CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- oracle database server, oracle corporation database +1 moreVulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are...4.0 Medium
- oracle retail xstore officeVulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications ...8.2 High
- oracle database server, oracle corporation application express +1 moreVulnerability in the Application Express component of Oracle Database Server. Supported versions...5.4 Medium
- oracle retail customer management and segmentation foundationVulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of...7.6 High
- oracle retail customer management and segmentation foundationVulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of...8.2 High
- oracle retail xstore officeVulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications ...7.6 High
- oracle retail xstore officeVulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications ...5.5 Medium
- status react native desktopubuntu-server.js in Status React Native Desktop before v0.57.8_mobile_ui allows Remote Code...9.8 Critical
- haproxy proxyprotocolmastercactapus proxyprotocol vulnerable to denial of service7.5 High
- servicestack, servicestack framework +1 moreCross site scripting attack in ServiceStack Framework6.1 Medium
- google voice builder, voice builder builder +1 moreVoice Builder Prior to commit c145d4604df67e6fc625992412eef0bf9a85e26b and...9.8 Critical
- jeesiteJeesite 1.2.7 is affected by: SQL Injection. The impact is: sensitive information disclosure. The...6.5 Medium
- sir gnuboardGNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via...6.1 Medium
- ajdg adrotateThe AJdG AdRotate plugin before 5.3 for WordPress allows SQL Injection.7.2 High
- sir gnuboardGNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via...6.1 Medium
- sir gnuboardGNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via...6.1 Medium
- sir gnuboardGNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via...6.1 Medium
- sir gnuboardGNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via...6.1 Medium
- sir gnuboardGNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via...6.1 Medium
- sir gnuboardGNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via...6.1 Medium
- upwork time trackerUpwork Time Tracker 5.2.2.716 doesn't verify the SHA256 hash of the downloaded program update...7.8 High
- jsish jsi, jsish +1 moreJsish 2.4.84 2.0484 is affected by: Reachable Assertion. The impact is: denial of service. The...7.5 High
- jeesiteJeesite 1.2.7 is affected by: XML External Entity (XXE). The impact is: sensitive information...6.5 Medium
- jsish jsi, jsish +1 moreJsish 2.4.83 2.0483 is affected by: Nullpointer dereference. The impact is: denial of service....7.5 High
- jsish jsi, jsish +1 moreJsish 2.4.77 2.0477 is affected by: Use After Free. The impact is: denial of service. The...7.5 High
- jsish jsi, jsish +1 moreJsish 2.4.77 2.0477 is affected by: Out-of-bounds Read. The impact is: denial of service. The...7.5 High
- gnu binutils, binutils gold, gnu binutils gold +2 more +4 moreGNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input...5.5 Medium
- linagora hublinLINAGORA hublin latest (commit 72ead897082403126bf8df9264e70f0a9de247ff) is affected by:...7.5 High
- http request project request, oss http request (apache cordova plugin) +1 morekevinsawicki/http-request Missing certificate validation5.9 Medium
- jsi, jsish +1 morejsish 2.4.74 2.0474 is affected by: CWE-476: NULL Pointer Dereference. The impact is: denial of...5.5 Medium
- mozilla firefoxA hyperlink using the res: protocol can be used to open local files at a known location in...6.5 Medium
- mozilla firefoxA hyperlink using protocols associated with Internet Explorer, such as IE.HTTP:, can be used to...6.5 Medium
- d-link dsl-2750u, dlink dsl-2750u firmware +1 moreD-Link DSL-2750U 1.11 is affected by: Authentication Bypass. The impact is: denial of service and...9.1 Critical
- genetech products pie registerGenetechsolutions Pie Register 3.0.15 is affected by: Cross Site Scripting (XSS). The impact is:...6.1 Medium
- idrix truecrypt, veracrypt, idrix, truecrypt veracrypt, truecrypt +2 moreIDRIX, Truecrypt Veracrypt, Truecrypt Prior to 1.23-Hotfix-1 (Veracrypt), all versions (Truecrypt...3.3 Low
- zzcmszzcms 8.3 and earlier is affected by: SQL Injection. The impact is: sql inject. The component is:...9.8 Critical
- zzcmszzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The...9.8 Critical
- zzcmszzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The...9.8 Critical
- gorul gourl, gourl.io gourl wordpress plugin +1 moreGoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affected by: CWE-434. The impact is:...7.5 High
- zzcmszzcms version 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: zzcms...9.8 Critical
- zzcmszzcms version 8.3 and earlier is affected by: SQL Injection. The impact is: zzcms File Delete to...9.8 Critical
- lineageosLineageOS 16.0 and earlier is affected by: Incorrect Access Control. The impact is: The property...6.8 Medium
- x-stream xstream, oracle banking platform, business activity monitoring +7 more +9 moreDeserialization of Untrusted Data and Code Injection in xstream7.3 High
- modx revolution, modx revolution gallery +1 moreMODX Revolution Gallery 1.7.0 is affected by: CWE-434: Unrestricted Upload of File with Dangerous...7.5 High
- haproxyHAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors...7.5 High
- wcmsWCMS v0.3.2 has a CSRF vulnerability, with resultant directory traversal, to modify index.html...8.1 High
- webappick woocommerce product feedWebAppick WooCommerce Product Feed 2.2.18 and earlier is affected by: Cross Site Scripting (XSS)....5.4 Medium
- sweetscape 010 editorIn SweetScape 010 Editor 9.0.1, an integer overflow during the initialization of variables could...5.5 Medium
- sweetscape 010 editorIn SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation...5.5 Medium
- zte otcp, otcp firmware +1 moreAll versions up to V1.19.20.02 of ZTE OTCP product are impacted by XSS vulnerability. Due to XSS,...4.8 Medium
- Show moreLoading…