Archive
July 2018
Vulnerabilities first published in this month (UTC), newest first.
2,170 results · Feed
-
Unscored —
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash. This was addressed in…
-
Unscored —
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an infinite loop. Th…
-
Unscored —
MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropria…
-
Unscored —
A vulnerability in the Open Systems Gateway initiative (OSGi) interface of Cisco Policy Suite before 18.1.0 could allow…
-
Unscored —
A vulnerability in the Policy Builder database of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remo…
-
Unscored —
A vulnerability in the vManage dashboard for the configuration and management service of the Cisco SD-WAN Solution coul…
-
Unscored —
Multiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording Format (ARF) and Webe…
-
Unscored —
Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote …
-
Unscored —
A vulnerability in the Zero Touch Provisioning (ZTP) subsystem of the Cisco SD-WAN Solution could allow an authenticate…
-
Unscored —
A Read-Only User Effect Change vulnerability in the Policy Builder interface of Cisco Policy Suite could allow an authe…
-
Unscored —
A vulnerability in the configuration and management database of the Cisco SD-WAN Solution could allow an authenticated,…
-
Unscored —
Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) co…
-
Unscored —
A vulnerability in the command-line tcpdump utility in the Cisco SD-WAN Solution could allow an authenticated, local at…
-
Unscored —
Multiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording Format (ARF) and Webe…
-
Unscored —
Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) co…
-
Unscored —
A vulnerability in Cisco Webex Teams (for Windows and macOS) could allow an unauthenticated, remote attacker to execute…
-
Unscored —
A vulnerability in the CLI of Cisco Policy Suite could allow an authenticated, local attacker to access files owned by …
-
Unscored —
A vulnerability in the VPN subsystem configuration in the Cisco SD-WAN Solution could allow an authenticated, remote at…
-
Unscored —
Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) co…
-
Unscored —
A vulnerability in the Policy Builder interface of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, rem…
-
Unscored —
A vulnerability in the configuration and monitoring service of the Cisco SD-WAN Solution could allow an authenticated, …
-
Unscored —
A vulnerability in the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, …
-
Unscored —
A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, rem…
-
Unscored —
A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files…
-
Unscored —
A vulnerability in the web upload function of Cisco Cloud Services Platform 2100 could allow an authenticated, remote a…
-
Unscored —
A vulnerability in the CLI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitra…
-
Unscored —
Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) co…
-
Unscored —
A vulnerability in the web framework of Cisco Webex could allow an unauthenticated, remote attacker to conduct a Docume…
-
Unscored —
Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote …
-
Unscored —
A vulnerability in the Cluster Manager of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attac…
-
Unscored —
A vulnerability in the web framework of the Cisco Unified Communications Manager IM and Presence Service software could…
-
Unscored —
A vulnerability in the DHCPv6 feature of the Cisco Nexus 9000 Series Fabric Switches in Application-Centric Infrastruct…
-
Unscored —
joyplus-cms 1.6.0 has XSS via the manager/admin_ajax.php can_search_device array parameter.
-
Unscored —CVE-2018-14364 EPSS 48%
GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Tr…
-
Unscored —
joyplus-cms 1.6.0 has SQL Injection via the manager/admin_ajax.php val parameter.
-
Unscored —
An issue was discovered in WonderCMS before 2.5.2. An attacker can create a new session on a web application and record…
-
Unscored —
wpsmain.dll in Kingsoft WPS Office 2016 and Jinshan PDF 10.1.0.6621 allows remote attackers to cause a denial of servic…
-
Unscored —
JEESNS through 1.2.1 allows XSS attacks by ordinary users who publish articles containing a crafted payload in order to…
-
Unscored —
PHP Scripts Mall JOB SITE (aka Job Portal) 3.0.1 has Cross-site Scripting (XSS) via the search bar.
-
Unscored —
Apache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in Ambari Agent informational…