CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- cpanelIn cPanel before 71.9980.37, API tokens retain ACLs after those ACLs are removed from the...7.2 High
- redhat satellite, the foreman foreman +1 moreIt was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce...7.4 High
- jolokia, redhat openstack +1 moreCross-Site Request Forgery in Jolokia8.1 High
- gnome evolution-ews, redhat enterprise linux +1 moreIt was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An...8.1 High
- red hat atomic-openshift, redhat openshift +1 moreA vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able...3.6 Low
- cpanelcPanel before 74.0.0 makes web-site contents accessible to other local users via Git repositories...3.3 Low
- cpanelcPanel before 74.0.0 allows file-rename operations during account renames (SEC-442).2.3 Low
- cpanelcPanel before 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record...4.3 Medium
- cpanelcPanel before 74.0.0 allows arbitrary file-read operations during File Restoration (SEC-436).5.5 Medium
- cpanelcPanel before 74.0.0 allows arbitrary zone file modifications during record edits (SEC-426).4.3 Medium
- cpanelcPanel before 74.0.0 allows certain file-read operations via password file caching (SEC-425).4.4 Medium
- cpanelcPanel before 74.0.0 allows file modification in the context of the root account because of...5.5 Medium
- cpanelcPanel before 74.0.0 allows SQL injection during database backups (SEC-420).9.8 Critical
- cpanelcPanel before 74.0.0 insecurely stores phpMyAdmin session files (SEC-418).5.3 Medium
- cpanelcPanel before 74.0.0 allows Apache HTTP Server configuration injection because of DocumentRoot...5.3 Medium
- cpanelcPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface (SEC-367).5.4 Medium
- gnucobol project gnucobolGnuCOBOL 2.2 has a buffer overflow in cb_push_op in cobc/field.c via crafted COBOL source code.7.8 High
- cpanelcPanel before 74.0.8 allows FTP access during account suspension (SEC-449).6.5 Medium
- cpanelcPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account...6.8 Medium
- cpanelcPanel before 74.0.8 allows self stored XSS on the Security Questions login page (SEC-446).5.4 Medium
- cpanelcPanel before 74.0.8 mishandles account suspension because of an invalid email_accounts.json file...3.3 Low
- cpanelcPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API...6.3 Medium
- cpanelcPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface (SEC-441).5.4 Medium
- cpanelcPanel before 74.0.8 allows self XSS in WHM Style Upload interface (SEC-437).5.4 Medium
- cpanelcPanel before 74.0.8 allows self XSS in the Site Software Moderation interface (SEC-434).5.4 Medium
- cpanelcPanel before 74.0.8 allows self XSS in the WHM Security Questions interface (SEC-433).5.4 Medium
- cpanelcPanel before 74.0.8 allows self XSS in the WHM "Create a New Account" interface (SEC-428).5.4 Medium
- cpanelcPanel before 74.0.8 allows local users to disable the ClamAV daemon (SEC-409).3.3 Low
- dlink 6600-ap firmware, dwl-3600ap firmware +1 moreAn issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is...6.1 Medium
- dlink 6600-ap firmware, dwl-3600ap firmware +1 moreAn issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is...5.5 Medium
- dlink 6600-ap firmware, dwl-3600ap firmware +1 moreAn issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is...5.5 Medium
- dlink 6600-ap firmware, dwl-3600ap firmware, dwl-8610ap firmware +2 moreAn issue was discovered on D-Link 6600-AP, DWL-3600AP, and DWL-8610AP Ax 4.2.0.14 21/03/2019...5.5 Medium
- dlink 6600-ap firmware, dwl-3600ap firmware +1 moreAn issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is...5.5 Medium
- dlink 6600-ap firmware, dwl-3600ap firmware +1 moreAn issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is...7.8 High
- djangoproject django, opensuse leap +1 moreUncontrolled Recursion in Django7.5 High
- djangoproject django, debian linux, fedoraproject fedora +2 moreSQL Injection in Django9.8 Critical
- djangoproject django, opensuse leap +1 moreDjango Denial-of-service in strip_tags()7.5 High
- djangoproject django, djangoblog project djangoblog, opensuse leap +2 moreDjango Denial-of-service in django.utils.text.Truncator7.5 High
- freedesktop poppler, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the...7.5 High
- freetds, canonical ubuntu linux +1 moreFreeTDS through 1.1.11 has a Buffer Overflow.9.8 Critical