CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- laquisscada scada, lcds laquis scada +1 moreA type confusion vulnerability may be exploited when LAquis SCADA 4.3.1.71 processes a specially...7.8 High
- brandy project brandyBrandy 1.20.1 has a heap-based buffer overflow in define_array in variables.c via crafted BASIC...5.5 Medium
glib2.0Ubuntuglib2.0 regressionNo score- windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +4 more +6 moreWind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4...7.1 High
- sitecore cmsMultiple cross-site scripting (XSS) vulnerabilities in Sitecore CMS 9.0.1 and earlier allow...6.1 Medium
- cloud foundry cf cli, anynines elasticsearch, logme +45 more +47 moreCF CLI writes the client id and secret to config file6.3 Medium
- dell client commercial and consumer platforms, chengming 3967 firmware, chengming 3977 firmware +239 more +241 moreSelect Dell Client Commercial and Consumer platforms contain an Improper Access Vulnerability. An...7.1 High
- pivotal software cloud foundry uaa, cloud foundry uaa release (oss), pivotal software application service +1 more +3 moreUAA clients.write vulnerability7.3 High
- beardev joomsportThe BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete...9.8 Critical
- ibm javaMultiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use...8.4 High
- ibm cloud privateIBM Cloud Private 2.1.0 , 3.1.0, 3.1.1, and 3.1.2 could allow a local privileged user to obtain...4.4 Medium
- ibm mq, websphere mq +1 moreIBM WebSphere MQ V7.1, 7.5, IBM MQ V8, IBM MQ V9.0LTS, IBM MQ V9.1 LTS, and IBM MQ V9.1 CD are...4.3 Medium
- cpanelcPanel before 60.0.25 allows arbitrary file-chown operations via reassign_post_terminate_cruft ...6.5 Medium
- cpanelcPanel before 60.0.25 allows self XSS in the tail_ea4_migration.cgi interface (SEC-172).5.4 Medium
- cpanelcPanel before 60.0.25 allows format-string injection in exception-message handling (SEC-171).8.8 High
- cpanelcPanel before 60.0.25 does not enforce feature-list restrictions when calling the multilang...3.3 Low
- cpanelcPanel before 60.0.25 allows file-create and file-chmod operations during ModSecurity Audit...8.1 High
- cpanelcPanel before 60.0.25 allows arbitrary file-overwrite operations during a Roundcube update (SEC...6.5 Medium
- cpanelcPanel before 60.0.25 allows an open redirect via /cgi-sys/FormMail-clone.cgi (SEC-162).6.1 Medium
- cpanelcPanel before 60.0.25 allows file-overwrite operations during preparation for MySQL upgrades (SEC...6.5 Medium
- cpanelcPanel before 60.0.25 allows stored XSS in the WHM Repair Mailbox Permissions interface (SEC-159).5.4 Medium
- cpanelcPanel before 62.0.4 allows resellers to use the WHM enqueue_transfer_item API for queueing non...6.5 Medium
- cpanelcPanel before 62.0.4 allows stored XSS in the WHM Account Suspension List interface (SEC-211).5.4 Medium
- cpanelcPanel before 62.0.4 does not enforce account ownership for has_mycnf_for_cpuser WHM API calls ...6.5 Medium
- cpanelIn cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address (SEC-209).6.5 Medium
- cpanelIn cPanel before 62.0.4 incorrect ACL checks could occur in xml-api for Rearrange Account actions...6.5 Medium
- cpanelIn cPanel before 62.0.4, Exim transports could execute in the context of the nobody account (SEC...6.5 Medium
- cpanelLeech Protect in cPanel before 62.0.4 does not protect certain directories (SEC-205).7.5 High
- cpanelIn cPanel before 62.0.4, Exim piped filters ran in the context of an incorrect user account when...8.8 High
- cpanelcPanel before 62.0.4 allows arbitrary file-read operations via Exim valiases (SEC-201).6.5 Medium
- cpanelcPanel before 62.0.4 allows self XSS on the webmail Password and Security page (SEC-199).5.4 Medium
- cpanelcPanel before 62.0.4 allows reflected XSS in reset-password interfaces (SEC-198).6.1 Medium
- cpanelcPanel before 62.0.4 allows self XSS on the paper_lantern password-change screen (SEC-197).5.4 Medium
- cpanelcPanel before 62.0.4 has a fixed password for the Munin MySQL test account (SEC-196).8.8 High
- cpanelcPanel before 62.0.17 allows demo accounts to execute code via an NVData_fetchinc API call (SEC...6.3 Medium
- cpanelcPanel before 62.0.17 allows demo accounts to execute code via the Htaccess::setphppreference API...6.3 Medium
- cpanelcPanel before 62.0.17 allows access to restricted resources because of a URL filtering error (SEC...4.3 Medium
- cpanelcPanel before 62.0.17 does not have a sufficient list of reserved usernames (SEC-227).4.4 Medium
- cpanelcPanel before 62.0.17 does not properly recognize domain ownership during addition of parked...2.7 Low
- cpanelcPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor...4.9 Medium
- cpanelcPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled (SEC...7.5 High
- emca energy logserverThe api/admin/logoupload Logo File upload feature in EMCA Energy Logserver 6.1.2 allows attackers...7.5 High
- octopus deploy, server +1 moreIn Octopus Deploy 2019.4.0 through 2019.6.6 and 2019.7.0 through 2019.7.7, an authenticated...4.9 Medium
- brandy project brandyBrandy 1.20.1 has a stack-based buffer overflow in fileio_openin in fileio.c via crafted BASIC...5.5 Medium
- brandy project brandyBrandy 1.20.1 has a stack-based buffer overflow in fileio_openout in fileio.c via crafted BASIC...5.5 Medium
- joomla joomla\!In Joomla! 3.9.7 and 3.9.8, inadequate filtering allows users authorised to create custom fields...8.8 High
kernelMageia,kernel-userspace-headersMageia,kmod-virtualboxMageia +1 more +3 moreUpdated kernel packages fix security vulnerabilityNo score- ipandao editor.mdCross-site Scripting in pandao6.1 Medium
- daskeyboard das q softwareDas Q before 2019-08-02 allows web sites to execute arbitrary code on client machines, as...9.8 Critical
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition XSS Vulnerability4.8 Medium
- Show moreLoading…