CVEs published in July 2019
1,618 vulnerabilities, 265 critical, 12 exploited.
- denx u-boot, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 moreAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed...9.8 Critical
- denx u-boot, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 moreAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with...9.8 Critical
- denx u-boot, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 moreAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed...9.8 Critical
- denx u-boot, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 moreAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing...9.8 Critical
- denx u-boot, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 moreAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in...9.8 Critical
- denx u-boot, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 moreAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in...9.8 Critical
- denx u-boot, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 moreAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in...9.8 Critical
- denx u-boot, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 moreAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in...9.8 Critical
- denx u-boot, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 moreAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in...9.8 Critical
- apache subversionIn Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve...7.5 High
- apache subversionIn Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve...6.5 Medium
- red hat openshift, redhat openshift container platform +1 moreOpenShift Container Platform before version 4.1.3 writes OAuth tokens in plaintext to the audit...2.3 Low
- containers podman, libpod project libpod, opensuse leap +2 morePodman Path Traversal Vulnerability leads to arbitrary file read/write7.5 High
- elastic kibanaKibana versions before 6.8.2 and 7.2.1 contain a server side request forgery (SSRF) flaw in the...4.9 Medium
- elastic apm agent for ruby, apm-agent-ruby +1 moreElastic APM agent for Ruby vulnerable to Improper Certificate Validation7.4 High
- elastic elasticsearchConcurrent Execution using Shared Resource with Improper Synchronization in Elasticsearch5.9 Medium
- hackerone nextcloud server, nextcloud server +1 moreA missing check in the Nextcloud Server prior to version 15.0.1 causes leaking of calendar event...4.3 Medium
- nextcloud, nextcloud com.nextcloud.client +1 moreImproper sanitization of HTML in directory names in the Nextcloud Android app prior to version 3...6.8 Medium
- nextcloud com.nextcloud.client, server +1 moreBypass lock protection in the Nextcloud Android app prior to version 3.6.1 allows accessing the...4.6 Medium
- nextcloud, nextcloud com.nextcloud.client +1 moreBypass lock protection in the Nextcloud Android app prior to version 3.6.2 causes leaking of...2.4 Low
- nextcloud, nextcloud com.nextcloud.client +1 moreBypass lock protection in the Nextcloud Android app prior to version 3.3.0 allowed access to...6.1 Medium
- nextcloud, nextcloud com.nextcloud.client +1 moreSQL Injection in the Nextcloud Android app prior to version 3.0.0 allows to destroy a local cache...9.8 Critical
- nextcloud, nextcloud com.nextcloud.client +1 moreBypassing lock protection exists in Nextcloud Android app 3.6.0 when creating a multi-account and...6.8 Medium
- min-http-serverCross-Site Scripting in min-http-server5.4 Medium
- http-file-serverCross-Site Scripting in http-file-server5.4 Medium
- ui unifi controller, unifi +1 moreSMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi...8.1 High
- yarnMissing Encryption of Sensitive Data in yarn8.1 High
- oxid-esales eshopOXID eShop 6.0.x before 6.0.5 and 6.1.x before 6.1.4 allows SQL Injection via a crafted URL,...9.8 Critical
oci-systemd-hookAlmaLinux,oci-umountAlmaLinux +1 morecontainer-tools:rhel8 bug fix updateNo scorednf-plugin-spacewalkAlmaLinux,python3-dnf-plugin-spacewalkAlmaLinux,python3-rhn-checkAlmaLinux +10 more +12 moresatellite-5-client module updateNo scorepython2-attrsAlmaLinux,python2-chardetAlmaLinux,python2-coverageAlmaLinux +21 more +23 morepython27:2.7 bug fix updateNo score- edx edx-platformedx-platform before 2018-07-18 allows XSS via a response to a Chemical Equation advanced problem.6.1 Medium
- edx edx-platformThe installation process in Open edX before 2017-01-10 exposes a MongoDB instance to external...7.2 High
- openmpt libopenmpt, debian linux +1 morelibopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2...6.5 Medium
- openmpt libopenmptDSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.6.5 Medium
- openmpt libopenmpt, opensuse leap +1 moreJ2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.6.5 Medium
- openmpt libopenmpt, opensuse leap +1 morelibopenmpt before 0.3.13 allows a crash with malformed MED files.6.5 Medium
- openmpt libopenmptlibopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files.6.5 Medium
- univa grid engineIn Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on...9.8 Critical
- bitdefender antivirus plus, endpoint security tool, internet security +1 more +3 moreAn issue was discovered in Bitdefender products for Windows (Bitdefender Endpoint Security Tool...6.7 Medium
- 10web photo galleryA SQL injection vulnerability exists in the 10Web Photo Gallery plugin before 1.5.31 for...9.8 Critical
- opensslWindows builds with insecure path defaults3.3 Low
- cryptopp crypto\+\+Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This...5.9 Medium
- openstack ironic-inspector, redhat openstack, openstack-ironic-inspector +2 moreOpenstack ironic-inspector has SQL injection vulnerability in node_cache8.3 High
- python novajoin, red hat python-novajoin +1 moreImproper Access Control in novajoin7.1 High
- suse rancherRancher Recreates Default User With Known Password Despite Deletion9.8 Critical
- cpanelThe WebDAV transport feature in cPanel before 76.0.8 enables debug logging (SEC-467).5.5 Medium
- cpanelcPanel before 76.0.8 allows arbitrary code execution in the context of the root account via...7.8 High
- cpanelcPanel before 76.0.8 unsafely performs PostgreSQL password changes (SEC-366).7.8 High
- cpanelcPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface (SEC-464).6.1 Medium
- Show moreLoading…