CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- google chromeInappropriate implementation in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a...6.5 Medium
- sigil-ebook sigil, canonical ubuntu linux, flightcrew project flightcrew +2 moreSigil before 0.9.16 is vulnerable to a directory traversal, allowing attackers to write arbitrary...7.5 High
- debian pdns, powerdns authoritative server +1 morePowerDNS Authoritative daemon , all versions pdns 4.1.x before pdns 4.1.10, exiting when...4.3 Medium
- planonsoftware planonPlanon before Live Build 41 has XSS.6.1 Medium
- dahua dh-ipc-hx863x, dh-sd4xxxxx, dh-sd5xxxxx +9 more +11 moreThe Amcrest IP2M-841B IP camera firmware version V2.520.AC00.18.R does not require authentication...7.5 High
- matrixsslIn MatrixSSL 3.8.3 Open through 4.2.1 Open, the DTLS server mishandles incoming network messages...9.8 Critical
- veritas resiliency platformAn issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. When uploading an...9.1 Critical
- veritas resiliency platformAn issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. An arbitrary command...7.2 High
- veritas resiliency platformAn issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. An arbitrary command...7.2 High
- veritas resiliency platformAn issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. A persistent cross...5.9 Medium
- imgixImgix through 2019-06-19 allows remote attackers to cause a denial of service (resource...6.5 Medium
- apache vcl, virtual computing lab +1 moreApache VCL versions 2.1 through 2.5 do not properly validate cookie input when determining what...7.2 High
- apache vcl, virtual computing lab +1 moreApache VCL versions 2.1 through 2.5 do not properly validate form input when adding and removing...7.2 High
- apache vcl, virtual computing lab +1 moreApache VCL versions 2.1 through 2.5 do not properly validate form input when processing a...9.8 Critical
- printeron central print servicesAn issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. A user without...8.8 High
- printeron central print servicesAn issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. An...5.3 Medium
- vsourz advanced cf7 dbA SQL injection vulnerability exists in the Vsourz Digital Advanced CF7 DB plugin through 1.6.1...9.8 Critical
- docker, debian linux, opensuse leap +2 moreMoby Docker cp broken with debian containers9.8 Critical
- softether see.sysSee.sys through 4.25 in the SoftEther VPN Server allows a user to specify any kernel address to...7.8 High
- edx edx-platformedx-platform before 2016-06-06 allows CSRF.8.8 High
- edx edx-platformedx-platform before 2016-06-10 allows account activation with a spoofed e-mail address.5.3 Medium
- linuxfoundation nats-serverInteger Overflow or Wraparound in NATS Server7.5 High
- oneidentity cloud access managerOne Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security (HSTS), which...7.4 High
- edx edx-platformedx-platform before 2015-07-20 allows code execution by privileged users because the course...8.8 High
- dolibarr erp\/crmDolibarr ERP and CRM Code Injection8.0 High
- dolibarr erp\/crmDolibarr ERP and CRM malicious executable loading8.8 High
- dolibarr erp\/crmDolibarr ERP/CRM 9.0.1 was affected by stored XSS within uploaded files. These vulnerabilities...5.4 Medium
- edx edx-platformedx-platform before 2015-08-17 allows XSS in the Studio listing of courses.5.4 Medium
- edx edx-platformedx-platform before 2015-09-17 allows XSS via a team name.6.1 Medium
- unity web playerThe Unity Web Player plugin before 4.6.6f2 and 5.x before 5.0.3f2 allows attackers to read...6.5 Medium
- humhub social network kitHumHub Social Network Kit Enterprise v1.3.13 allows remote attackers to find the user accounts...5.3 Medium
- wpfastestcache wp fastest cacheThe WP Fastest Cache plugin through 0.8.9.0 for WordPress allows remote attackers to delete...6.5 Medium
- polycom unified communications software, united communications software +1 moreAn RCE (Remote Code Execution) vulnerability exists in the UCS software through 6.0.0 used by...8.3 High
- pdfresurrect project pdfresurrect, fedoraproject fedora +1 morePDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with...7.8 High
- denx u-boot, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 moreA crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07...7.1 High
- pterodactyl panelPterodactyl vulnerable to 2FA Sniffing7.5 High
- tridactylTridactyl before 1.16.0 allows fake key events.7.5 High
- dependency-trackDependency-Track before 3.5.1 allows XSS.5.4 Medium
- fleetFleet before 2.1.2 allows exposure of SMTP credentials.7.5 High
- stacktable.jsstacktable.js before 1.0.4 allows XSS.6.1 Medium
- microsoft outlook for android, outlook +1 moreOutlook for Android Spoofing Vulnerability5.4 Medium
- discourseDiscourse before v2.4.0.beta2 lacks a confirmation screen when logging in via an email link.7.3 High
- discourseDiscourse before v2.4.0.beta2 lacks a confirmation screen when logging in via a user-api OTP.5.3 Medium
- ash-aioASH-AIO before 2.0.0.3 allows an open redirect.6.1 Medium
- graphql-engine, hasura graphql engine +1 moregraphql-engine (aka Hasura GraphQL Engine) before 1.0.0-beta.3 mishandles the audience check...7.5 High
- charcoal-se smokedetectorSmokeDetector intentionally does automatic deployments of updated copies of SmokeDetector without...9.0 Critical
- misskeyMisskey before 10.102.4 allows hijacking a user's token.6.1 Medium
- fasterxml jackson-databind, apple xcode, debian linux +21 more +23 moreDeserialization of untrusted data in FasterXML jackson-databind9.8 Critical
- libslirp project libslirpip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet...8.8 High
- linux kernelA flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x...4.7 Medium
- Show moreLoading…