdn controller, linuxfoundation open network operating system +1 moreThe Linux Foundation ONOS SDN Controller 1.15 and earlier versions is affected by: Improper Input...9.8 Critical
- rangerstudio directus 7 apiIn Directus 7 API before 2.2.1, uploading of PHP files is not blocked, leading to uploads/_...8.8 High
- rangerstudio directus 7 apiIn Directus 7 API through 2.3.0, uploading of PHP files is blocked only when the Apache HTTP...8.8 High
- rangerstudio directus 7 apiIn Directus 7 API through 2.3.0, remote attackers can read image files via a direct request for a...5.3 Medium
- rangerstudio directus 7interfaces/markdown/input.vue in Directus 7 Application before 7.7.0 does not sanitize Markdown...5.3 Medium
- rangerstudio directus 7 apiDirectus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a...9.8 Critical
- rangerstudio directus 7 apiDirectus 7 API before 2.3.0 does not validate uploaded files. Regardless of the file extension or...8.8 High
- openidc mod auth openidcZmartZone IAM mod_auth_openidc 2.3.10.1 and earlier is affected by: Cross Site Scripting (XSS)....6.1 Medium
- elcom cmsElcom CMS before 10.7 has SQL Injection via EventSearchByState.aspx and EventSearchAdv.aspx.7.5 High
- zzcms zzmcmszzcms zzmcms 8.3 and earlier is affected by: File Delete to getshell. The impact is: getshell....9.8 Critical
- code42 crashplan for small business, for enterprise +1 moreCode42 Enterprise and Crashplan for Small Business Client version 6.7 before 6.7.5, 6.8 before 6...7.0 High
- servo smallvecMemory corruption in smallvec9.8 Critical
- ovidentiaOvidentia 8.4.3 has SQL Injection via the id parameter in an index.php?tg=delegat&idx=mem request.8.8 High
- ovidentiaindex.php in Ovidentia 8.4.3 has XSS via tg=groups, tg=maildoms&idx=create&userid=0&bgrp=y, tg...5.4 Medium
- layerbbLayerBB 1.1.3 allows conversations.php/cmd/new CSRF.8.8 High
- Show moreLoading…