CVEs published in April 2019
1,481 vulnerabilities, 188 critical, 17 exploited.
- signing-party project signing-party, debian linux, opensuse leap +2 more gpg-key2ps in signing-party 1.1.x and 2.x before 2.10-1 contains an unsafe shell call enabling... 9.8 Critical
- apache archiva Improper Input Validation in Apache Archiva 6.5 Medium
- apache archiva Cross-site scripting in Apache Archiva 6.5 Medium
- apache camel Path Traversal in Apache Camel 7.5 High
- crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials... 9.8 Critical
- crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames,... 7.8 High
- crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames,... 7.8 High
- crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 is vulnerable to denial of... 7.5 High
- crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to act as a... 9.1 Critical
- crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass... 5.3 Medium
- crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass... 5.3 Medium
- crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to... 9.8 Critical
- crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to... 8.8 High
- barco wepresent wipg-1000p firmware, crestron am-100 firmware, am-101 firmware +10 more +12 more The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG... 9.8 Critical
- barco wepresent wipg-1000p firmware, crestron am-100 firmware, am-101 firmware +11 more +13 more The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG... 9.8 Critical
- crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allow any user to obtain... 5.3 Medium
- crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 anyone can change the... 9.8 Critical
- crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command... 9.8 Critical
- crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command... 9.8 Critical
- doorgets cms routers/ajaxRouter.php in doorGets 7.0 has a web site physical path leakage vulnerability, as... 5.3 Medium
- doorgets cms doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/emailingRequest.php... 4.9 Medium
- doorgets cms doorGets 7.0 has an arbitrary file deletion vulnerability in /doorgets/app/requests/user... 4.9 Medium
- doorgets cms doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user... 4.9 Medium
- doorgets cms doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user... 4.9 Medium
- doorgets cms doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user... 4.9 Medium
- doorgets cms doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user... 4.9 Medium
- doorgets cms doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user... 4.9 Medium
- doorgets cms doorGets 7.0 has a default administrator credential vulnerability. A remote attacker can use this... 9.8 Critical
- doorgets cms doorGets 7.0 has a CSRF vulnerability in /doorgets/app/requests/user/configurationRequest.php. A... 8.8 High
- doorgets cms doorGets 7.0 has a sensitive information disclosure vulnerability in /setup/temp/admin.php and ... 9.8 Critical
- doorgets cms /fileman/php/upload.php in doorGets 7.0 has an arbitrary file upload vulnerability. A remote... 8.8 High
- doorgets cms doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/commentView.php. A... 7.5 High
- doorgets cms doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/contactView.php. A... 6.5 Medium
- doorgets cms doorGets 7.0 has an arbitrary file deletion vulnerability in /fileman/php/deletefile.php. A... 7.5 High
- doorgets cms doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/download.php. A... 7.5 High
- doorgets cms doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/downloaddir.php... 7.5 High
- doorgets cms doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/movefile.php. A... 8.2 High
- doorgets cms doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/renamefile.php.... 8.2 High
- doorgets cms doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copydir.php. A... 7.5 High
- doorgets cms doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copyfile.php. A... 7.5 High
- polarisft intellect core banking An issue was discovered in the Armor module in Polaris FT Intellect Core Banking 9.7.1. CSRF can... 8.8 High
- polarisft intellect core banking An issue was discovered in the Armor module in Polaris FT Intellect Core Banking 9.7.1. Input... 8.8 High
- polarisft intellect core banking An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1... 5.4 Medium
- polarisft intellect core banking An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1... 6.1 Medium
- bpcbt smartvista BPC SmartVista 2 has Session Fixation via the JSESSIONID parameter. 7.5 High
- bpcbt smartvista BPC SmartVista 2 has Improper Access Control in the SVFE module, where it fails to appropriately... 7.2 High
- bpcbt smartvista BPC SmartVista 2 has CSRF via SVFE2/pages/admpages/roles/createrole.jsf. 8.8 High
- directadmin The FileManager in InfinitumIT DirectAdmin through v1.561 has XSS via CMD_FILE_MANAGER,... 6.1 Medium
- strato hidrive desktop client, telekom magentacloud, ionos 1\&1 online storage +2 more STRATO HiDrive Desktop Client 5.0.1.0 for Windows suffers from a SYSTEM privilege escalation... 8.8 High
- tar-fs project tar-fs Improper Input Validation in tar-fs 7.5 High
- Show olderLoading…