CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- webassembly binaryenAn issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can...6.5 Medium
- bitrock installbuilderWindows binaries generated with InstallBuilder versions earlier than 19.7.0 are vulnerable to...7.8 High
- zephyr shell, zephyrproject zephyr +1 moreThe shell DNS command can cause unpredictable results due to misuse of stack variables.7.8 High
- zephyr shell, zephyrproject zephyr +1 moreThe shell implementation does not protect against buffer overruns resulting in unpredictable behavior.7.8 High
- kubernetes, redhat openshift container platform +1 moreKubernetes client-go logs authorization headers at debug verbosity levels4.7 Medium
- libmirage project libmiragelibMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.6.5 Medium
- kubernetes, redhat openshift container platform +1 morekubectl cp allows symlink directory traversal4.8 Medium
- kubernetesKubernetes kubelet exposes /debug/pprof info on healthz port6.5 Medium
- kubernetes, redhat openshift container platform +1 moreKubernetes kube-apiserver allows access to custom resources via wrong scope5.0 Medium
- kuberneteskubectl cp allows symlink directory traversal6.4 Medium
- kuberneteskubelet-started container uid changes to root after first restart or if image is already pulled to the node4.9 Medium
- asus hg100 firmwareHG100 contains an Uncontrolled Resource Consumption vulnerability7.4 High
- androvideo advan vd-1 firmware, vd 1 firmware, geovision gv-vd8700 firmware +1 more +3 moreAdvan VD-1 has a reflected XSS vulnerability in page cgibin/ssi.cgi6.1 Medium
- androvideo advan vd-1 firmware, vd 1 firmware +1 moreAdvan VD-1 has a vulnerability that allows remote arbitrary APK installation7.5 High
- androvideo advan vd-1 firmware, vd 1 firmware +1 moreAdvan VD-1 allows a remote user to enable Android Debug Bridge without any authentication9.8 Critical
- androvideo advan vd-1 firmware, vd 1 firmware, geovision gv-vd8700 firmware +1 more +3 moreA vulnerability of remote credential disclosure was discovered in Advan VD-19.8 Critical
- asus smarthome, smarthome android app, smarthome ios app +2 moreSmartHome application has a broken access control vulnerability in its Web API Server10.0 Critical
- asus hg100 firmwareHG100 has a broken access control vulnerability in its Web API Server10.0 Critical
- androvideo advan vd-1 firmware, vd 1 firmware, geovision gv-vd8700 firmware +1 more +3 moreAdvan VD-1 allows users to download arbitrary files7.5 High
- apache commons compress, fedoraproject fedora, oracle banking payments +16 more +18 moreDenial of Service in Apache Commons Compress7.5 High
- nmapnse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when...7.5 High
- lenovo 100e 2nd gen firmware, 300e 2nd gen firmware, 330-14ikbr firmware +105 more +107 moreThere is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user...6.5 Medium
- lexmark 6500e firmware, c734 firmware, c736 firmware +68 more +70 moreVarious Lexmark printers contain a denial of service vulnerability in the SNMP service that can...7.5 High
- lexmark 6500e firmware, c734 firmware, c736 firmware +68 more +70 moreVarious Lexmark products have a Buffer Overflow (issue 3 of 3).9.8 Critical
- lexmark 6500e firmware, c734 firmware, c736 firmware +68 more +70 moreVarious Lexmark products have a Buffer Overflow (issue 2 of 3).9.8 Critical
- lexmark 6500e firmware, c734 firmware, c736 firmware +68 more +70 moreVarious Lexmark products have an Integer Overflow.9.8 Critical
- lexmark cs31x firmware, cs41x firmware, cx310 firmware +22 more +24 moreVarious Lexmark products have CSRF.6.5 Medium
- lexmark 6500e firmware, c734 firmware, c736 firmware +68 more +70 moreThe legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.5.3 Medium
- openstack os-vifOpenStack os-vif Ageing time of 0 disables linuxbridge MAC learning9.1 Critical
- docker desktop community edition, docker, apache geode +2 moreDocker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing...7.8 High
- suricata-ids suricataAn issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network...7.5 High
- suricata-ids suricataAn issue was discovered in Suricata 4.1.3. The function ftp_pasv_response lacks a check for the...7.5 High
- suricata-ids suricataAn issue was discovered in Suricata 4.1.3. The function process_reply_record_v3 lacks a check for...7.5 High
- suricata-ids suricataAn issue was discovered in Suricata 4.1.3. If the network packet does not have the right length,...7.5 High
- suricata-ids suricataAn issue was discovered in Suricata 4.1.3. If the function filetracker_newchunk encounters an...7.5 High
- comodo antivirusA use-after-free flaw in the sandbox container implemented in cmdguard.sys in Comodo Antivirus 12...4.7 Medium
- cisco nx-os, nx-os software 8.1(1) +1 moreCisco NX-OS Software IPv6 Denial of Service Vulnerability8.6 High
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Remote Management Memory Leak Denial of Service Vulnerability7.7 High
- cisco nx-os, unified computing system (managed) +1 moreCisco NX-OS Software Cisco Fabric Services over IP Denial of Service Vulnerability8.6 High
- cisco nx-os, unified computing system (managed), fx-os +2 moreCisco FXOS and NX-OS Software Authenticated Simple Network Management Protocol Denial of Service Vulnerability7.7 High
- cisco ios xe software, ios xe +1 moreCisco REST API Container for IOS XE Software Authentication Bypass Vulnerability10.0 Critical
- fortinet fortiwebThe URL part of the report message is not encoded in Fortinet FortiWeb 6.0.2 and below which may...6.1 Medium
- manageyourteam myt project managementMyT Project Management 1.5.1 lacks CSRF protection and, for example, allows a user/create CSRF...8.8 High
- librenmsLibreNMS v1.54 has XSS in the Create User, Inventory, Add Device, Notifications, Alert Rule,...5.4 Medium
- cloudberrylab backupCloudBerry Backup v6.1.2.34 allows local privilege escalation via a Pre or Post backup action....7.8 High
- lexmark 6500e firmware, c734 firmware, c736 firmware +71 more +73 moreVarious Lexmark products have Incorrect Access Control.9.1 Critical
- lexmark cs31x firmware, cs41x firmware, cx310 firmware +22 more +24 moreVarious Lexmark products have Incorrect Access Control (issue 2 of 2).5.3 Medium
- lexmark cs31x firmware, cs41x firmware, cx310 firmware +22 more +24 moreVarious Lexmark products have Incorrect Access Control (issue 1 of 2).5.3 Medium
- eng knowageIn Knowage through 6.1.1, an authenticated user who accesses the datasources page will gain...8.8 High
- eng knowageIn Knowage through 6.1.1, there is XSS via the start_url or user_id field to the ChangePwdServlet...6.1 Medium
- Show moreLoading…