CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- angry-frog xavierXavier PHP Management Panel 3.0 is vulnerable to Reflected POST-based XSS via the username...6.1 Medium
- techsmith snagitUploaderService in SnagIT 2019.1.2 allows elevation of privilege by placing an invalid...7.8 High
- mikrotik routerosMikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to memory exhaustion. By...6.5 Medium
- mikrotik routerosMikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to stack exhaustion. By...6.5 Medium
- control-webpanel webpanelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, Reflected XSS in filemanager2.php ...6.1 Medium
- centos-webpanel centos web panelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, a hidden action=9 feature in...8.8 High
- control-webpanel webpanelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.840, File and Directory Information...4.3 Medium
- zendesk samlrsamlr XML nodes comment attack7.5 High
- linux kernel, netapp active iq performance analytics services, active iq unified manager +3 more +5 moreAn issue was discovered in the Linux kernel before 4.18.7. In create_qp_common in drivers...3.3 Low
- linux kernelAn issue was discovered in the Linux kernel before 4.20. drivers/phy/mscc/phy-ocelot-serdes.c has...7.8 High
- simple captcha2 project captcha2Code backdoor in simple_captcha29.8 Critical
- datagrid project datagriddatagrid contains code Injection backdoor9.8 Critical
- craftcms craft cmsIn some circumstances, Craft 2 before 2.7.10 and 3 before 3.2.6 wasn't stripping EXIF data from...5.3 Medium
- axway securetransportAxway SecureTransport 5.x through 5.3 (or 5.x through 5.5 with certain API configuration) is...9.8 Critical
- xfig project fig2dev, debian linux, opensuse leap +2 moreXfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c.5.5 Medium
- mcpp project mcpp, opensuse backports sle, leap +2 moreMCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c.5.5 Medium
- freebsdIn FreeBSD 12.0-STABLE before r349805, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before...7.8 High
- freebsdIn FreeBSD 12.0-STABLE before r350222, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before...7.8 High
- freebsdIn FreeBSD 12.0-STABLE before r350246, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before...9.6 Critical
- freebsdIn FreeBSD 12.0-STABLE before r350261, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before...7.8 High
- freebsdIn FreeBSD 11.3-STABLE before r350217, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE...6.5 Medium
- linux kernelIn the Linux kernel before 5.2.3, drivers/block/floppy.c allows a denial of service by...6.2 Medium
- linux kernelIn the Linux kernel before 5.2.3, set_geometry in drivers/block/floppy.c does not validate the...6.8 Medium
- softwareag quartz, apache tomee, atlassian jira service management +28 more +30 moreXML external entity injection in Terracotta Quartz Scheduler9.8 Critical
- openldap, apple mac os x, canonical ubuntu linux +9 more +11 moreAn issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session...7.5 High
- openldap, apple mac os x, canonical ubuntu linux +9 more +11 moreAn issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator...4.9 Medium
- linux kernelAn issue was discovered in the Linux kernel before 4.18.7. In block/blk-core.c, there is an...7.8 High
- national renewable energy laboratory (nrel) energyplusNREL EnergyPlus, Versions 8.6.0 and possibly prior versions, The application fails to prevent an...5.5 Medium
- mitsubishi electric fr configurator2, mitsubishielectric electric fr configurator2 +1 moreMitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability can be...5.5 Medium
- mitsubishi electric fr configurator2, mitsubishielectric electric fr configurator2 firmware +1 moreMitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability is triggered...5.5 Medium
- apache stormDeserialization of Untrusted Data in Apache Storm9.8 Critical
- apache stormExposure of Sensitive Information in Apache Storm Logviewer7.5 High
- yellowfin smart reporting, bmc remedy smart reporting, yellowfinbi yellowfin bi +2 moreYellowfin Smart Reporting All Versions Prior to 7.3 is affected by: Incorrect Access Control -...5.4 Medium
- facebook proxygenAn out of bounds write is possible via a specially crafted packet in certain configurations of...9.8 Critical
- red hat undertow, netapp active iq unified manager, redhat jboss data grid +3 more +5 moreUndertow Missing Authorization when requesting a protected directory without trailing slash5.3 Medium
firefoxUbuntufirefox regressionsNo score- auth0 passport-sharepointAuth0 Passport-SharePoint does not validate JWT signature7.3 High
- vcftoolsVCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial...7.8 High
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, qca8081 firmware +22 more +24 moreFirmware is getting into loop of overwriting memory when scan command is given from host because...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +20 more +22 moreRace condition while accessing DMA buffer in jpeg driver in Snapdragon Auto, Snapdragon...7.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +34 more +36 moreOut of bound read and information disclosure in firmware due to insufficient checking of an...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 moreNull pointer dereferencing can happen when playing the clip with wrong block group id in...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +36 more +38 moreimproper input validation in allocation request for secure allocations can lead to page fault. in...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +43 more +45 morePossible buffer overflow when number of channels passed is more than size of channel mapping...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 morePossible buffer overflow can occur when playing clip with incorrect element size in Snapdragon...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 moreData token is received from ADSP and is used without validation as an index into the array leads...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 moreBuffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto,...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9640 firmware, qcs405 firmware +19 more +21 moreWhen computing the digest a local variable is used after going out of scope in Snapdragon Auto,...8.8 High
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, qcs405 firmware +22 more +24 morePossible race condition that will cause a use-after-free when writing to two sysfs entries at...7.0 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9607 firmware, mdm9640 firmware +33 more +35 moreWhen handling the vendor command there exists a potential buffer overflow due to lack of input...7.8 High
- Show moreLoading…