Skip to content
OpenAdvisories

Archive

July 2019

Vulnerabilities first published in this month (UTC), newest first.

1,623 results · Feed

  • Unscored —

    An issue was discovered on D-Link DCS-1130 devices. The device requires that a user logging to the device to provide a …

  • Unscored —

    An issue was discovered on D-Link DCS-1130 devices. The device provides a crossdomain.xml file with no restrictions on …

  • Unscored —

    Linear eMerge E3-Series devices have Default Credentials.

  • Unscored —

    Linear eMerge E3-Series devices allow Directory Traversal.

  • Unscored —

    An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of changing the admi…

  • Unscored —
    CVE-2019-7254 Public exploit Scanner template EPSS 82%

    Linear eMerge E3-Series devices allow File Inclusion.

  • Unscored —

    An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB fol…

  • Unscored —

    An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB fol…

  • Unscored —
    CVE-2019-7255 Public exploit Scanner template EPSS 56%

    Linear eMerge E3-Series devices allow XSS.

  • Unscored —

    A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) th…

  • Unscored —
    CVE-2019-7257 Public exploit EPSS 70%

    Linear eMerge E3-Series devices allow Unrestricted File Upload.

  • Unscored —
    CVE-2019-7258 EPSS 19%

    Linear eMerge E3-Series devices allow Privilege Escalation.

  • Unscored —
    CVE-2019-7259 EPSS 13%

    Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.

  • Unscored —

    Linear eMerge E3-Series devices have Cleartext Credentials in a Database.

  • Unscored —

    Linear eMerge E3-Series devices have Hard-coded Credentials.

  • Unscored —
    CVE-2019-7262 Public exploit EPSS 16%

    Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).

  • Unscored —

    Linear eMerge E3-Series devices have a Version Control Failure.

  • Unscored —

    Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.

  • Unscored —
    CVE-2019-7265 Public exploit EPSS 23%

    Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).

  • Unscored —

    Linear eMerge 50P/5000P devices allow Authentication Bypass.

  • Unscored —
    CVE-2019-7267 EPSS 21%

    Linear eMerge 50P/5000P devices allow Cookie Path Traversal.

  • Unscored —

    Linear eMerge 50P/5000P devices allow Unauthenticated File Upload.

  • Unscored —
    CVE-2019-7269 Public exploit EPSS 40%

    Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.

  • Unscored —

    Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF).

  • Unscored —
    CVE-2019-12594 Public exploit

    DOSBox 0.74-2 has Incorrect Access Control.

  • Unscored —

    An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB fol…

  • Unscored —

    An issue was discovered in CyberPanel through 1.8.4. On the user edit page, an attacker can edit the administrator's e-…

  • Low 3.1

    IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to obtain sensitive information, cause…

  • Medium 6.1

    IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…

  • High 8.8

    IBM Security Guardium 10.5 could allow a remote attacker to upload arbitrary files, which could allow the attacker to e…

  • Medium 5.3

    IBM Daeja ViewONE Professional, Standard & Virtual 5.0 through 5.0.5 could allow an unauthorized user to download serve…

  • High 7.4

    IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents could allow a local attacker to gain elevated privileges on…

  • Medium 6.3

    IBM Tivoli Storage Manager Server (IBM Spectrum Protect 7.1 and 8.1) could allow a local user to replace existing datab…

  • Critical 9.8

    IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents are vulnerable to a stack-based buffer overflow, caused by …

  • Unscored —

    An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (expl…

  • Unscored —

    An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (expl…

  • Unscored —

    An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (expl…

  • Unscored —

    An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (expl…

  • Unscored —

    An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (expl…

  • Unscored —

    An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (expl…