CVEs published in April 2019
1,481 vulnerabilities, 188 critical, 17 exploited.
- sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicWall SonicOS and SonicOSv with management enabled system on specific...9.8 Critical
- sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicWall SonicOS and SonicOSv, allow authenticated read-only admin to leave...6.5 Medium
- qasymphony qtest managerqTest Portal in QASymphony qTest Manager 9.0.0 has an Open Redirect via the /portal/loginform...6.1 Medium
- gog galaxy, gog.com gog galaxy +1 moreAn exploitable local privilege elevation vulnerability exists in the file system permissions of...9.3 Critical
- gog galaxy, gog.com gog galaxy +1 moreAn exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG...6.2 Medium
- gog galaxy, gog.com gog galaxy +1 moreAn exploitable local privilege escalation vulnerability exists in the privileged helper tool of...7.1 High
- gog galaxy, gog.com gog galaxy +1 moreAn exploitable local information leak vulnerability exists in the privileged helper tool of GOG...6.2 Medium
- gog galaxy, gog.com gog galaxy +1 moreAn exploitable local privilege elevation vulnerability exists in the file system permissions of...9.3 Critical
- vmware fusion, workstation, workstation and fusion +2 moreVMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) and Fusion (11.x before 11.0.3, 10.x...8.8 High
- vmware fusion, workstation, workstation, vmware fusion +2 moreVMware Workstation (14.x before 14.1.6) and Fusion (10.x before 10.1.6) contain an out-of-bounds...8.8 High
- ktlintHigh severity vulnerability that affects com.github.shyiko.ktlint:ktlint-core8.1 High
- tongda2000 office anywhereAn issue was discovered in TONGDA Office Anywhere 10.18.190121. There is a SQL Injection...9.8 Critical
- ibm spectrum protectIBM Tivoli Storage Manager (IBM Spectrum Protect 8.1.7) could allow a user to restore files and...5.1 Medium
- ibm websphere application serverIBM WebSphere Application Server Admin Console 7.5, 8.0, 8.5, and 9.0 is vulnerable to a...6.5 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External...7.1 High
- ibm infosphere information server, infosphere information server on cloud +1 moreIBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an authenticated user to...3.5 Low
- ibm infosphere information server, infosphere information server on cloud +1 moreIBM InfoSphere Information Server 11.3, 11.5, and 11.7could allow an authenticated user to...4.3 Medium
- ibm api connectIBM API Connect 5.0.0.0 through 5.0.8.5 could display highly sensitive information to an attacker...4.6 Medium
- ibm security privileged identity managerIBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not require that users...5.9 Medium
- ibm security privileged identity managerIBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote...8.8 High
- ibm security privileged identity managerIBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not renew a session...3.1 Low
- ibm security privileged identity managerIBM Security Privileged Identity Manager Virtual Appliance 2.2.1 generates an error message that...4.3 Medium
- ibm security privileged identity managerIBM Security Privileged Identity Manager Virtual Appliance 2.2.1 allows web pages to be stored...4.0 Medium
- ibm security privileged identity managerIBM Security Privileged Identity Manager Virtual Appliance 2.2.1 is vulnerable to cross-site...4.3 Medium
- ibm security privileged identity managerIBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote attacker to...7.7 High
libssh2Debianlibssh2 - regression updateNo score- apache http server, canonical ubuntu linux, debian linux +2 more +4 moreA vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a...5.3 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...7.5 High
- apache http server, canonical ubuntu linux, debian linux +23 more +25 moreIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code...7.8 High
- apache http server, canonical ubuntu linux, debian linux +2 moreA vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the...5.3 Medium
- pivotal concourseConcourse 5.0.0 SQL Injection vulnerability6.8 Medium
- dell emc networker, networker +1 moreEMC Networker Remote Code Execution Vulnerability9.8 Critical
- dlink dsl-3782 firmwareAn issue was discovered on D-Link DSL-3782 devices with firmware 1.01. An OS command injection...8.8 High
- grandstream gxp1610 firmware, gxp1615 firmware, gxp1620 firmware +3 more +5 moreShell Metacharacter Injection in the SSH configuration interface on Grandstream GXP16xx VoIP 1.0...9.8 Critical
- grandstream gxp1610 firmware, gxp1615 firmware, gxp1620 firmware +3 more +5 moreA Malformed Input String to /cgi-bin/delete_CA on Grandstream GXP16xx VoIP 1.0.4.128 phones...9.8 Critical
- grandstream gxp1610 firmware, gxp1615 firmware, gxp1620 firmware +3 more +5 moreA Malformed Input String to /cgi-bin/api-get_line_status on Grandstream GXP16xx VoIP 1.0.4.128...5.3 Medium
- dlink dsl-3782 firmwareA stored XSS vulnerability exists in the web interface on D-Link DSL-3782 devices with firmware 1...5.4 Medium
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600...6.8 Medium
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600...6.8 Medium
- vmware fusionVMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain...8.8 High
- nouveau, canonical ubuntu linux, nvidia geforce gtx 745 firmware +15 more +17 moreA remote denial-of-service vulnerability exists in the way the Nouveau Display Driver (the...7.4 High
- pronestor health monitoringThe Pronestor PNHM (aka Health Monitoring or HealthMonitor) add-in before 8.1.13.0 for Outlook...7.3 High
- micro focus content managerAn unauthenticated file upload vulnerability has been identified in the Web Client component of...7.5 High
- boldgrid w3 total cachepub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to...7.5 High
- gog galaxy, gog.com gog galaxy +1 moreAn exploitable local privilege escalation vulnerability exists in the privileged helper tool of...7.1 High
- vmware vcloud director, vcloud director for service providers (vcd) +1 moreVMware vCloud Director for Service Providers 9.5.x prior to 9.5.0.3 update resolves a Remote...9.8 Critical
- kakaocorp kakaotalk, kakao kakaotalk windows pc messenger +1 moreRemote code execution vulnerability exists in KaKaoTalk PC messenger when user clicks specially...8.8 High
- ctrip apolloServer-Side Request Forgery (SSRF) in com.ctrip.framework.apollo:apollo10.0 Critical
- audiocodes 420hd ip phone firmwareAn issue was discovered on AudioCodes 450HD IP Phone devices with firmware 3.0.0.535.106. The...8.8 High
- 74cmsApplication/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers...9.8 Critical
- Show moreLoading…