CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- kbrw sweet xmlInline DTD allows XML bomb attack7.5 High
- schine.games mw-oauth2clientIn the OAuth2 Client extension before 0.4 for MediaWiki, a CSRF vulnerability exists due to the...8.8 High
- linux kernelAn issue was discovered in drivers/net/ethernet/arc/emac_main.c in the Linux kernel before 4.5. A...7.0 High
- linux kernelAn issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There...5.5 Medium
- linux kernelAn issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There...5.5 Medium
- linux kernelAn issue was discovered in drivers/iio/dac/ad5755.c in the Linux kernel before 4.8.6. There is an...7.8 High
- linux kernel, opensuse leap +1 moreAn issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There...6.7 Medium
- linux kernelAn issue was discovered in net/rds/af_rds.c in the Linux kernel before 4.11. There is an out of...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference...4.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel before 5.2.1. There is a use-after-free caused by a...4.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreAn issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference...4.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a...4.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel before 5.1.8. There is a double-free caused by a...4.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a...4.6 Medium
- adplug project adplug, fedoraproject fedora +1 moreDouble Free in Adplug9.8 Critical
- networkgenomics mitogenUndirectional routing wasn't respected in some cases in Mitogen9.8 Critical
- imagemagickThe XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16...6.5 Medium
- imagemagickcoders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service ...8.8 High
- imagemagick, opensuse leap +1 moreWriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of...6.5 Medium
- djvulibre project djvulibre, canonical ubuntu linux, debian linux +2 more +4 moreIn DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial...5.5 Medium
- djvulibre project djvulibre, canonical ubuntu linux, debian linux +2 more +4 moreIn DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service...5.5 Medium
- djvulibre project djvulibre, canonical ubuntu linux, debian linux +2 more +4 moreIn DjVuLibre 3.5.27, the sorting functionality (aka GArrayTemplate<TYPE>::sort) allows attackers...5.5 Medium
- djvulibre project djvulibre, canonical ubuntu linux, debian linux +2 more +4 moreDjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an...5.5 Medium
- gopro gpmf-parserGoPro GPMF-parser 1.2.2 has a heap-based buffer over-read (4 bytes) in GPMF_Next in GPMF_parser.c.6.5 Medium
- gopro gpmf-parserGoPro GPMF-parser 1.2.2 has an out-of-bounds read and SEGV in GPMF_Next in GPMF_parser.c.6.5 Medium
- gopro gpmf-parserGoPro GPMF-parser 1.2.2 has an out-of-bounds write in OpenMP4Source in demo/GPMF_mp4reader.c.6.5 Medium
- humanica humatrix 7The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated...9.8 Critical
- humanica humatrix 7The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated...5.3 Medium
- eprosima fast-rtpsThe Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with...7.5 High
- eprosima fast-rtpsThe Access Control plugin in eProsima Fast RTPS through 1.9.0 does not check partition...7.5 High
- omg dds securityThe handshake protocol in Object Management Group (OMG) DDS Security 1.1 sends cleartext...7.5 High
- linux kernelAn issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18. A use after free...7.8 High
- linux kernelAn issue was discovered in fs/gfs2/rgrp.c in the Linux kernel before 4.8. A use-after-free is...7.8 High
- riot-os riotRIOT through 2019.07 contains a memory leak in the TCP implementation (gnrc_tcp), allowing an...7.5 High
- extenua silvershieldextenua SilverSHielD 6.x fails to secure its ProgramData folder, leading to a Local Privilege...7.8 High
- vanderbilt redcapREDCap before 9.3.0 allows time-based SQL injection in the edit calendar event via the cal_id...7.5 High
- giflib project giflib, canonical ubuntu linux, debian linux +2 moreIn GIFLIB before 2019-02-16, a malformed GIF file triggers a divide-by-zero exception in the...6.5 Medium
- zabbix, debian linux +1 moreZabbix through 4.4.0alpha1 allows User Enumeration. With login requests, it is possible to...5.3 Medium
- xakuro xo securityThe xo-security plugin before 1.5.3 for WordPress has XSS.6.1 Medium
- bestwebsoft zendesk help centerThe zendesk-help-center plugin before 1.0.5 for WordPress has multiple XSS issues.6.1 Medium
- churchadminplugin church adminThe church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible...8.8 High
- codeermeneer companion auto updateThe companion-auto-update plugin before 3.2.1 for WordPress has CSRF.8.8 High
- codeermeneer companion auto updateThe companion-auto-update plugin before 3.2.1 for WordPress has local file inclusion.9.8 Critical
- codeermeneer companion sitemap generatorThe companion-sitemap-generator plugin before 3.7.0 for WordPress has CSRF.8.8 High
- erident custom login and dashboard project custom login and dashboardThe erident-custom-login-and-dashboard plugin before 3.5 for WordPress has CSRF.8.8 High
- ncrafts formcraftThe formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF.8.8 High
- invite anyone project anyoneThe invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based...9.8 Critical
- invite anyone project anyoneThe invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF.8.8 High
- invite anyone project anyoneThe invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted...7.5 High
- jayj quicktag project quicktagThe jayj-quicktag plugin before 1.3.2 for WordPress has CSRF.8.8 High
- Show moreLoading…