CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1703 +36 more +38 moreWindows Kernel Information Disclosure Vulnerability5.6 Medium
- schben adiveInternal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or...8.8 High
- teampassTeamPass Cross-site Scripting (XSS)5.4 Medium
- open-schoolOpen-School 3.0, and Community Edition 2.3, allows XSS via the osv/index.php?r=students/guardians...6.1 Medium
- musl-libc muslmusl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the...9.8 Critical
- open build service build service, opensuse open build service +1 moreMissing TLS certificate validation for HTTPS connections in osc7.4 High
- openstack nova, redhat openstack, canonical ubuntu linux +1 more +3 moreOpenStack Nova Server Resource Faults Leak External Exception Details6.5 Medium
- schben adiveInternal/Views/config.php in Schben Adive 2.0.7 allows admin/config CSRF to change a user password.8.8 High
- sygnoos popup builderA SQL injection vulnerability exists in the Sygnoos Popup Builder plugin before 3.45 for...9.8 Critical
- cpanelcPanel before 58.0.4 allows WHM "Purchase and Install an SSL Certificate" page visitors to list...4.3 Medium
- cpanelcPanel before 58.0.4 initially uses weak permissions for Apache HTTP Server log files (SEC-130).3.3 Low
- cpanelcPanel before 59.9999.145 allows stored XSS in the WHM tail_upcp2.cgi interface (SEC-156).6.1 Medium
- cpanelcPanel before 59.9999.145 allows arbitrary file-read operations because of a multipart form...6.5 Medium
- cpanelcPanel before 59.9999.145 allows arbitrary code execution due to an incorrect #! in Mail::SPF...8.8 High
- cpanelcPanel before 59.9999.145 allows code execution in the context of other accounts via mailman list...8.8 High
- cpanelcPanel before 60.0.15 does not ensure that system accounts lack a valid password, so that logins...5.3 Medium
- cpanelcPanel before 60.0.25 does not use TLS for HTTP POSTs to listinput.cpanel.net (SEC-192).7.5 High
- cpanelcPanel before 60.0.25 allows code execution via the cpsrvd 403 error response handler (SEC-191).8.8 High
- cpanelcPanel before 60.0.25 allows arbitrary code execution via Maketext in PostgreSQL adminbin (SEC-188).8.8 High
- cpanelThe Host Access Control feature in cPanel before 60.0.25 mishandles actionless host.deny entries ...8.1 High
- cpanelcPanel before 60.0.25 allows members of the nobody group to read Apache HTTP Server SSL keys (SEC...6.5 Medium
- cpanelcPanel before 60.0.25 allows attackers to discover file contents during file copy operations (SEC...6.5 Medium
- cpanelcPanel before 60.0.25 allows self XSS in the alias upload interface (SEC-184).5.4 Medium
- cpanelcPanel before 60.0.25 allows self stored XSS in SSL_listkeys (SEC-182).5.4 Medium
- cpanelcPanel before 60.0.25 allows self stored XSS in postgres API1 listdbs (SEC-181).5.4 Medium
- cpanelcPanel before 60.0.25 allows self XSS in the UI_confirm API (SEC-180).5.4 Medium
- cpanelcPanel before 60.0.25 allows stored XSS in the ftp_sessions API (SEC-180).5.4 Medium
- cpanelcPanel before 60.0.25 allows stored XSS in api1_listautoresponders (SEC-179).5.4 Medium
- cpanelcPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscover_host (SEC-177).5.4 Medium
- cpanelcPanel before 60.0.25 allows self stored XSS in the listftpstable API (SEC-178).5.4 Medium
- cpanelcPanel before 60.0.25 allows stored XSS during the homedir removal phase of WHM Account...5.4 Medium
- adplug project adplug, fedoraproject fedora +1 moreAdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in mkj.cpp.8.8 High
- adplug project adplug, fedoraproject fedora +1 moreAdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load() in dtm.cpp.8.8 High
- adplug project adplug, fedoraproject fedora +1 moreAdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::__bmf_convert_stream() in bmf.cpp.8.8 High
glib2.0Ubuntuglib2.0 regressionNo score- eq-3 ccu2 firmware, ccu3 firmware +1 moreeQ-3 Homematic CCU2 2.47.15 and prior and CCU3 3.47.15 and prior use session IDs for...7.5 High
- enigmail, fedoraproject fedora +1 moreIn Enigmail below 2.1, an attacker in possession of PGP encrypted emails can wrap them as sub...6.5 Medium
- firefly-iii firefly iiiFirefly III 4.7.17.4 is vulnerable to multiple stored XSS issues due to the lack of filtration of...6.1 Medium
- firefly-iii firefly iiiFirefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied...5.4 Medium
- firefly-iii firefly iiiFirefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied...5.4 Medium
- firefly-iii firefly iiiFirefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied...5.4 Medium
- firefly-iii firefly iiiImproper Input Validation in Firefly III3.3 Low
- firefly-iii firefly iiiFirefly III 4.7.17.5 is vulnerable to stored XSS due to the lack of filtration of user-supplied...5.4 Medium
- espocrmAn issue was discovered in EspoCRM before 5.6.9. Stored XSS was executed when a attacker sends an...5.4 Medium
- espocrmAn issue was discovered in EspoCRM before 5.6.9. Stored XSS in the body of an Article was...5.4 Medium
- espocrmAn issue was discovered in EspoCRM before 5.6.9. Stored XSS was executed on the Preference page...5.4 Medium
- espocrmAn issue was discovered in EspoCRM before 5.6.9. Stored XSS was executed when a victim clicks on...5.4 Medium
- espocrmAn issue was discovered in EspoCRM before 5.6.9. Stored XSS was executed inside the title and...5.4 Medium
- netapp data ontap operating in 7-mode, data ontap +1 moreSMB in Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 has weak cryptography which when...9.1 Critical
- laquisscada scada, lcds laquis scada +1 moreProcessing a specially crafted project file in LAquis SCADA 4.3.1.71 may trigger an out-of-bounds...3.3 Low
- Show moreLoading…