CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- gogsInsecure Permissions in Gogs9.8 Critical
- adobe systems incorporated magento 2, magento +1 moreMagento Insufficient authorization check when adding users to company accounts6.5 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition Unsafe File Upload8.8 High
- adobe systems incorporated magento 2, magento +1 moreMagento Stored Cross-site Scripting vulnerability in the admin panel4.8 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento Cross-site Scripting in the admin panel4.8 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition XSS Vulnerability4.8 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition XSS Vulnerability4.8 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition CSRF Vulnerability8.8 High
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition IDOR Vulnerability5.3 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento Stored cross-site scripting in admin panel4.8 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition XSS Vulnerability4.8 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition Unsafe File Upload7.5 High
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition Weak PRNG7.5 High
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition Path Traversal Vulnerability7.5 High
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition Cryptographic Flaw7.5 High
- adobe systems incorporated magento 2, magento +1 moreMagento Cross-Site Request Forgery (CSRF)4.3 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Cryptographic Flaw5.3 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition IDOR Vulnerability7.5 High
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition Path Disclosure5.3 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition CSRF vulnerability6.5 Medium
- magentoMagento 2 Community Edition Session Fixation Check7.5 High
- tcl alcatel linkzone firmwareThe web interface of Alcatel LINKZONE MW40-V-V1.0 MW40_LU_02.00_02 devices is vulnerable to an...9.8 Critical
- dlink dva-5592 firmwareThe web interface of the D-Link DVA-5592 20180823 is vulnerable to an authentication bypass that...7.5 High
- dlink dva-5592 firmwareThe web interface of the D-Link DVA-5592 20180823 is vulnerable to XSS because HTML form...6.1 Medium
- gnucobol project gnucobolGnuCOBOL 2.2 has a stack-based buffer overflow in cb_encode_program_id in cobc/typeck.c via...7.8 High
- apache tikaAllocation of Resources Without Limits or Throttling in Apache Tika8.8 High
- apache tikaAllocation of Resources Without Limits or Throttling in Apache Tika7.8 High
- apache tikaAllocation of Resources Without Limits or Throttling in Apache Tika6.5 Medium
- cpanelcPanel before 62.0.17 allows code execution in the context of the root account via a long...7.8 High
- cpanelcPanel before 62.0.17 allows does not preserve security policy questions across an account rename...4.3 Medium
- cpanelcPanel before 62.0.17 allows arbitrary code execution during automatic SSL installation (SEC-221).7.8 High
- cpanelcPanel before 62.0.17 allows arbitrary code execution during account modification (SEC-220).7.8 High
- cpanelcPanel before 62.0.17 allows file overwrite when renaming an account (SEC-219).3.3 Low
- cpanelcPanel before 62.0.17 allows arbitrary file-read operations via WHM /styled/ URLs (SEC-218).4.4 Medium
- cpanelcPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface (SEC-217).6.1 Medium
- cpanelIn cPanel before 62.0.17, addon domain conversion did not require a package for resellers (SEC-208).2.7 Low
- cpanelcPanel before 62.0.24 allows stored XSS in the WHM cPAddons install interface (SEC-262).5.4 Medium
- cpanelcPanel before 64.0.21 does not preserve supplemental groups across account renames (SEC-260).4.9 Medium
- cpanelcPanel before 64.0.21 allows code execution via Rails configuration files (SEC-259).6.7 Medium
- cpanelcPanel before 64.0.21 allows attackers to read a user's crontab file during a short time interval...5.3 Medium
- cpanelcPanel before 64.0.21 allows certain file-chmod operations via /scripts...4.5 Medium
- cpanelcPanel before 64.0.21 allows certain file-rename operations in the context of the root account...5.5 Medium
- cpanelcPanel before 64.0.21 allows certain file-read operations via a Serverinfo_manpage API call (SEC...5.3 Medium
- cpanelcPanel before 64.0.21 allows demo accounts to execute code via the ClamScanner_getsocket API (SEC...6.3 Medium
- cpanelcPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the...6.3 Medium
- cpanelcPanel before 64.0.21 does not enforce demo restrictions for SSL API calls (SEC-249).4.3 Medium
- cpanelcPanel before 64.0.21 allows demo accounts to execute SSH API commands (SEC-248).5.3 Medium
- cpanelcPanel before 64.0.21 allows demo and suspended accounts to use SSH port forwarding (SEC-247).5.8 Medium
- cpanelcPanel before 64.0.21 allows demo accounts to execute Cpanel::SPFUI API commands (SEC-246).5.3 Medium
- cpanelcPanel before 64.0.21 allows demo accounts to redirect web traffic (SEC-245).5.0 Medium
- Show moreLoading…