CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- docker docker-credential-helpers, canonical ubuntu linux, docker credential helpers +1 more +3 moredocker-credential-helpers before 0.6.3 has a double free in the List functions.5.5 Medium
- flifAn issue was discovered in image_save_png in image/image-png.cpp in Free Lossless Image Format ...7.8 High
- libavIn Libav 12.3, there is an infinite loop in the function wv_read_block_header() in the file wvdec.c.6.5 Medium
- libavAn issue was discovered in Libav 12.3. There is an infinite loop in the function mov_probe in the...6.5 Medium
- exiv2Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() in rafimage...7.8 High
- icegram email subscribers \& newslettersAn XSS vulnerability in the "Email Subscribers & Newsletters" plugin 4.1.6 for WordPress allows...6.1 Medium
- netgear wndr3400v3 firmwareA stack-based buffer overflow in the upnpd binary running on NETGEAR WNDR3400v3 routers with...9.8 Critical
- openbravo erpOpenbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal. This vulnerability could...5.4 Medium
- joget worfklow** DISPUTED ** In Joget Workflow 6.0.20, CSV Injection, also known as Formula Injection, exists,...7.8 High
- espocrmEspoCRM 5.6.4 is vulnerable to user password hash enumeration. A malicious authenticated attacker...8.8 High
- espocrmEspoCRM 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data in the...6.1 Medium
- espocrmEspoCRM version 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data...6.1 Medium
- espocrmAn issue was discovered in EspoCRM before 5.6.6. Stored XSS exists due to lack of filtration of...6.1 Medium
- espocrmAn issue was discovered in EspoCRM before 5.6.6. Stored XSS exists due to lack of filtration of...6.1 Medium
- espocrmAn issue was discovered in EspoCRM before 5.6.6. There is stored XSS due to lack of filtration of...6.1 Medium
- simple-membership-plugin simple membershipThe Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation...8.8 High
- simple service discovery protocol responder project service discovery protocol responderSSDP Responder 1.x through 1.5 mishandles incoming network messages, leading to a stack-based...7.5 High
- palletsprojects werkzeugPallets Werkzeug vulnerable to Path Traversal7.5 High
- sunhater kcfinderSunHater KCFinder cross-site scripting (XSS) vulnerability in upload.php6.1 Medium
unzipDebianunzip - regression updateNo score- exiv2, debian linux +1 moreIn Exiv2 0.27.99.0, there is an out-of-bounds read in Exiv2::MrwImage::readMetadata() in mrwimage...6.5 Medium
- exiv2, debian linux +1 moreExiv2::PngImage::readMetadata() in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a...6.5 Medium
- veeam one reporterVeeam ONE Reporter 9.5.0.3201 allows XSS via a crafted Description(config) field to addDashboard...5.4 Medium
- veeam one reporterVeeam ONE Reporter 9.5.0.3201 allows XSS via the Add/Edit Widget with a crafted Caption field to...5.4 Medium
- linux kernelIn the Linux kernel before 2.6.20, there is an off-by-one bug in net/netlabel/netlabel_cipso_v4.c...9.8 Critical
- linux kernelIn the Linux kernel before 3.1, an off by one in the drivers/target/loopback/tcm_loop.c...9.8 Critical
- linux kernelIn the Linux kernel before 3.4, a buffer overflow occurs in drivers/net/wireless/iwlwifi/iwl-agn...9.8 Critical
- linux kernelIn the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in...5.5 Medium
- linux kernelIn the Linux kernel before 4.14, an out of boundary access happened in drivers/nvme/target/fc.c.9.8 Critical
- linux kernelIn the Linux kernel before 4.9.6, there is an off by one in the drivers/mtd/spi-nor/cadence...9.8 Critical
- linux kernelIn the Linux kernel before 2.6.37, an out of bounds array access happened in drivers/net/mlx4...5.6 Medium
- linux kernelIn the Linux kernel before 2.6.34, a range check issue in drivers/gpu/drm/radeon/atombios.c could...7.8 High
- upxcanUnpack in p_vmlinx.cpp in UPX 3.95 allows remote attackers to cause a denial of service (SEGV...7.8 High
- upxAn Integer overflow in the getElfSections function in p_vmlinx.cpp in UPX 3.95 allows remote...5.5 Medium
- glyphandcog xpdfreaderAn issue was discovered in Xpdf 4.01.01. There is a use-after-free in the function JPXStream:...5.5 Medium
- glyphandcog xpdfreaderAn issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function...5.5 Medium
- glyphandcog xpdfreaderAn issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function...5.5 Medium
- glyphandcog xpdfreaderAn issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function...5.5 Medium
- glyphandcog xpdfreaderAn issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function...5.5 Medium
- glyphandcog xpdfreaderAn issue was discovered in Xpdf 4.01.01. There is an integer overflow in the function JBIG2Bitmap...5.5 Medium
- glyphandcog xpdfreaderAn issue was discovered in Xpdf 4.01.01. There is an Integer overflow in the function JBIG2Bitmap...7.8 High
- misp-project mispIn app/webroot/js/event-graph.js in MISP 2.4.111, a stored XSS vulnerability exists in the event...6.1 Medium
- wikindx project wikindxA cross-site scripting (XSS) vulnerability in getPagingStart() in core/lists/PAGING.php in...6.1 Medium
- ahsay cloud backup suiteAn insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0...8.8 High
- ahsay cloud backup suiteAn issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. When sending an out-of...7.5 High
- ahsay cloud backup suiteAn issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. On the /cbs/system...7.5 High
- ahsay cloud backup suiteAn issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. With a valid administrator...7.2 High
- ahsay cloud backup suiteAn issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. When creating a trial...6.1 Medium
- trend micro officescanA DLL side-loading vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow an...7.8 High
- central dogma project dogma, line corporation central dogma +1 moreCross-site scripting vulnerability in Central Dogma 0.17.0 to 0.40.1 allows remote attackers to...6.1 Medium
- Show moreLoading…