CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- clickhouseClickHouse MySQL client before versions 1.1.54390 had "LOAD DATA LOCAL INFILE" functionality...7.5 High
- clickhouseIn ClickHouse before 1.1.54388, "remote" table function allowed arbitrary symbols in "user", ...8.8 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported...6.2 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....4.9 Medium
- clickhouseIncorrect configuration in deb package in ClickHouse before 1.1.54131 could lead to unauthorized...9.8 Critical
- linux kernel, opensource kernel:, redhat enterprise linux +2 moreA vulnerability was found in Linux kernel's, versions up to 3.10, implementation of overlayfs. An...5.5 Medium
- clippercmsCMS Clipper 1.3.3 has XSS in the Security tab search, User Groups, Resource Groups, and User...5.4 Medium
- arista cloudvision portalArista CloudVision Portal through 2018.1.1 has Incorrect Permissions.6.5 Medium
- arista eosArista EOS through 4.21.0F allows a crash because 802.1x authentication is mishandled.6.5 Medium
- prospecta master data onlineProspecta Master Data Online (MDO) 2.0 has Stored XSS.5.4 Medium
- flif, jasper project jasper +1 moreThe read_chunk function in flif-dec.cpp in Free Lossless Image Format (FLIF) 0.3 allows remote...5.5 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreDue to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated...7.5 High
- codesys development system, raspberry pi, control for beaglebone sl +9 more +11 moreAn issue was discovered in 3S-Smart CODESYS V3 products. The application may utilize non-TLS...8.8 High
- tortoisesvnAn issue was discovered in in TortoiseSVN 1.12.1. The Tsvncmd: URI handler allows a customised...8.8 High
- modx evolution cms** DISPUTED ** Evolution CMS 2.0.x allows XSS via a description and new category location in a...5.4 Medium
- codepeople cp contact form with paypalThe "CP Contact Form with PayPal" plugin before 1.2.98 for WordPress has XSS in CSS edition.6.1 Medium
- rankmath seoThe Rank Math SEO plugin 1.0.27 for WordPress allows non-admin users to reset the settings via...6.5 Medium
- tribulant newsletterswp-admin/admin-ajax.php?action=newsletters_exportmultiple in the Tribulant Newsletters plugin...8.8 High
- kunalnagar custom 404 proThe Custom 404 Pro plugin 3.2.8 for WordPress has XSS via the wp-admin/admin.php?page=c4p-main...6.1 Medium
- givewpA SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for...9.8 Critical
- limbcode limb-galleryThe limb-gallery (aka Limb Gallery) plugin 1.4.0 for WordPress has XSS via the wp-admin/admin...6.1 Medium
- toggle-the-title project toggle-the-titleThe toggle-the-title (aka Toggle The Title) plugin 1.4 for WordPress has XSS via the wp-admin...4.8 Medium
- foliovision fv flowplayer video playerThe FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows guests to obtain the...5.3 Medium
- zte zxhn f670, zxhn f670 firmware +1 moreAll versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting...5.7 Medium
- zte zxhn f670, zxhn f670 firmware +1 moreAll versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection...8.1 High
- leaftecnologia leaf adminThe profile photo upload feature in Leaf Admin 61.9.0212.10 f allows Unrestricted Upload of a...8.8 High
- opencartOpenCart 3.x, when the attacker has login access to the admin panel, allows stored XSS within the...4.8 Medium
- document foundation libreofficeInsufficient URL decoding flaw in categorizing macro location7.8 High
- document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 moreInsufficient URL encoding flaw in allowed script location check7.8 High
- document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 moreLibreLogo global-event script execution9.8 Critical
- document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 moreInsufficient url validation allowing LibreLogo script execution9.8 Critical
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in drivers/scsi/qedi/qedi_dbg.c in the Linux kernel before 5.1.12. In the...6.7 Medium
- stb vorbis project vorbis, debian linux +1 moreA reachable assertion in the lookup1_values function in stb_vorbis through 2019-03-04 allows an...5.5 Medium
- stb vorbis project vorbis, debian linux +1 moreAn out-of-bounds read of a global buffer in the draw_line function in stb_vorbis through 2019-03...7.1 High
- stb vorbis project vorbis, debian linux +1 moreA stack buffer overflow in the compute_codewords function in stb_vorbis through 2019-03-04 allows...7.8 High
- stb vorbis project vorbis, debian linux +1 moreUse of uninitialized stack variables in the start_decoder function in stb_vorbis through 2019-03...7.1 High
- stb vorbis project vorbis, debian linux +1 moreA NULL pointer dereference in the get_window function in stb_vorbis through 2019-03-04 allows an...5.5 Medium
- stb vorbis project vorbis, debian linux +1 moreDivision by zero in the predict_point function in stb_vorbis through 2019-03-04 allows an...5.5 Medium
- stb vorbis project vorbis, debian linux +1 moreA heap buffer overflow in the start_decoder function in stb_vorbis through 2019-03-04 allows an...7.8 High
- apache http server, debian linux +1 moreHTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource",...7.5 High
- dolibarr erp\/crmDolibarr Cross-Site Request Forgery (CSRF)8.0 High
- webstudio ultimate loan managerXSS exists in WEB STUDIO Ultimate Loan Manager 2.0 by adding a branch under the Branches button...6.1 Medium
- microsoft active directory authentication library, adal.net, nuget +1 more +3 moreAzure Active Directory Authentication Library Elevation of Privilege Vulnerability8.8 High
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0 +1 moreDynamics On-Premise Elevation of Privilege Vulnerability8.8 High
- microsoft windows 7, windows 7 service pack 1, windows server 2008 service pack 2 +6 more +8 moreWindows Kernel Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1803, windows 10 version 1809, windows 10 version 1903 for 32-bit systems +8 more +10 moreWindows Kernel Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1803, windows 10 version 1809, windows 10 version 1903 for 32-bit systems +10 more +12 moreRemote Desktop Services Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1803, windows 10 version 1809, windows 10 version 1903 for 32-bit systems +10 more +12 moreRemote Desktop Protocol Server Information Disclosure Vulnerability7.5 High
- Show moreLoading…