CVEs published in August 2019
2,040 vulnerabilities, 318 critical, 7 exploited.
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Network Time Protocol Denial of Service Vulnerability8.6 High
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.0-STABLE before r350828, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before...7.5 High
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.0-STABLE before r350637, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before...7.5 High
- totemo totemomailCross-site scripting (XSS) vulnerability in the 'Notification template' feature of totemomail 6.0...6.1 Medium
- totemo totemomailCross-site scripting (XSS) vulnerability in the 'Certificate' feature of totemomail 6.0.0 build...6.1 Medium
- totemo totemomailLog viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by...5.3 Medium
- totemo totemomailCross-site scripting (XSS) vulnerability in the 'Authorisation Service' feature of totemomail 6.0...6.1 Medium
- onkyo tx-nr686 firmwareDirectory traversal vulnerability on ONKYO TX-NR686 1030-5000-1040-0010 A/V Receiver devices...7.5 High
- checkpoint endpoint security, capsule docs standalone client, remote access clients +2 moreCheck Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a...7.8 High
- prophecyinternational snare centralAn OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated...7.2 High
- prophecyinternational snare centralA SQL injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers...7.2 High
- avira free security suite, software updater +1 moreAn issue was discovered in Avira Free Security Suite 10. The permissive access rights on the...7.8 High
- domainmodIn DomainMOD through 4.13, the parameter daterange in the file reporting/domains/cost-by-month...6.1 Medium
- citrix storefront serverCitrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 ...7.5 High
- woocommerce paypal checkout payment gatewaycgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.17 for...5.3 Medium
- woocommerce payu india payment gateway/payu/icpcheckout/ in the WooCommerce PayU India Payment Gateway plugin 2.1.1 for WordPress...5.3 Medium
- debian linux, linux kernel, redhat enterprise linux +2 moreIn the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c...4.7 Medium
- commscope tr4400 firmwareCommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an...9.8 Critical
- commscope tr4400 firmwareCommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an...9.8 Critical
- irssi, canonical ubuntu linux +1 moreIrssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP.9.8 Critical
- teamspeakThe TeamSpeak client before 3.3.2 allows remote servers to trigger a crash via the 0xe2 0x81 0xa8...7.5 High
- ibm iIBM i 7.4 users who have done a Restore User Profile (RSTUSRPRF) on a system which has been...6.7 Medium
- ibm cloud automation managerIBM Cloud Automation Manager 3.1.2 could allow a malicious user on the client side (with access...5.0 Medium
- ibm cloud automation managerIBM Cloud Automation Manager 3.1.2 could allow a user to be impropertly redirected and obtain...4.0 Medium
- atlassian confluence, confluence server +1 moreThere was a local file disclosure vulnerability in Confluence Server and Confluence Data Center...8.8 High
- equeshome elf smart plug firmwareThe Eques elf smart plug and the mobile app use a hardcoded AES 256 bit key to encrypt the...8.8 High
- fontforgeFontForge through 20190801 has a buffer overflow in PrefsUI_LoadPrefs in prefs.c.9.8 Critical
- robotis dynamixel sdkROBOTIS Dynamixel SDK through 3.7.11 has a buffer overflow via a large rxpacket.9.8 Critical
- components for wp bakery page builder project for wp bakery page builderThe nd-shortcodes plugin before 6.0 for WordPress has a nopriv_ AJAX action that allows...6.1 Medium
- getwooplugins additional variation images for woocommerceThe woo-variation-gallery plugin before 1.1.29 for WordPress has XSS.5.4 Medium
- quadlayers wp social feed galleryThe insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for...8.8 High
- weblizar social likebox \& feedThe facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF.8.8 High
- srtalliance secure reliable transportSecure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many...9.8 Critical
- nvidia clara genomics analysisClara Genomics Analysis before 0.2.0 has an integer overflow for cudapoa memory management in...9.8 Critical
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.1.4. It uses...9.8 Critical
- strategy11 formidable form builderThe formidable plugin before 4.02.01 for WordPress has unsafe deserialization.9.8 Critical
- shapepress wp dsgvo toolsThe shapepress-dsgvo plugin before 2.2.19 for WordPress has wp-admin/admin-ajax.php?action=admin...5.4 Medium
- webcraftic simple 301 redirects-addon-bulk uploaderThe simple-301-redirects-addon-bulk-uploader plugin before 1.2.5 for WordPress has no protection...6.1 Medium
- booking project bookingThe nd-booking plugin before 2.5 for WordPress has a nopriv_ AJAX action that allows modification...6.1 Medium
- learning courses project coursesThe nd-learning plugin before 4.8 for WordPress has a nopriv_ AJAX action that allows...6.1 Medium
- travel management project managementThe nd-travel plugin before 1.7 for WordPress has a nopriv_ AJAX action that allows modification...6.1 Medium
- donations project donationsThe nd-donations plugin before 1.4 for WordPress has a nopriv_ AJAX action that allows...6.1 Medium
- hallme woocommerce address bookThe woo-address-book plugin before 1.6.0 for WordPress has save calls without nonce verification...8.8 High
- haktansuren handl utm grabberThe handl-utm-grabber plugin before 2.6.5 for WordPress has CSRF via add_option and update_option.8.8 High
- wisetr user email verification for woocommerceThe woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to...9.8 Critical
- libzetta-rs project libzetta-rslibZetta.rs through 0.1.2 has an integer overflow in the zpool parser (for error stats) that...7.5 High
- lute-tab project lute-tabLute-Tab before 2019-08-23 has a buffer overflow in pdf_print.cc.9.8 Critical
- webtorrentCross-Site Scripting in webtorrent6.1 Medium
- gnu chessIn GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend...7.8 High
- webassembly binaryenAn issue was discovered in Binaryen 1.38.32. Missing validation rules in asmjs/asmangle.cpp can...6.5 Medium
- Show moreLoading…