CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- trend micro password manager, trend micro, inc. micro password manager +1 moreA DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited,...7.8 High
- trend micro password manager, trend micro, inc. micro password manager +1 moreA DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited,...7.8 High
- yofla 360 product rotationThe 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS.6.1 Medium
- oldstreetsolutions live input macrosThe Live:Text Box macro in the Old Street Live Input Macros app before 2.11 for Confluence has...6.1 Medium
- youphptubeplugin/Audit/Objects/AuditTable.php in YouPHPTube through 7.2 allows SQL Injection.5.3 Medium
- linux kernelAn issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference...4.6 Medium
- open-xchange appsuiteOX App Suite 7.10.1 and earlier has Insecure Permissions.3.3 Low
- open-xchange appsuiteOX App Suite 7.10.0 to 7.10.2 allows XSS.5.4 Medium
- open-xchange appsuiteOX App Suite 7.10.1 allows Content Spoofing.8.1 High
- fatfreecrm fat free crmCross-site scripting in fat_free_crm6.1 Medium
- sailpoint desktop password resetAn unauthenticated privilege escalation exists in SailPoint Desktop Password Reset 7.2. A user...7.0 High
- getflightpath flightpathFlightPath 4.8.3 has XSS in the Content, Edit urgent message, and Users sections of the Admin...6.1 Medium
- roundcube webmail, fedoraproject fedora +1 moreRoundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks.7.4 High
- videolan vlc media player, debian linux +1 moreA vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote...7.8 High
- videolan vlc media player, debian linux +1 moreThe mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media...7.8 High
- videolan vlc media player, debian linux +1 moreThe Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.7.8 High
- videolan vlc media player, debian linux +1 moreA heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media...7.8 High
- nltkNLTK Vulnerable To Path Traversal7.5 High
- videolan vlc media player, debian linux +1 moreA divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media...7.8 High
- videolan vlc media player, debian linux +1 moreIn VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function...5.5 Medium
- videolan vlc media player, debian linux +1 moreThe Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free.7.8 High
- videolan vlc media player, debian linux +1 moreA divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player...7.8 High
- videolan vlc media player, debian linux +1 moreA heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media...7.8 High
- videolan vlc media player, debian linux +1 moreThe xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does...7.8 High
- crayon syntax highlighter project syntax highlighterThe crayon-syntax-highlighter plugin before 2.8.4 for WordPress has multiple XSS issues via AJAX...6.1 Medium
- live555 streaming mediaLive555 before 2019.08.16 has a Use-After-Free because GenericMediaServer:...9.8 Critical
- thedaylightstudio fuel cmsFUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin console. This...8.8 High
- thedaylightstudio fuel cmsFUEL CMS 1.4.4 has XSS in the Create Blocks section of the Admin console. This could lead to...5.4 Medium
- envoyproxy envoyIn Envoy through 1.11.1, users may configure a route to match incoming path headers via the...7.5 High
- rest-client project rest-clientrest-client Gem Contains Malicious Code9.8 Critical
- linux kernel, netapp active iq unified manager, data availability services +4 more +6 moreAn issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a...4.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference...4.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference...4.6 Medium
- linux kernel, netapp active iq unified manager, data availability services +4 more +6 moreAn issue was discovered in the Linux kernel before 5.2.8. There is a NULL pointer dereference...4.6 Medium
- linux kernel, canonical ubuntu linux, netapp active iq unified manager +4 more +6 moreAn issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference...4.6 Medium
- intel raid web console 2Authentication bypass in the web console for Intel(R) Raid Web Console 2 all versions may allow...7.6 High
- intel compute card firmware, compute stick firmware, nuc kit firmware +2 moreInsufficient session validation in system firmware for Intel(R) NUC may allow a privileged user...6.7 Medium
- intel authenticateImproper permissions in the software installer for Intel(R) Authenticate before 3.8 may allow an...6.7 Medium
- intel driver \& support assistantImproper file verification in Intel? Driver & Support Assistant before 19.7.30.2 may allow an...7.8 High
- intel driver \& support assistantImproper file verification in Intel? Driver & Support Assistant before 19.7.30.2 may allow an...7.8 High
- intel remote displays sdkImproper permissions in the installer for Intel(R) Remote Displays SDK before version 2.0.1 R2...7.8 High
- intel processor identification utilityInsufficient access control in a hardware abstraction driver for Intel(R) Processor...7.8 High
- intel computing improvement programInsufficient access control in hardware abstraction in SEMA driver for Intel(R) Computing...7.8 High
- iomega and lenovoemc nas products, lenovo home media network hard drive firmware, ix12-300r firmware +4 more +6 moreAn information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure...5.3 Medium
- lenovo bios, 20a7 firmware, 20a8 firmware +146 more +148 moreA vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow...6.4 Medium
- lenovo paperdisplay hotkey service, yoga 700-11isk firmware, yoga 700-14isk firmware +2 moreA DLL search path vulnerability was reported in PaperDisplay Hotkey Service version 1.2.0.8 that...7.3 High
- ibm legacy system x imm (imm v1) firmware, lenovo bladecenter hs22 firmware, bladecenter hs22v firmware +13 more +15 moreA stored cross-site scripting (XSS) vulnerability exists in various firmware versions of the...9.6 Critical
- pivotal software application service, pivotal application service (pas) +1 moreApps Manager sends tokens to Spring apps via HTTP5.4 Medium
- rapid7 insightappsecRapid7 InsightAppSec Local Privilege Escalation7.8 High
dkgpgopenSUSE,libTMCGopenSUSE +1 moreRecommended update for dkgpg, libTMCGNo score- Show moreLoading…