CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- cisco webex wrf player, webex business suite, webex meetings online +1 more +3 moreCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities7.8 High
- cisco ios xr software, ios xr, carrier routing system +2 moreCisco IOS XR Software Intermediate System to Intermediate System Denial of Service Vulnerability7.4 High
- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software VNC Authentication Bypass Vulnerability9.8 Critical
- eq-3 ccu3 firmwareeQ-3 Homematic CCU3 3.47.15 and prior has Improper Input Validation in function 'Call()' of ReGa...7.5 High
- yourlsAccess of Resource Using Incompatible Type ('Type Confusion') in yourls/yourls9.8 Critical
- enhancesoft osticketAn issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. The Ticket creation...5.4 Medium
- enhancesoft osticketAn issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. CSV (aka Formula)...8.8 High
- enhancesoft osticketAn issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in...6.1 Medium
- micro focus content managerRemote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The...5.4 Medium
- nextcloud lookup-serverAn SQL Injection in the Nextcloud Lookup-Server < v0.3.0 (running on https://lookup.nextcloud.com...9.8 Critical
- apache sparkSensitive data written to disk unencrypted in Spark7.5 High
- php jose project josePHP JOSE Library by Gree Inc. Uses a Broken or Risky Cryptographic Algorithm7.5 High
- diaowen dwsurveyDWSurvey through 2019-07-22 has stored XSS via the design/my-survey-design!copySurvey.action...6.1 Medium
- kuaifan kuaifancmsA issue was discovered in KuaiFanCMS 5.0. It allows eval injection by placing PHP code in the...9.8 Critical
- radare radare2, fedoraproject fedora +1 moreIn radare2 before 3.7.0, a command injection vulnerability exists in bin_symbols() in libr/core...7.8 High
- loomIncorrect authentication of application WebSocket connections in Loom Desktop for Mac up to 0.16...8.8 High
- jenkins relution enterprise appstore publisher, jenkins project relution enterprise appstore publisher plugin +1 moreMissing permission check in Jenkins Relution Enterprise Appstore Publisher Plugin4.3 Medium
- jenkins relution enterprise appstore publisher, jenkins project relution enterprise appstore publisher plugin +1 moreRelution Enterprise Appstore Publisher Jenkins Plugin contains Cross-Site Request Forgery4.3 Medium
- jenkins xl testview, jenkins project xl testview plugin +1 moreMissing permission check in Jenkins XL TestView Plugin6.5 Medium
- jenkins xl testview, jenkins project xl testview plugin +1 moreCross-site request forgery vulnerability in Jenkins XL TestView Plugin8.8 High
- jenkins eggplant, jenkins project eggplant plugin +1 moreJenkins eggplant-plugin Plugin stores credentials in plain text6.5 Medium
- jenkins vmware lab manager slaves, jenkins project vmware lab manager slaves plugin +1 moreJenkins VMware Lab Manager Slaves Plugin vulnerable to Improper Certificate Validation6.5 Medium
- jenkins codefresh integration, jenkins project codefresh integration plugin +1 moreJenkins Codefresh Integration Plugin Improper Certificate Validation vulnerability7.5 High
- jenkins simple travis pipeline runner, jenkins project simple travis pipeline runner plugin +1 moreJenkins Simple Travis Pipeline Runner Plugin script sandbox bypass vulnerability8.8 High
- google cloud messaging notification, jenkins project google cloud messaging notification plugin +1 moreJenkins Google Cloud Messaging Notification Plugin stores credentials in plain text6.5 Medium
- jenkins testlink, jenkins project testlink plugin +1 moreJenkins TestLink Plugin stores credentials in plain text5.3 Medium
- jenkins avatar, jenkins project avatar plugin +1 moreMissing permission check in Jenkins Avatar Plugin4.3 Medium
- jenkins wall display, jenkins project wall display plugin +1 moreJenkins Wall Display Plugin Cross-site Scripting vulnerability6.1 Medium
- jenkins file system scm, jenkins project file system scm plugin +1 moreArbitrary file read vulnerability in Jenkins File System SCM Plugin6.5 Medium
- jenkins pegdown formatter, jenkins project pegdown formatter plugin +1 moreJenkins PegDown Formatter Plugin has Cross-site Scripting vulnerability5.4 Medium
- jenkins build pipeline, jenkins project build pipeline plugin +1 moreJenkins Build Pipeline Plugin vulnerable to Cross-site Scripting5.4 Medium
- jenkins project gitlab authentication plugin, jenkins gitlab oauth +1 moreJenkins Gitlab Authentication Plugin Open Redirect vulnerability6.1 Medium
- jenkins project gitlab authentication plugin, jenkins gitlab oauth +1 moreJenkins Gitlab Authentication Plugin vulnerable to Session Fixation7.5 High
- jenkins mask passwords, jenkins project mask passwords plugin +1 moreInsertion of Sensitive Information into Log File in Jenkins Mask Passwords Plugin6.5 Medium
- jenkins jclouds, jenkins project jclouds plugin +1 moreJenkins JClouds Plugin missing permission check6.5 Medium
- jenkins jclouds, jenkins project jclouds plugin +1 moreJenkins JClouds Plugin cross-site request forgery vulnerability8.8 High
- jenkins configuration as code, jenkins project configuration as code plugin +1 moreInsertion of Sensitive Information into Log File in Jenkins Configuration as Code Plugin5.5 Medium
- ttpsc the schedulerThe Transition Technologies "The Scheduler" app 5.1.3 for Jira allows XXE due to a weakly...7.5 High
- valvesoftware steam client** DISPUTED ** In Valve Steam Client for Windows through 2019-08-07, HKLM\SOFTWARE\Wow6432Node...6.6 Medium
- jura e8 firmwareJura E8 devices lack Bluetooth connection security.8.1 High
- tapplock firmwareThe Bluetooth Low Energy (BLE) subsystem on Tapplock devices before 2018-06-12 relies on Key1 and...6.5 Medium
- annke sp1 firmwareANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow XSS via a crafted SSID.6.1 Medium
- neetcables airstream nas firmwareNeet AirStream NAS1.1 devices allow CSRF attacks that cause the settings binary to change the AP...6.5 Medium
- cpanelIn cPanel before 57.9999.54, /scripts/enablefileprotect exposed TTYs (SEC-117).8.8 High
- cpanelIn cPanel before 57.9999.54, /scripts/unsuspendacct exposed TTYs (SEC-116).8.8 High
- cpanelIn cPanel before 57.9999.54, /scripts/maildir_converter exposed a TTY to an unprivileged process ...8.8 High
- cpanelIn cPanel before 57.9999.54, /scripts/checkinfopages exposed a TTY to an unprivileged process ...8.8 High
- cpanelIn cPanel before 57.9999.54, /scripts/addpop and /scripts/delpop exposed TTYs (SEC-113).8.8 High
- cpanelcPanel before 57.9999.54 allows certain denial-of-service outcomes via /scripts/killpvhost (SEC...6.5 Medium
- cpanelcPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page (SEC-110).5.4 Medium
- Show moreLoading…