CVEs published in April 2019
1,481 vulnerabilities, 188 critical, 17 exploited.
- overit geocallAn issue was discovered in OverIT Geocall 6.3 before build 2:346977. An unauthenticated servlet...9.8 Critical
- overit geocallAn issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and...8.8 High
- overit geocallAn log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2...7.5 High
- overit geocallMultiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977.6.1 Medium
- humhub calendarRelative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2...4.3 Medium
- synology android moments, moments +1 moreChannel accessible by non-endpoint vulnerability in privacy page in Synology Android Moments...4.2 Medium
- synology drive, drive server +1 moreInformation exposure vulnerability in SYNO.SynologyDrive.Files in Synology Drive before 1.1.2...5.3 Medium
- synology mailplus serverUncontrolled resource consumption vulnerability in TLS configuration in Synology MailPlus Server...7.5 High
- synology application serviceInformation exposure vulnerability in SYNO.Personal.Application.Info in Synology Application...4.3 Medium
- synology application serviceInformation exposure vulnerability in SYNO.Personal.Profile in Synology Application Service...4.3 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreCross-site scripting (XSS) vulnerability in Control Panel SSO Settings in Synology DiskStation...5.9 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreInformation exposure vulnerability in /usr/syno/etc/mount.conf in Synology DiskStation Manager ...4.3 Medium
- synology router manager, router manager (srm) +1 moreInformation exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager (SRM)...4.3 Medium
- synology router manager, router manager (srm) +1 moreInformation exposure vulnerability in SYNO.Core.ACL in Synology Router Manager (SRM) before 1.1.7...4.3 Medium
- synology router manager, router manager (srm) +1 moreInformation exposure vulnerability in SYNO.FolderSharing.List in Synology Router Manager (SRM)...5.3 Medium
- synology file stationInformation exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2...5.3 Medium
- synology router manager, router manager (srm) +1 moreIncorrect default permissions vulnerability in synouser.conf in Synology Router Manager (SRM)...6.5 Medium
- synology router manager, router manager (srm) +1 moreCommand injection vulnerability in ftpd in Synology Router Manager (SRM) before 1.1.7-6941-1...7.5 High
- synology diskstation manager (dsm), diskstation manager +1 moreIncorrect default permissions vulnerability in synouser.conf in Synology Diskstation Manager (DSM...6.5 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreCommand injection vulnerability in ftpd in Synology Diskstation Manager (DSM) before 6.2-23739-1...7.5 High
- sophos ssl vpn clientLack of administrator control over security vulnerability in client.cgi in Synology SSL VPN...8.8 High
- synology sso serverImproper restriction of rendered UI layers or frames vulnerability in SSOOauth.cgi in Synology...7.1 High
- synology diskstation manager (dsm), diskstation manager +1 moreCross-site scripting (XSS) vulnerability in SYNO.Core.PersonalNotification.Event in Synology...6.5 Medium
- synology web stationMissing custom error page vulnerability in Synology Web Station before 2.1.3-0139 allows remote...7.1 High
- gnu gnutls, fedoraproject fedora, opensuse leap +2 moreIt was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer...5.9 Medium
- red hat web-console, redhat openshift container platform +1 moreWithdrawn Advisory: OpenShift OAuth Server XSS Vulnerability5.0 Medium
- kubernetes, redhat openshift container platform +1 morekubectl cp path traversal6.4 Medium
- kubernetes, redhat openshift container platform +1 moreKubernetes DoS Vulnerability6.5 Medium
libdatetime-timezone-perlDebianlibdatetime-timezone-perl - new upstream versionNo scoretzdataDebiantzdata - new upstream versionNo score- postgresql** DISPUTED ** In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows...7.2 High