CVEs published in April 2019
1,481 vulnerabilities, 188 critical, 17 exploited.
- apple safariAn inconsistent user interface issue was addressed with improved state management. This issue...5.3 Medium
- apple macos, mac os x +1 moreA null pointer dereference was addressed with improved validation. This issue affected versions...7.5 High
- cisco ios, apple iphone os +1 moreA memory corruption issue was addressed with improved memory handling. This issue affected...8.6 High
- apple safari, iphone os +1 moreA spoofing issue existed in the handling of URLs. This issue was addressed with improved input...7.5 High
- apple icloud, itunes, tvos +3 more +5 moreA memory corruption issue was addressed with improved input validation. This issue affected...8.6 High
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved memory handling. This issue affected...9.8 Critical
- apple safari, iphone os +1 moreAn inconsistent user interface issue was addressed with improved state management. This issue...6.5 Medium
- apple tvos, watchos, iphone os +1 more +3 moreAn out-of-bounds read was addressed with improved input validation. This issue affected versions...7.5 High
- cisco ios, apple iphone os +1 moreA logic issue existed in the handling of call URLs. This issue was addressed with improved state...5.5 Medium
- apple tvos, watchos, iphone os +1 more +3 moreAn out-of-bounds read was addressed with improved bounds checking. This issue affected versions...7.5 High
- apple safariAn inconsistent user interface issue was addressed with improved state management. This issue...6.5 Medium
- apple macos, mac os x +1 moreA permissions issue existed in which execute permission was incorrectly granted. This issue was...5.5 Medium
- apple macos, mac os x +1 moreAn injection issue was addressed with improved validation. This issue affected versions prior to...5.9 Medium
- apple icloud, itunes, safari +3 more +5 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...8.8 High
- apple icloud, itunes, tvos +3 more +5 moreA memory corruption issue was addressed with improved memory handling. This issue affected...7.8 High
- apple itunes, tvos, watchos +2 more +4 moreA race condition was addressed with additional validation. This issue affected versions prior to...7.0 High
- podofo project podofoAn issue was discovered in PoDoFo 0.9.6. The PdfPagesTreeCache class in doc/PdfPagesTreeCache.cpp...5.5 Medium
- http-live-simulator project http-live-simulatorPath Traversal in http-live-simulator7.5 High
- buttle project buttleCross-Site Scripting in buttle6.1 Medium
- centos-webpanel centos web panelCentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1"...4.8 Medium
- ibm db2IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is...8.4 High
- ibm db2IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable to a stack based buffer overflow,...8.4 High
- ibm doors next generation, rational doors next generation +1 moreIBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to...5.4 Medium
- ibm doors next generation, rational doors next generation +1 moreIBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to...4.8 Medium
- ultimatemember ultimate memberA CSRF vulnerability in a logged-in user's profile edit form in the Ultimate Member plugin before...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreFirefox will accept any registered Program ID as an external protocol handler and offer to launch...5.3 Medium
- cisco clamavClamAV Denial of Service Vulnerability7.5 High
- cisco clamav, debian linux, opensuse leap +2 moreClamAV OLE2 File Out-Of-Bounds Write Vulnerability7.5 High
- cisco clamav, debian linux, opensuse leap +2 moreClam AntiVirus PDF Denial of Service Vulnerability7.5 High
- apple tvos, watchos, iphone os +1 more +3 moreA memory corruption issue was addressed with improved validation. This issue affected versions...8.8 High
- apple macos, mac os x +1 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...9.8 Critical
- apple macos, mac os x +1 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...9.8 Critical
- apple macos, mac os x +1 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...9.8 Critical
- apple macos, mac os x +1 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...9.8 Critical
- apple macos, mac os x +1 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...9.8 Critical
- sqlite, apple icloud, iphone os +3 more +5 moreSQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote...7.5 High
- open-emr openemrA vulnerability in flashcanvas.swf in OpenEMR before 5.0.1 Patch 6 could allow an unauthenticated...6.1 Medium
- salesagility suitecrmSuiteCRM before 7.8.28, 7.9.x and 7.10.x before 7.10.15, and 7.11.x before 7.11.3 allows SQL...9.8 Critical
- imagemagickLocaleLowercase in MagickCore/locale.c in ImageMagick before 7.0.8-32 allows out-of-bounds access...6.5 Medium
- 3m detcon sitewatch gateway, detcon sitewatch gateway +1 moreDetcon Sitewatch Gateway, all versions without cellular, Passwords are presented in plaintext in...9.8 Critical
- 3m detcon sitewatch gateway, detcon sitewatch gateway +1 moreDetcon Sitewatch Gateway, all versions without cellular, an attacker can edit settings on the...7.5 High
- ics-cert pr100088 modbus gateway, kunbus pr100088 modbus gateway firmware +1 moreAn attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088 Modbus...8.1 High
- coapthon project coapthonCoAPthon DoS due to Exceptions7.5 High
- coapthon3 project coapthon3CoAPthon3 vulnerable to Deserialization of Untrusted Data7.5 High
- s-cmsS-CMS PHP v1.0 has SQL injection via the 4/js/scms.php?action=unlike id parameter.9.8 Critical
- mkcms project mkcmsMKCMS V5.0 has SQL injection via the bplay.php play parameter.9.8 Critical
- mitel inattend, cmg suite +1 moreThe BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a...9.8 Critical
- codecabin wp go mapsIn the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the...9.8 Critical
- cncf portmap, kubernetes, netapp cloud insights +2 moreCloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network...7.5 High
- sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicWall SonicOS and SonicOSv TLS CBC Cipher allow remote attackers to obtain...7.5 High
- Show moreLoading…