CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- sap businessobjects business intelligence, sap se business objects business intelligence platform (cmc) +1 moreUnencrypted communication error in SAP Business Objects Business Intelligence Platform (Central...6.5 Medium
- sap se netweaver application server for java (administrator system overview), sap netweaver application server java +1 moreA remote unauthenticated attacker can abuse a web service in SAP NetWeaver Application Server for...9.8 Critical
- sap commerce cloud, sap se commerce cloud (virtualjdbc extension) +1 moreDue to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6...9.8 Critical
- sap commerce cloud, sap se commerce cloud (mediaconversion extension) +1 moreSAP Commerce Cloud (Mediaconversion Extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905,...8.8 High
- sap enable nowThe XML parser, which is being used by SAP Enable Now, before version 1902, has not been hardened...5.4 Medium
- sap enable nowThe session cookie used by SAP Enable Now, version 1902, does not have the HttpOnly flag set. If...8.8 High
- sap gatewayDuring an OData V2/V4 request in SAP Gateway, versions 750, 751, 752, 753, the HTTP Header...5.3 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (bi workspace) +1 moreWhen creating a module in SAP BusinessObjects Business Intelligence Platform (BI Workspace),...5.4 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (web intelligence) +1 moreIn some situations, when a client cancels a query in SAP BusinessObjects Business Intelligence...6.5 Medium
- sap netweaver process integration, sap se netweaver process integration (java proxy runtime) +1 moreJava Proxy Runtime of SAP NetWeaver Process Integration, versions 7.10, 7.11, 7.30, 7.31, 7.40, 7...6.1 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (cmc) +1 moreUnder certain conditions SAP BusinessObjects Business Intelligence Platform (Central Management...6.1 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (info view) +1 moreSAP BusinessObjects Business Intelligence Platform (Info View), versions 4.1, 4.2, 4.3, allows an...6.1 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (bi workspace) +1 moreUnder certain conditions, SAP BusinessObjects Business Intelligence Platform (BI Workspace),...5.3 Medium
- veronalabs wp statisticsThe wp-statistics plugin before 12.0.8 for WordPress has SQL injection.9.8 Critical
- artifex mupdfArtifex MuPDF before 1.16.0 has a heap-based buffer over-read in fz_chartorune in fitz/string.c...7.1 High
- mediatek mt6577 firmware, mt6625 firmware, mt8163 firmware +2 moreThe MediaTek Embedded Multimedia Card (eMMC) subsystem for Android on MT65xx, MT66xx, and MT8163...9.8 Critical
- libtiff, debian linux, fedoraproject fedora +1 more +3 more_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer...6.5 Medium
- gnu exosiphandle_messages in eXtl_tls.c in eXosip before 5.0.0 mishandles a negative value in a content...7.5 High
- joomla joomla\!In Joomla! before 3.9.11, inadequate checks in com_contact could allow mail submission in...5.3 Medium
- apache http serverIn Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended...6.1 Medium
- apache http server, canonical ubuntu linux, debian linux +7 more +9 moreIn Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting...6.1 Medium
- apache http server, oracle communications element manager, enterprise manager ops center +2 more +4 moreIn Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling...9.1 Critical
- tibco loglogic enterprise virtual appliance, loglogic log management intelligence, loglogic lx1025 firmware +19 more +21 moreTIBCO LogLogic Log Management Intelligence Multiple Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) Vulnerabilities8.8 High
- golang go, debian linux +1 morenet/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading...9.8 Critical
- twentytwenty.storage project twentytwenty.storageAn issue was discovered in 20|20 Storage 2.11.0. A Path Traversal vulnerability in the...9.1 Critical
- huawei cloudlink phone 7900, cloudlink phone 7900 firmware +1 moreThe SIP TLS module of Huawei CloudLink Phone 7900 with V600R019C10 has a TLS certificate...6.5 Medium
- huawei hima-al00b, hima-al00b firmware +1 moreHuawei mobile phones Hima-AL00Bhave with Versions earlier than HMA-AL00C00B175 have a signature...7.8 High
- huawei pcmanager, pc manager +1 morePCManager 9.1.3.1 has an improper authentication vulnerability. The certain driver interface of...7.8 High
- estsoft altools, altools update service +1 moreALTOOLS update service 18.1 and earlier versions contains a local privilege escalation...7.8 High
- estsoft alzipAlzip 10.83 and earlier version contains a stack-based buffer overflow vulnerability, caused by...7.8 High
- eq-3 homematic ccu2 firmware, homematic ccu3 firmware +1 moreeQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn before 2.3.0 installed allow administrative...8.1 High
- eq-3 homematic ccu2 firmware, homematic ccu3 firmware +1 moreeQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn installed allow Remote Code Execution by...9.8 Critical
- eq-3 homematic ccu2 firmware, homematic ccu3 firmware +1 moreeQ-3 Homematic CCU2 and CCU3 with the XML-API through 1.2.0 AddOn installed allow Remote Code...8.1 High
- crosscert unisignUniSign 2.0.4.0 and earlier version contains a stack-based buffer overflow vulnerability which...8.8 High
- floragunn search guardSearch Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled,...6.5 Medium
- floragunn search guardSearch Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled,...6.5 Medium
- siemens simatic drive controller family, simatic et 200sp open controller cpu 1515sp pc (incl. siplus variants), simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +15 more +17 moreA vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC (All...7.5 High
- siemens scalance x-200 switch family (incl. siplus net variants), scalance x-200irt switch family (incl. siplus net variants), scalance x204rna (hsr) +7 more +9 moreA vulnerability has been identified in SCALANCE X-200 (All versions), SCALANCE X-200IRT (All...8.6 High
- siemens simatic cp 1626, simatic et 200sp open controller cpu 1515sp pc (incl. siplus variants), simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +32 more +34 moreA vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC (All...5.9 Medium
- siemens scalance sc-600, scalance sc-600 firmware +1 moreA vulnerability has been identified in SCALANCE SC-600 (V2.0). An authenticated attacker with...6.6 Medium
- siemens scalance sc-600, scalance xb-200, scalance xc-200 +8 more +10 moreA vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE...6.5 Medium
- google adsense project adsenseThe adsense-plugin (aka Google AdSense) plugin before 1.44 for WordPress has multiple XSS issues.6.1 Medium
- backup-guard backup guardThe Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues.6.1 Medium
- tipsandtricks-hq all in one wp security \& firewallThe all-in-one-wp-security-and-firewall plugin before 4.2.0 for WordPress has multiple XSS issues.6.1 Medium
- tipsandtricks-hq all in one wp security \& firewallThe all-in-one-wp-security-and-firewall plugin before 4.0.6 for WordPress has XSS in settings pages.6.1 Medium
- istioIstio ReDoS Vulnerability7.5 High
- tipsandtricks-hq all in one wp security \& firewallThe all-in-one-wp-security-and-firewall plugin before 4.0.5 for WordPress has XSS in the...6.1 Medium
- tipsandtricks-hq all in one wp security \& firewallThe all-in-one-wp-security-and-firewall plugin before 3.9.8 for WordPress has XSS in the unlock...6.1 Medium
- tipsandtricks-hq all in one wp security \& firewallThe all-in-one-wp-security-and-firewall plugin before 3.9.5 for WordPress has XSS in...6.1 Medium
- mediaburst contact form 7 - clockwork smsThe contact-form-7-sms-addon plugin before 2.4.0 for WordPress has XSS.6.1 Medium
- Show moreLoading…