CVEs published in April 2019
1,481 vulnerabilities, 188 critical, 17 exploited.
- jenkins bitbucket approve, jenkins project bitbucket approve plugin +1 moreJenkins Bitbucket Approve Plugin stores credentials in plain text8.8 High
- jenkins websphere deployer, jenkins project websphere deployer plugin +1 moreJenkins WebSphere Deployer Plugin stores credentials in plain text8.8 High
- jenkins ftp publisher, jenkins project ftp publisher plugin +1 moreJenkins FTP publisher Plugin stores credentials in plain text8.8 High
- jenkins jira issue updater, jenkins project jira issue updater plugin +1 moreJenkins Jira Issue Updater Plugin stores credentials in plain text8.8 High
- jenkins hockeyapp, jenkins project hockeyapp plugin +1 moreJenkins HockeyApp Plugin stores credentials in plain text8.8 High
- jenkins aws elastic beanstalk publisher, jenkins project aws elastic beanstalk publisher plugin +1 moreJenkins AWS Elastic Beanstalk Publisher Plugin stores credentials in plain text8.8 High
- jenkins irc, jenkins project irc plugin +1 moreJenkins IRC Plugin stores credentials in plain text8.8 High
- zohocorp manageengine servicedesk plusInformation leakage vulnerability in the /mc login page in ManageEngine ServiceDesk Plus 9.3...4.3 Medium
- cisco small business rv series router firmware, rv320 firmware, rv325 firmware +2 moreCisco Small Business RV320 and RV325 Routers Weak Credential Encryption Vulnerability5.9 Medium
- linux kernel, netapp element software management node +1 moreThe hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows...5.5 Medium
- cisco small business rv series router firmware, rv320 firmware, rv325 firmware +2 moreCisco Small Business RV320 and RV325 Routers Online Help Reflected Cross-Site Scripting Vulnerability6.1 Medium
- oisf libhtphtp_parse_authorization_digest in htp_parsers.c in LibHTP 0.5.26 allows remote attackers to cause...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables,, qualcomm mdm9150 firmware, mdm9206 firmware +23 more +25 morekernel could return a received message length higher than expected, which leads to buffer...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile,, qualcomm mdm9206 firmware, mdm9607 firmware +19 more +21 moreInterrupt exit code flow may undermine access control policy set forth by secure world can lead...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9206 firmware, mdm9607 firmware +16 more +18 moreTZ App dynamic allocations not protected from XBL loader in Snapdragon Auto, Snapdragon Compute,...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +40 more +42 moreUndefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto,...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 moreInsufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9206 firmware, mdm9607 firmware +6 more +8 moreImproper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto...7.8 High
- oisf suricataSuricata version 4.0.4 incorrectly handles the parsing of an EtherNet/IP PDU. A malformed PDU can...9.8 Critical
- oisf suricata, debian linux +1 moreSuricata version 4.0.4 incorrectly handles the parsing of the SSH banner. A malformed SSH banner...7.5 High
- amazon aws software development kitAmazon AWS SDK <=2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS...7.2 High
- shibboleth identity provider, opensaml java, shibboleth; opensaml java identity provider (idp) +2 moreImproper Validation of Certificate with Host Mismatch in Shibboleth Identity Provider and OpenSAML Java5.9 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +7 more +9 moreA vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a...4.2 Medium
- sony neural network librariesSony Neural Network Libraries reliance on untrusted inputs prior to v1.0.109.8 Critical
- getbootstrap bootstrap-sassBootstrap-sass contains code execution backdoor9.8 Critical
- gnu wget, the gnu projec gnu wget +1 moreBuffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of...9.8 Critical
- redhat libvirt, fedoraproject fedora, opensuse leap +2 moreAn incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission...5.4 Medium
- axiomsl axiomAxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier is vulnerable to a Session Fixation...8.8 High
- axiomsl axiomAxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier allows remote attackers to inject...6.1 Medium
- axiomsl axiomAxiomSL's Axiom java applet module (used for editing uploaded Excel files and associated Java RMI...9.8 Critical
- axway vordel xml gatewayVordel XML Gateway (acquired by Axway) version 7.2.2 could allow remote attackers to cause a...7.5 High
- eclipse hawkbit, the eclipse foundation eclipse hawkbit +1 moreCleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBit8.1 High
- apple cupsThe session cookie generated by the CUPS web interface was easy to guess on Linux, allowing...5.9 Medium
- apple tvos, watchos, iphone os +1 more +3 moreA memory corruption issue was addressed with improved memory handling. This issue affected...7.8 High
- apple mac os xA configuration issue was addressed with additional restrictions. This issue affected versions...7.8 High
- apple macos, mac os x +1 moreA privacy issue in the handling of Open Directory records was addressed with improved indexing....3.3 Low
- apple iphone os, mac os x +1 moreA memory corruption issue was addressed with improved memory handling. This issue affected...7.8 High
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved memory handling. This issue affected...7.8 High
- apple macos, mac os x +1 moreA validation issue was addressed with improved input sanitization. This issue affected versions...5.5 Medium
- apple tvos, watchos, iphone os +1 more +3 moreA memory corruption issue was addressed with improved input validation. This issue affected...7.8 High
- apple tvos, watchos, iphone os +1 more +3 moreA denial of service issue was addressed by removing the vulnerable code. This issue affected...6.5 Medium
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved input validation. This issue affected...7.8 High
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved memory handling. This issue affected...7.8 High
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved memory handling. This issue affected...7.8 High
- apple tvos, watchos, iphone os +1 more +3 moreA memory corruption issue was addressed with improved state management. This issue affected...7.8 High
- cisco ios, apple iphone os +1 moreThis issue was addressed with improved entitlements. This issue affected versions prior to iOS 12...3.3 Low
- apple safari, iphone os +1 more"Clear History and Website Data" did not clear the history. The issue was addressed with improved...4.3 Medium
- apple icloud, itunes, safari +1 more +3 moreA logic issue was addressed with improved state management. This issue affected versions prior to...4.3 Medium
- apple icloud, itunes, safari +1 more +3 moreA logic issue was addressed with improved validation. This issue affected versions prior to iOS...6.5 Medium
- apple supportAnalytics data was sent using HTTP rather than HTTPS. This was addressed by sending analytics...4.3 Medium
- Show moreLoading…