CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- google chromeUse after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to...5.5 Medium
- google chromeInsufficient filtering in URI schemes in Google Chrome on Windows prior to 76.0.3809.87 allowed a...8.8 High
- google chromeIncorrect security UI in MacOS services integration in Google Chrome on OS X prior to 76.0.3809...8.8 High
- google chromeInappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a...6.5 Medium
- google chromeInsufficient policy enforcement in storage in Google Chrome prior to 76.0.3809.87 allowed a...8.8 High
- google chromeInteger overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to...6.5 Medium
- google chromeInteger overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to...8.8 High
- google chromeInappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a...8.8 High
- google chromeInappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a...6.5 Medium
- google chromeUse after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to...8.8 High
- google chromeUse after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker...9.6 Critical
- google chromeOut of bounds read in Skia in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to...8.1 High
- google chromeOut of bounds memory access in JavaScript in Google Chrome prior to 74.0.3729.108 allowed a...8.8 High
- google chromeOut of bounds memory access in JavaScript in Google Chrome prior to 75.0.3770.80 allowed a remote...8.8 High
- google chromeUse after free in IndexedDB in Google Chrome prior to 73.0.3683.86 allowed a remote attacker who...6.5 Medium
- google chrome, chromium v8 +1 moreOut of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote...6.5 Medium
- google chromeOut of bounds memory access in JavaScript in Google Chrome prior to 73.0.3683.103 allowed a...8.8 High
- otrs, debian linux +1 moreAn issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8, and Community...2.7 Low
- otrs, debian linux +1 moreAn issue was discovered in Open Ticket Request System (OTRS) Community Edition 5.0.x through 5.0...6.5 Medium
- artifex ghostscript, redhat 3scale api management, enterprise linux +6 more +8 moreIt was found that the .buildfont1 procedure did not properly secure its privileged calls,...7.3 High
- 3cx3CX Phone 15 on Windows has insecure permissions on the "%PROGRAMDATA%\3CXPhone for Windows...7.8 High
- pdfresurrect project pdfresurrect, debian linux, fedoraproject fedora +2 moreAn issue was discovered in PDFResurrect before 0.18. pdf_load_pages_kids in pdf.c doesn't...7.8 High
- webkul bagistoBagisto CSRF Vulnerability8.8 High
- gcdwebserver project gcdwebserverAn issue was discovered in GCDWebServer before 3.5.3. The method moveItem in the GCDWebUploader...7.5 High
- mooltipass mini firmware** DISPUTED ** On Mooltipass Mini devices, a side channel for the row-based OLED display was...2.4 Low
- shapeshift keepkey firmware** DISPUTED ** On ShapeShift KeepKey devices, a side channel for the row-based OLED display was...2.4 Low
- ledger nano s firmware, nano x firmware +1 moreOn Ledger Nano S and Nano X devices, a side channel for the row-based OLED display was found. The...2.4 Low
- gonicus gosa, debian linux +1 moreIncorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an attacker...9.8 Critical
- mediawiki mobilefrontendIn the MobileFrontend extension 1.31 through 1.33 for MediaWiki, XSS exists within the edit...6.1 Medium
- windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +10 more +12 moreWind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of...9.8 Critical
- windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +10 more +12 moreWind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is...9.8 Critical
- windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +9 more +11 moreWind River VxWorks 6.5 through 6.9 and vx7 has Session Fixation in the TCP component. This is a...7.5 High
- atlassian jiraThe inline-create rest resource in Jira before version 7.12.3 allows authenticated remote...4.3 Medium
- atlassian jiraThe activity stream gadget in Jira before version 7.13.1 allows remote attackers to inject...5.4 Medium
- atlassian jira server and data center, jira server +1 moreThere was a server-side template injection vulnerability in Jira Server and Data Center, in the...9.8 Critical
- cloud foundry uaa release (oss), cloudfoundry user account and authentication +1 moreUAA SCIM Filter XSS4.3 Medium
- windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +9 more +11 moreWind River VxWorks 6.5 through 6.9.3 has a Buffer Overflow in the TCP component (issue 1 of 4)....9.8 Critical
- dell alienware digital delivery, digital delivery +1 moreDell/Alienware Digital Delivery versions prior to 4.0.41 contain a privilege escalation...7.8 High
- dell alienware digital delivery, digital delivery +1 moreDell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation...7.8 High
- the eclipse foundation eclipse birt, eclipse business intelligence and reporting tools +1 moreIn Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter....6.1 Medium
- windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +9 more +11 moreWind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client...5.3 Medium
- windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +9 more +11 moreWind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There...8.1 High
- windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +8 more +10 moreWind River VxWorks 6.9 and vx7 has an array index error in the IGMPv3 client component. There is...7.5 High
- netapp oncommand insightOnCommand Insight versions through 7.3.6 may disclose sensitive account information to an...6.5 Medium
- windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +9 more +11 moreWind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET...9.8 Critical
- windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +7 more +9 moreWind River VxWorks 6.9 and vx7 has a Buffer Overflow in the DHCP client component. There is an...8.8 High
- hewlett packard enterprise (hpe) hp xp7 cvae, hp xp7 device manager, xp7 replication manager +1 more +3 moreCommand View Advanced Edition (CVAE) products contain a vulnerability that could expose...6.5 Medium
- hewlett packard enterprise (hpe) hpe 3par storeserv management and core software media, hp 3par storeserv management console +1 moreA remote information disclosure vulnerability was discovered in HPE 3PAR StoreServ Management and...6.3 Medium
- hewlett packard enterprise (hpe) hpe 3par storeserv management and core software media, hp 3par storeserv management console +1 moreA remote session reuse vulnerability was discovered in HPE 3PAR StoreServ Management and Core...7.2 High
- hewlett packard enterprise (hpe) hpe 3par storeserv management and core software media, hp 3par storeserv management console +1 moreA remote authorization bypass vulnerability was discovered in HPE 3PAR StoreServ Management and...7.3 High
- Show moreLoading…