CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- atcom a10w firmwareA command injection (missing input validation) issue in the remote phonebook configuration URI in...9.0 Critical
- akuvox sp-r50p firmwareHardcoded credentials in the Akuvox R50P VoIP phone 50.0.6.156 allow an attacker to get access to...7.2 High
- cherokee webserver latest cherokee web server, cherokee-project cherokee web server +1 moreCherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 (Current stable) is affected...7.5 High
- tcpdumptcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose...3.3 Low
- offis dcmtk, fedoraproject fedora +1 moreOFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow. The impact is: Possible code...9.8 Critical
- tronlink walletTronLink Wallet 2.2.0 stores user wallet keystore in plaintext and places them in insecure...9.8 Critical
- akuvox sp-r50p firmwareMissing file and path validation in the ringtone upload function of the Akuvox R50P VoIP phone 50...7.2 High
- cat runner\ decorate home projectThe application API of Cat Runner Decorate Home version 2.8.0 for Android does not sufficiently...7.5 High
- htek uc902 firmwareThe Htek UC902 VoIP phone web management interface contains several buffer overflow...8.2 High
- tronlink walletThe user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when...6.5 Medium
- momo project momoThe Momo application 2.1.9 for Android stores confidential information insecurely on the system ...6.5 Medium
- akuvox sp-r50p firmwareA command injection (missing input validation) issue in the IP address field for the logging...7.2 High
- send-anywhere send anywhereThe Send Anywhere application 9.4.18 for Android stores confidential information insecurely on...6.5 Medium
- juniper juniper/libslax, libslax +1 moreJuniper juniper/libslax libslax latest version (as of commit...6.5 Medium
- the linux foundation onos, linuxfoundation open network operating system +1 moreThe Linux Foundation ONOS 1.15.0 and ealier is affected by: Improper Input Validation. The impact...9.8 Critical
- frog cms cmsFrog CMS 1.1 is affected by: Cross Site Scripting (XSS). The impact is: Cookie stealing, Alert...5.4 Medium
- iliasIlias 5.3 before 5.3.12; 5.2 before 5.2.21 is affected by: Cross Site Scripting (XSS) - CWE-79...6.1 Medium
- freedesktop poppler, debian linux, fedoraproject fedora +4 more +6 moreThe JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of...6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9650 firmware +29 more +31 moreOut of bound access can occur due to buffer copy without checking size of input received from...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +40 more +42 moreImproper validation for inputs received from firmware can lead to an out of bound write issue in...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9607 firmware +36 more +38 moreShared memory gets updated with invalid data and may lead to access beyond the allocated memory....9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm msm8996au firmware, qcs405 firmware +26 more +28 moreOut of bound read can happen due to lack of NULL termination on user controlled data in WLAN in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9650 firmware +22 more +24 morePossible buffer overflow while processing the high level lim process action frame due to improper...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9607 firmware, mdm9640 firmware +24 more +26 moreNull pointer dereference occurs for channel context while opening glink channel in Snapdragon...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +40 more +42 moreUnauthorized access from GPU subsystem to HLOS or other non secure subsystem memory can lead to...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +37 more +39 moreA race condition occurs while processing perf-event which can lead to a use after free condition...7.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +36 more +38 morePossible buffer overflow at the end of iterating loop while getting the version info and lead to...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm mdm9206 firmware, mdm9607 firmware +22 more +24 moreDebug policy with invalid signature can be loaded when the debug policy functionality is disabled...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +54 more +56 moreLack of check to prevent the buffer length taking negative values can lead to stack overflow. in...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9206 firmware, mdm9607 firmware +34 more +36 moreXBL_SEC image authentication and other crypto related validations are accessible to a compromised...7.8 High
- ibm spectrum protectThe IBM Spectrum Protect 7.1 and 8.1 Backup-Archive Client is vulnerable to a buffer overflow....4.9 Medium
- ibm spectrum protectA IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is...5.1 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.2 and 7.3 specifies permissions for a security-critical resource in a way that...4.2 Medium
- gnu patch, debian linux +1 moreGNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by...7.8 High
- onionbuzzAn issue was discovered in the Viral Quiz Maker - OnionBuzz plugin before 1.2.2 for WordPress....9.8 Critical
- onionbuzzAn issue was discovered in the Viral Quiz Maker - OnionBuzz plugin before 1.2.7 for WordPress....9.8 Critical
- foxitsoftware phantompdfAn issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when...7.5 High
- foxitsoftware phantompdfAn issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a...7.5 High
- foxitsoftware phantompdfAn issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash due to the...7.5 High
- foxitsoftware phantompdfAn issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when...7.5 High
- foxitsoftware phantompdfAn issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash due to the...7.5 High
- foxitsoftware phantompdfAn issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to...7.5 High
- foxitsoftware phantompdfAn issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to...9.8 Critical
- foxitsoftware phantompdfAn issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a...7.5 High
rdesktopMageiaUpdated rdesktop packages fix security issuesNo score- foxitsoftware phantompdfAn issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when...7.5 High
- nevma adaptive imagesAn Arbitrary File Deletion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for...7.5 High
- nevma adaptive imagesA Local File Inclusion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for...7.5 High
- oracle corporation java, canonical ubuntu linux, hp xp7 command view +4 more +6 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: JCE). The supported...3.7 Low
- oracle corporation java, oracle jdk, jre +2 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). Supported versions...5.3 Medium
- Show moreLoading…