CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- zohocorp manageengine assetexplorerServer Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer 6.2.0 and before for...8.8 High
- zohocorp manageengine assetexplorerServer Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer version 6.2.0 for...9.1 Critical
- zohocorp manageengine assetexplorerZoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XML External Entity Injection (XXE)...8.5 High
- apache rangerCross-site scripting in Apache Ranger6.1 Medium
- honor pcmanager, huawei pcmanager\(china\), pcmanager\(oversea\) +2 moreHuawei PCManager with the versions before 9.0.1.66 (Oversea) and versions before 9.0.1.70 (China)...5.5 Medium
- honor pcmanager, huawei pcmanager\(china\), pcmanager\(oversea\) +2 moreHuawei PCManager with the versions before 9.0.1.66 (Oversea) and versions before 9.0.1.70 (China)...7.8 High
- honor pcmanager, huawei pcmanager\(china\), pcmanager\(oversea\) +2 moreHuawei PCManager with the versions before 9.0.1.66 (Oversea) and versions before 9.0.1.70 (China)...7.8 High
- huawei honor v20, honor v20 firmware +1 moreHuawei smart phones Honor V20 with the versions before 9.0.1.161(C00E161R2P2) have an information...3.3 Low
- huawei emily-l29c, emily-l29c firmware +1 moreHuawei smart phones Emily-L29C with versions of 8.1.0.132a(C432), 8.1.0.135(C782), 8.1.0.154(C10)...6.3 Medium
- tibco api exchange gateway, tibco software inc. api exchange gateway distribution for tibco silver fabric +1 moreTIBCO API Exchange Processes OAuth Incorrectly6.4 Medium
- 3cxAn issue was discovered in the 3CX Phone system (web) management console 12.5.44178.1002 through...7.5 High
- dlink 6600-ap firmware, dwl-3600ap firmware +1 moreAn issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is...5.5 Medium
- uipath orchestratorUiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log...5.5 Medium
- netgear ex7000 firmwareNETGEAR EX7000 V1.0.0.42_1.0.94 devices allow XSS via the SSID.5.2 Medium
- go-camo project go-camoA Server Side Request Forgery (SSRF) vulnerability in go-camo up to version 1.1.4 allows a remote...9.8 Critical
- 1crm on-premise1CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report...5.4 Medium
- open-schoolOpen-School 3.0, and Community Edition 2.3, allows SQL Injection via the index.php?r=students...9.8 Critical
- dlink dir-600m firmwareAn issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. wan.htm can be...9.8 Critical
- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software Cross-site Scripting Vulnerability4.8 Medium
- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software Arbitrary File Read Vulnerabilities4.4 Medium
- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software Arbitrary File Read Vulnerabilities4.4 Medium
- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software Web Portal Arbitrary File Read Vulnerability4.9 Medium
- cisco firepower threat defense software, secure firewall management center, secure firewall threat defense +2 moreCisco Firepower Threat Defense Software File Policy Bypass Vulnerability5.8 Medium
- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software Command Injection Vulnerability8.1 High
- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software Privilege Escalation Vulnerability6.7 Medium
- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software Password Recovery Vulnerability6.5 Medium
- cisco webex meetings serverCisco Webex Meetings Server Open Redirection Vulnerability4.3 Medium
- cisco email security appliance (esa), email security appliance firmware +1 moreCisco Email Security Appliance Header Injection Vulnerability5.3 Medium
- cisco spa112 2-port phone adapter, spa112 2-port phone adapter firmware +1 moreCisco SPA112 2-Port Phone Adapter Stored Cross-Site Scripting Vulnerability4.8 Medium
- cisco iot field network director, iot field network director (iot-fnd) +1 moreCisco IoT Field Network Director TLS Renegotiation Denial of Service Vulnerability5.3 Medium
- cisco hyperflex hx-series, hyperflex hx data platform +1 moreCisco HyperFlex Software Cross-Site Request Forgery Vulnerability5.4 Medium
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Persistent Cross-Site Scripting Vulnerability4.8 Medium
- cisco sd-wan solution, sd-wan firmware +1 moreCisco SD-WAN Solution Packet Filtering Bypass Vulnerability5.8 Medium
- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability6.7 Medium
- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software Web-Based Management Interface Authentication Bypass Vulnerability6.5 Medium
- backdropcms backdropBackdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 doesn't sufficiently filter output...6.1 Medium
- backdropcms backdrop coreIn Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3, some menu links within the...6.1 Medium
- backdropcms backdrop cmsBackdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 allows the upload of entire-site...9.8 Critical
- w1.fi hostapd, canonical ubuntu linux, debian linux +1 more +3 moreThe implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are...5.9 Medium
- postgresqlPostgresql, versions 11.x before 11.5, is vulnerable to a memory disclosure in cross-type...3.1 Low
- postgresqlA flaw was discovered in postgresql where arbitrary SQL statements can be executed given a...7.5 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software +1 moreCisco Adaptive Security Appliance Smart Tunnel Vulnerabilities6.7 Medium
- cisco webex wrf player, webex business suite, webex meetings online +1 more +3 moreCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities7.8 High
- cisco webex wrf player, webex business suite, webex meetings online +1 more +3 moreCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities7.8 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software +1 moreCisco Adaptive Security Appliance Software Web-Based Management Interface Privilege Escalation Vulnerability8.8 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software +1 moreCisco Adaptive Security Appliance Smart Tunnel Vulnerabilities6.7 Medium
- cisco webex wrf player, webex business suite, webex meetings online +1 more +3 moreCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities7.8 High
- cisco webex wrf player, webex business suite, webex meetings online +1 more +3 moreCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities7.8 High
- cisco ios xr software, ios xr, carrier routing system +2 moreCisco IOS XR Software Intermediate System–to–Intermediate System Denial of Service Vulnerability7.4 High
- cisco webex wrf player, webex business suite, webex meetings online +1 more +3 moreCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities7.8 High
- Show moreLoading…