CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- codepeople appointment booking calendarThe appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a...9.8 Critical
- google androidIn ippSetValueTag of ipp.c in Android 8.0, 8.1 and 9, there is a possible out of bounds read due...5.5 Medium
- lenovo solution centerA vulnerability reported in Lenovo Solution Center version 03.12.003, which is no longer...7.8 High
- trendmicro ransom buster, trend micro ransom buster, trend micro security (consumer), trendmicro antivirus \+ security 2019 +3 more +5 moreA DLL hijacking vulnerability exists in the Trend Micro Security's 2019 consumer family of...7.8 High
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus \+ security 2019 +3 more +5 moreA local privilege escalation vulnerability exists in Trend Micro Security 2019 (v15.0) in which,...7.8 High
- rapid7 nexposeRapid7 Nexpose Insufficient Session Management8.7 High
- valvesoftware steam clientValve Steam Client for Windows through 2019-08-20 has weak folder permissions, leading to...7.0 High
- valvesoftware steam clientValve Steam Client for Windows through 2019-08-16 allows privilege escalation (to NT AUTHORITY...7.8 High
- bosch iot gateway software, prosyst mbs sdk +1 morePath traversal in ProSyst mBS SDK and Bosch IoT Gateway Software7.5 High
- newgensoft omniflow intelligent business process suiteNewgen OmniFlow Intelligent Business Process Suite (iBPS) 7.0 has an "improper server side...7.5 High
- bosch iot gateway software, prosyst mbs sdk +1 moreLeakage of stack traces in the backup & restore functionality of ProSyst mBS SDK and Bosch IoT Gateway Software5.3 Medium
- kbpublisherKBPublisher 6.0.2.1 has SQL Injection via the admin/index.php?module=report entry_id[0] parameter...9.8 Critical
- bosch iot gateway software, prosyst mbs sdk +1 morePath traversal in the backup & restore functionality of ProSyst mBS SDK and Bosch IoT Gateway Software9.1 Critical
- control-webpanel webpanelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.837, XSS in the domain parameter allows a...5.4 Medium
- control-webpanel webpanelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.837, CSRF in the forgot password function...8.8 High
- control-webpanel webpanelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.848, the Login process allows attackers...5.3 Medium
- centos-webpanel centos web panelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows...6.5 Medium
- centos-webpanel centos web panelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows...6.5 Medium
- zenosspyraw in Zenoss 2.5.3 allows local privilege escalation by modifying environment variables to...7.8 High
- zenossThe XML-RPC subsystem in Zenoss 2.5.3 allows XXE attacks that lead to unauthenticated information...7.5 High
- cisco ucs director, ucs director express for big data, unified computing system director +2 moreCisco UCS Director and Cisco UCS Director Express for Big Data API Authentication Bypass Vulnerability9.8 Critical
- cisco webex meetings, webex meetings for ios +1 moreCisco Webex Meetings Mobile (iOS) SSL Certificate Validation Vulnerability5.9 Medium
- cisco ucs director, ucs director express for big data, unified computing system director +1 more +3 moreCisco IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability9.8 Critical
- cisco enterprise nfv infrastructure software, enterprise network function virtualization infrastructure sofware +1 moreCisco Enterprise Network Functions Virtualization Infrastructure Software Arbitrary File Write Vulnerability6.5 Medium
- zohocorp manageengine servicedesk plus** DISPUTED ** AjaxDomainServlet in Zoho ManageEngine ServiceDesk Plus 10 allows User Enumeration...5.3 Medium
- cisco unified computing system (management software), integrated management controller supervisor, unified computing system +2 moreCisco Integrated Management Controller Substring Comparison Privilege Escalation Vulnerability8.8 High
- cisco unified computing system (management software), integrated management controller supervisor, unified computing system +2 moreCisco Integrated Management Controller Information Disclosure Vulnerability7.5 High
- cisco integrated management controller supervisor, ucs director, ucs director express for big data +1 more +3 moreCisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data SCP User Default Credentials Vulnerability9.8 Critical
- cisco integrated management controller supervisor, ucs director, ucs director express for big data +1 more +3 moreCisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Command Injection Vulnerability7.2 High
- cisco integrated management controller supervisor, ucs director, ucs director express for big data +1 more +3 moreCisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability9.8 Critical
- mantisbtMantisBT allows cross-site scripting (XSS) via crafted filename9.6 Critical
- pojo activity logThe aryo-activity-log plugin before 2.3.2 for WordPress has XSS.6.1 Medium
- pojo activity logThe aryo-activity-log plugin before 2.3.3 for WordPress has XSS.6.1 Medium
- cisco unified computing system e-series software (ucse), integrated management controller supervisor, unified computing system +2 moreCisco Integrated Management Controller CLI Command Injection Vulnerability7.0 High
- cisco unified computing system (management software), integrated management controller supervisor, unified computing system +2 moreCisco Integrated Management Controller Command Injection Vulnerability7.2 High
- cisco unified computing system e-series software (ucse), integrated management controller supervisor, unified computing system +2 moreCisco Integrated Management Controller CSR Generation Command Injection Vulnerability7.2 High
- cisco unified computing system (management software), integrated management controller supervisor, unified computing system +2 moreCisco Integrated Management Controller Unauthenticated Denial of Service Vulnerability7.5 High
- bestwebsoft linkedinThe bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues.6.1 Medium
- wp-kama democracy pollThe democracy-poll plugin before 5.4 for WordPress has CSRF via wp-admin/options-general.php?page...8.8 High
- megamenu max mega menuThe megamenu plugin before 2.4 for WordPress has XSS.6.1 Medium
- bestwebsoft pdf \& printThe pdf-print plugin before 2.0.3 for WordPress has multiple XSS issues.6.1 Medium
- cisco unified computing system e-series software (ucse), integrated management controller supervisor, unified computing system +2 moreCisco Integrated Management Controller Privilege Escalation Vulnerability6.5 Medium
- cisco unified computing system e-series software (ucse), integrated management controller supervisor, unified computing system +2 moreCisco Integrated Management Controller Command Injection Vulnerability8.8 High
- cisco unified computing system e-series software (ucse), integrated management controller supervisor, unified computing system +2 moreCisco Integrated Management Controller Command Injection Vulnerability8.8 High
- cisco unified computing system (management software), integrated management controller supervisor, unified computing system +2 moreCisco Integrated Management Controller Buffer Overflow Vulnerability7.2 High
- smokesignal project smokesignalThe smokesignal plugin before 1.2.7 for WordPress has XSS.6.1 Medium
- vanderbilt redcapREDCap before 9.3.0 allows XSS attacks against non-administrator accounts on the Data Import Tool...5.4 Medium
- brainstormforce schemaThe all-in-one-schemaorg-rich-snippets plugin before 1.5.0 for WordPress has XSS on the settings...6.1 Medium
- cformsii project cformsiiThe cforms2 plugin before 14.13.3 for WordPress has multiple XSS issues.6.1 Medium
- cformsii project cformsiiThe cforms2 plugin before 13.2 for WordPress has XSS in lib_ajax.php.6.1 Medium
- Show moreLoading…