CVEs published July 5, 2018
133 CVEs were published on July 5, 2018: 0 critical, 0 high.
- Published
- 133
- Critical
- 0
- High
- 0
- Medium
- 3
- Low
- 0
- Unrated
- 130
- Now in CISA KEV
- 0
- Fix available
- 12
Most affected products
- Nextcloud Server
- 2
- [UNKNOWN] atomic-openshift
- 1
- angular-redactor
- 1
- Apache Software Foundation Apache CXF Fediz · org.apache… +4
- 1
- Apache Software Foundation Apache Solr · org.apache.solr:so…
- 1
- Fortinet FortiOS
- 1
- github.com/ethereum/go-ethereum
- 1
- github.com/hpcng/singularity
- 1
- https://github.com/jtrussell buttle · buttle
- 1
- https://github.com/memcachier memjs · memjs
- 1
Medium, low and unrated 133
- CVE-2016-10724Bitcoin Core before v0.13.0 allows denial of service (memory exhaustion) triggered by the remote network alert system (deprecated since Q1 2
- CVE-2016-10725In Bitcoin Core before v0.13.0, a non-final alert is able to block the special "final alert" (which is supposed to override all other alerts
- CVE-2018-13339Imperavi Redactor 3 in Angular Redactor 1.1.6, when HTML content mode is used, allows stored XSS, as demonstrated by an onerror attribute ofangular-redactor
- CVE-2018-13340Gleez CMS 1.2.0 has CSRF, as demonstrated by a /page/add request.
- CVE-2017-16816The condor_schedd component in HTCondor before 8.6.8 and 8.7.x before 8.7.5 allows remote authenticated users to cause a denial of service (
- CVE-2018-10987An issue was discovered on Dongguan Diqee Diqee360 devices.
- CVE-2018-10988An issue was discovered on Diqee Diqee360 devices.
- CVE-2018-12103An issue was discovered on D-Link DIR-890L with firmware 1.21B02beta01 and earlier, DIR-885L/R with firmware 1.21B03beta01 and earlier, and
- CVE-2018-12113Core FTP LE version 2.2 Build 1921 is prone to a buffer overflow vulnerability that may result in a DoS or remote code execution via a PASV
- CVE-2018-12520An issue was discovered in ntopng 3.4 before 3.4.180617.
- CVE-2018-12571uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS q
- CVE-2018-12739In BEESCMS 4.0, CSRF allows administrators to be added arbitrarily, a related issue to CVE-2018-10266.
- CVE-2018-13031DamiCMS v6.0.0 aand 6.1.0 allows CSRF via admin.php?s=/Admin/doadd to add an administrator account.
- CVE-2018-13052In CyberArk Endpoint Privilege Manager (formerly Viewfinity), Privilege Escalation is possible if the attacker has one process that executes
- CVE-2018-8046The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data.
- CVE-2018-8738Airties 5444 1.0.0.18 and 5444TT 1.0.0.18 devices allow XSS.
- CVE-2018-9997Cross-site scripting (XSS) vulnerability in mail compose in Open-Xchange OX App Suite before 7.6.3-rev31, 7.8.x before 7.8.2-rev31, 7.8.3 be
- CVE-2018-9998Open-Xchange OX App Suite before 7.6.3-rev37, 7.8.x before 7.8.2-rev40, 7.8.3 before 7.8.3-rev48, and 7.8.4 before 7.8.4-rev28 include folde
- CVE-2017-11175In J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /login.
- CVE-2018-12021Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system.github.com/hpcng/singularity
- CVE-2018-12691Time-of-check to time-of-use (TOCTOU) race condition in org.onosproject.acl (aka the access control application) in ONOS v1.13 and earlier a
- CVE-2018-12910The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.
- CVE-2018-12976In Go Doc Dot Org (gddo) through 2018-06-27, an attacker could use specially crafted <go-import> tags in packages being fetched by gddo to c
- CVE-2018-13325The _sell function of a smart contract implementation for GROWCHAIN (GROW), an Ethereum token, has an integer overflow.
- CVE-2018-13328The transfer, transferFrom, and mint functions of a smart contract implementation for PFGc, an Ethereum token, have an integer overflow.
- CVE-2018-7944Huawei smart phones Emily-AL00A with software 8.1.0.106(SP2C00) and 8.1.0.107(SP5C00) have a Factory Reset Protection (FRP) bypass vulnerabiHuawei Technologies Co. Emily-AL00A
- CVE-2018-13252Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page.
- CVE-2018-13300In FFmpeg 3.2 and 4.0.1, an improper argument (AVCodecParameters) passed to the avpriv_request_sample function in the handle_eac3 function i
- CVE-2018-13301In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ff_mpeg4_decode_picture_header function in libavcodec/mpeg
- CVE-2018-13302In FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that have multiple independent substreams in the
- CVE-2018-13303In FFmpeg 4.0.1, a missing check for failure of a call to init_get_bits8() in the avpriv_ac3_parse_header function in libavcodec/ac3_parser.
- CVE-2018-13304In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studio_profile in libavcodec ma
- CVE-2018-13305In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function in libavcodec/vc1_bl
- CVE-2016-10522rails_admin ruby gem <v1.1.1 is vulnerable to cross-site request forgery (CSRF) attacks.https://github.com/sferik rails_admin ruby gem · rails_admin
- CVE-2018-3761Nextcloud Server before 12.0.8 and 13.0.3 suffer from improper authentication on the OAuth2 token endpoint.Nextcloud Server
- CVE-2018-3762Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for incoming shares allowing a user to still rNextcloud Server
- CVE-2018-3763In Nextcloud Calendar before 1.5.8 and 1.6.1, a missing sanitization of search results for an autocomplete field could lead to a stored XSS Nextcloud Calendar application
- CVE-2018-3764In Nextcloud Contacts before 2.1.2, a missing sanitization of search results for an autocomplete field could lead to a stored XSS requiring Nextcloud Contacts application
- CVE-2018-3766Path traversal in buttle module versions <= 0.2.0 allows to read any file in the server.https://github.com/jtrussell buttle · buttle
- CVE-2018-3767`memjs` versions <= 1.1.0 allocates and stores buffers on typed input, resulting in DoS and uninitialized memory usage.https://github.com/memcachier memjs · memjs
- CVE-2018-3769ruby-grape ruby gem suffers from a cross-site scripting (XSS) vulnerability via "format" parameter.Ruby Grape ruby-grape ruby gem · grape
- CVE-2018-13250libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTRINGCONCAT.
- CVE-2018-13251In libming 0.4.8, there is an excessive memory allocation attempt in the readBytes function of the util/read.c file, related to parseSWF_DEF
- CVE-2018-8026This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion (XXE) in Solr config files (Apache Software Foundation Apache Solr · org.apache.solr:so…
- CVE-2017-16773Improper authorization vulnerability in Highlight Preview in Synology Universal Search before 1.0.5-0135 allows remote authenticated users tSynology Universal Search
- CVE-2018-10885In atomic-openshift before version 3.10.9 a malicious network-policy configuration can cause Openshift Routing to crash when using ovs-netwo[UNKNOWN] atomic-openshift
- CVE-2018-8038Versions of Apache CXF Fediz prior to 1.4.4 do not fully disable Document Type Declarations (DTDs) when either parsing the Identity ProviderApache Software Foundation Apache CXF Fediz · org.apache… +4
- CVE-2018-8928Cross-site scripting (XSS) vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows remote authenticated useSynology CardDAV Server
- CVE-2018-9185An information disclosure vulnerability in Fortinet FortiOS 6.0.0 and below versions reveals user's web portal login credentials in a JavascFortinet FortiOS
- CVE-2015-9260An issue was discovered in BEdita before 3.7.0.
- CVE-2018-12018The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation begithub.com/ethereum/go-ethereum
- CVE-2018-13153In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore/animate.c.
- CVE-2018-13155The mintToken function of a smart contract implementation for GEMCHAIN (GEM), an Ethereum token, has an integer overflow that allows the own
- CVE-2018-13156The mintToken function of a smart contract implementation for bonusToken (BNS), an Ethereum token, has an integer overflow that allows the o
- CVE-2018-13157The mintToken function of a smart contract implementation for CryptonitexCoin, an Ethereum token, has an integer overflow that allows the ow
- CVE-2018-13158The mintToken function of a smart contract implementation for AssetToken, an Ethereum token, has an integer overflow that allows the owner o
- CVE-2018-13159The mintToken function of a smart contract implementation for bankcoin (BNK), an Ethereum token, has an integer overflow that allows the own
- CVE-2018-13160The mintToken function of a smart contract implementation for etktokens (ETK), an Ethereum token, has an integer overflow that allows the ow
- CVE-2018-13161The mintToken function of a smart contract implementation for MultiGames (MLT), an Ethereum token, has an integer overflow that allows the o
- CVE-2018-13162The mintToken function of a smart contract implementation for ALEX, an Ethereum token, has an integer overflow that allows the owner of the
- CVE-2018-13163The mintToken function of a smart contract implementation for Ethernet Cash (ENC), an Ethereum token, has an integer overflow that allows th
- CVE-2018-13164The mintToken function of a smart contract implementation for EPPCOIN (EPP), an Ethereum token, has an integer overflow that allows the owne
- CVE-2018-13165The mintToken function of a smart contract implementation for JustDCoin (JustD), an Ethereum token, has an integer overflow that allows the
- CVE-2018-13166The mintToken function of a smart contract implementation for AthletiCoin (ATHA), an Ethereum token, has an integer overflow that allows the
- CVE-2018-13167The mintToken function of a smart contract implementation for Yu Gi Oh (YGO), an Ethereum token, has an integer overflow that allows the own
- CVE-2018-13168The mintToken function of a smart contract implementation for Yu Gi Oh (YGO) (Contract Name: NetkillerBatchToken), an Ethereum token, has an
- CVE-2018-13169The mintToken function of a smart contract implementation for Ethereum Cash Pro (ECP), an Ethereum token, has an integer overflow that allow
- CVE-2018-13170The mintToken function of a smart contract implementation for Snoqualmie Coin (SNOW), an Ethereum token, has an integer overflow that allows
- CVE-2018-13171The mintToken function of a smart contract implementation for LadaToken (LDT), an Ethereum token, has an integer overflow that allows the ow
- CVE-2018-13172The mintToken function of a smart contract implementation for bzxcoin (BZX), an Ethereum token, has an integer overflow that allows the owne
- CVE-2018-13173The mintToken function of a smart contract implementation for EliteShipperToken (ESHIP), an Ethereum token, has an integer overflow that all
- CVE-2018-13174The mintToken function of a smart contract implementation for CryptoABS (ABS), an Ethereum token, has an integer overflow that allows the ow
- CVE-2018-13175The mintToken function of a smart contract implementation for AIChain, an Ethereum token, has an integer overflow that allows the owner of t
- CVE-2018-13176The mintToken function of a smart contract implementation for Trust Zen Token (ZEN), an Ethereum token, has an integer overflow that allows
- CVE-2018-13177The mintToken function of a smart contract implementation for MiningRigRentals Token (MRR), an Ethereum token, has an integer overflow that
- CVE-2018-13178The mintToken function of a smart contract implementation for ECToints (ECT) (Contract Name: ECPoints), an Ethereum token, has an integer ov
- CVE-2018-13179The mintToken function of a smart contract implementation for Air-Contact Token (AIR), an Ethereum token, has an integer overflow that allow
- CVE-2018-13180The mintToken function of a smart contract implementation for IMM Coin (IMC), an Ethereum token, has an integer overflow that allows the own
- CVE-2018-13181The mintToken function of a smart contract implementation for Troo, an Ethereum token, has an integer overflow that allows the owner of the
- CVE-2018-13182The mintToken function of a smart contract implementation for loncoin (LON), an Ethereum token, has an integer overflow that allows the owne
- CVE-2018-13183The mintToken function of a smart contract implementation for JWC, an Ethereum token, has an integer overflow that allows the owner of the c
- CVE-2018-13184The mintToken function of a smart contract implementation for TravelZedi Token (ZEDI), an Ethereum token, has an integer overflow that allow
- CVE-2018-13185The mintToken function of a smart contract implementation for appcoins (APPC), an Ethereum token, has an integer overflow that allows the ow
- CVE-2018-13186The mintToken function of a smart contract implementation for MMTCoin (MMT), an Ethereum token, has an integer overflow that allows the owne
- CVE-2018-13187The mintToken function of a smart contract implementation for CIBN Live Token (CIBN LIVE), an Ethereum token, has an integer overflow that a
- CVE-2018-13188The mintToken function of a smart contract implementation for MyBO, an Ethereum token, has an integer overflow that allows the owner of the
- CVE-2018-13189The mint function of a smart contract implementation for Unolabo (UNLB), an Ethereum token, has an integer overflow that allows the owner of
- CVE-2018-13190The mintToken function of a smart contract implementation for DVChain, an Ethereum token, has an integer overflow that allows the owner of t
- CVE-2018-13191The mintToken function of a smart contract implementation for Super Carbon Coin (SCC), an Ethereum token, has an integer overflow that allow
- CVE-2018-13192The mintToken function of a smart contract implementation for Jobscoin (JOB), an Ethereum token, has an integer overflow that allows the own
- CVE-2018-13193The mintToken function of a smart contract implementation for hentaisolo (HAO), an Ethereum token, has an integer overflow that allows the o
- CVE-2018-13194The mintToken function of a smart contract implementation for TongTong Coin (TTCoin), an Ethereum token, has an integer overflow that allows
- CVE-2018-13195The mintToken function of a smart contract implementation for Cranoo (CRN), an Ethereum token, has an integer overflow that allows the owner
- CVE-2018-13196The sell function of a smart contract implementation for T-Swap-Token (T-S-T), an Ethereum token, has an integer overflow in which "amount *
- CVE-2018-13197The sell function of a smart contract implementation for Welfare Token Fund (WTF), an Ethereum token, has an integer overflow in which "amou
- CVE-2018-13198The sell function of a smart contract implementation for STeX Exchange ICO (STE), an Ethereum token, has an integer overflow in which "amoun
- CVE-2018-13199The sell function of a smart contract implementation for ETHEREUMBLACK (ETCBK), an Ethereum token, has an integer overflow in which "amount
- CVE-2018-13200The sell function of a smart contract implementation for DateMe (DMX) (Contract Name: ProgressiveToken), an Ethereum token, has an integer o
- CVE-2018-13201The sell function of a smart contract implementation for TiTok - Ticket Token (Contract Name: MyAdvancedToken7), an Ethereum token, has an i
- CVE-2018-13202The sell function of a smart contract implementation for MyBO, an Ethereum token, has an integer overflow in which "amount * sellPrice" can
- CVE-2018-13203The sellBuyerTokens function of a smart contract implementation for SwapToken, an Ethereum token, has an integer overflow in which "amount *
- CVE-2018-13204The sell function of a smart contract implementation for ETHERCASH (ETC), an Ethereum token, has an integer overflow in which "amount * sell
- CVE-2018-13205The sell function of a smart contract implementation for ohni_2 (OHNI), an Ethereum token, has an integer overflow in which "amount * sellPr
- CVE-2018-13206The sell function of a smart contract implementation for ProvidenceCasino (PVE), an Ethereum token, has an integer overflow in which "amount
- CVE-2018-13207The sell function of a smart contract implementation for PornCoin (PRNC), an Ethereum token, has an integer overflow in which "amount * sell
- CVE-2018-13208The sell function of a smart contract implementation for MoneyTree (TREE), an Ethereum token, has an integer overflow in which "amount * sel
- CVE-2018-13209The sell function of a smart contract implementation for Nectar (NCTR), an Ethereum token, has an integer overflow in which "amount * sellPr
- CVE-2018-13210The sell function of a smart contract implementation for Providence Crypto Casino (PVE) (Contract Name: ProvidenceCasinoToken), an Ethereum
- CVE-2018-13211The sell function of a smart contract implementation for MyToken, an Ethereum token, has an integer overflow in which "amount * sellPrice" c
- CVE-2018-13212The sell function of a smart contract implementation for EthereumLegit, an Ethereum token, has an integer overflow in which "amount * sellPr
- CVE-2018-13213The sell function of a smart contract implementation for TravelCoin (TRV), an Ethereum token, has an integer overflow in which "amount * sel
- CVE-2018-13214The sell function of a smart contract implementation for GMile, an Ethereum token, has an integer overflow in which "amount * sellPrice" can
- CVE-2018-13215The sell function of a smart contract implementation for Sample Token (STK) (Contract Name: cashBackMintable), an Ethereum token, has an int
- CVE-2018-13216The sell function of a smart contract implementation for GreenMed (GRMD), an Ethereum token, has an integer overflow in which "amount * sell
- CVE-2018-13217The sell function of a smart contract implementation for CoinToken, an Ethereum token, has an integer overflow in which "amount * sellPrice"
- CVE-2018-13218The sell function of a smart contract implementation for ICO Dollar (ICOD), an Ethereum token, has an integer overflow in which "amount * se
- CVE-2018-13219The sell function of a smart contract implementation for YourCoin (ICO) (Contract Name: ETH033), an Ethereum token, has an integer overflow
- CVE-2018-13220The sell function of a smart contract implementation for MAVCash, an Ethereum token, has an integer overflow in which "amount * sellPrice" c
- CVE-2018-13221The sell function of a smart contract implementation for Extreme Coin (XT) (Contract Name: ExtremeToken), an Ethereum token, has an integer
- CVE-2018-13222The sell function of a smart contract implementation for ObjectToken (OBJ), an Ethereum token, has an integer overflow in which "amount * se
- CVE-2018-13223The sell function of a smart contract implementation for R Time Token v3 (RS) (Contract Name: RTokenMain), an Ethereum token, has an integer
- CVE-2018-13224The sell function of a smart contract implementation for Virtual Energy Units (VEU) (Contract Name: VEU_TokenERC20), an Ethereum token, has
- CVE-2018-13225The sell function of a smart contract implementation for MyYLC, an Ethereum token, has an integer overflow in which "amount * sellPrice" can
- CVE-2018-13226The sell function of a smart contract implementation for YLCToken, an Ethereum token, has an integer overflow in which "amount * sellPrice"
- CVE-2018-13227The sell function of a smart contract implementation for MoneyChainNet (MCN), an Ethereum token, has an integer overflow in which "amount *
- CVE-2018-13228The sell function of a smart contract implementation for Crowdnext (CNX), an Ethereum token, has an integer overflow in which "amount * sell
- CVE-2018-13229The sell function of a smart contract implementation for RiptideCoin (RIPT), an Ethereum token, has an integer overflow in which "amount * s
- CVE-2018-13230The sell function of a smart contract implementation for DestiNeed (DSN), an Ethereum token, has an integer overflow in which "amount * sell
- CVE-2018-13231The sell function of a smart contract implementation for ENTER (ENTR) (Contract Name: EnterToken), an Ethereum token, has an integer overflo
- CVE-2018-13232The sell function of a smart contract implementation for ENTER (ENTR) (Contract Name: EnterCoin), an Ethereum token, has an integer overflow
- CVE-2018-13233The sell function of a smart contract implementation for GSI, an Ethereum token, has an integer overflow in which "amount * sellPrice" can b
- CVE-2018-13326The transfer and transferFrom functions of a smart contract implementation for Bittelux (BTX), an Ethereum token, have an integer overflow.
- CVE-2018-13327The transfer and transferFrom functions of a smart contract implementation for ChuCunLingAIGO (CCLAG), an Ethereum token, have an integer ov