CVEs published in April 2019
1,481 vulnerabilities, 188 critical, 17 exploited.
- parsedownParsedown Class-Name Injection8.1 High
- roundup-tracker roundup, debian linux +1 moreModerate severity vulnerability that affects roundup6.1 Medium
typemapcrates.iotypemap is UnmaintainedNo score- palletsprojects jinja, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreJinja2 sandbox escape via string formatting8.6 High
- trendmicro apex one, business security, officescan +3 more +5 moreA directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0),...7.5 High
- trend micro interscan web security virtual applianceA vulnerability in Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 could...8.8 High
- glory-global rbw-100 firmwareAn issue was discovered on Glory RBW-100 devices with firmware ISP-K05-02 7.0.0. An unrestricted...7.2 High
- glory-global rbw-100 firmwareAn issue was discovered on Glory RBW-100 devices with firmware ISP-K05-02 7.0.0. A hard-coded...9.8 Critical
- advantech webaccess, webaccess/scada +1 moreAdvantech WebAccess/SCADA, Versions 8.3.5 and prior. An improper access control vulnerability may...7.5 High
- advantech webaccess, webaccess/scada +1 moreAdvantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple stack-based buffer overflow...9.8 Critical
- advantech webaccess, webaccess/scada +1 moreAdvantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple command injection vulnerabilities,...9.8 Critical
- ukcmsA CSRF Issue that can add an admin user was discovered in UKcms v1.1.10 via admin.php/admin/role...8.8 High
- salicru slc-20-cube3\(5\)A reflected HTML injection vulnerability on Salicru SLC-20-cube3(5) devices running firmware...6.1 Medium
- ivanti workspace controlAn issue was discovered in Ivanti Workspace Control before 10.3.90.0. Local authenticated users...7.8 High
- uniqkey password managerUniqkey Password Manager 1.14 contains a vulnerability because it fails to recognize the...8.8 High
- salesagility suitecrmAn XSS combined with CSRF vulnerability discovered in SalesAgility SuiteCRM 7.x before 7.8.24 and...6.1 Medium
- mi browser, mint browser +1 moreA URL spoofing vulnerability was found in all international versions of Xiaomi Mi browser 10.5.6...6.5 Medium
- boltcms boltBolt Cross Site Request Forgery (CSRF)8.8 High
- teeworldsIn Teeworlds 0.7.2, there is an integer overflow in CDataFileReader::Open() in engine/shared...9.8 Critical
- teeworldsIn Teeworlds 0.7.2, there is a failed bounds check in CDataFileReader::GetData() and...9.8 Critical
- teeworldsIn Teeworlds 0.7.2, there is an integer overflow in CMap::Load() in engine/shared/map.cpp that...9.8 Critical
- openstack neutron, redhat openstack +1 moreOpenStack Neutron overlapping security group rules prevents compute node network configuration6.5 Medium
- freedesktop popplerAn issue was discovered in Poppler 0.74.0. There is a NULL pointer dereference in the function...6.5 Medium
- freedesktop popplerAn issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function...6.5 Medium
- tryton trytond, debian linux +1 moreTryton Improper Access Control4.3 Medium
- freedesktop popplerAn issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function...8.8 High
- rockwellautomation powerflex 525 ac drives firmwareRockwell Automation PowerFlex 525 AC Drives 5.001 and earlier allow remote attackers to cause a...9.8 Critical
- raspberrypi raspberry pi 3 model b\+ firmwareThe ARM-based hardware debugging feature on Raspberry Pi 3 module B+ and possibly other devices...9.8 Critical
- rockwell automation rslinx classic, rockwellautomation rslinx +1 moreA vulnerability was found in Rockwell Automation RSLinx Classic versions 4.10.00 and prior. An...9.8 Critical
- pimcorePimcore Unserialize Remote Code Execution8.8 High
- combodo teemipA command injection vulnerability exists in TeemIp versions before 2.4.0. The new_config...7.2 High
- gitlabGitLab Community and Enterprise Edition before 11.3.14, 11.4.x before 11.4.12, and 11.5.x before...7.5 High
- avaya ip office contact centerAvaya IPOCC WebUI SQL Injection9.9 Critical
- jupyter notebookJupyter Notebook open redirect vulnerability6.1 Medium
- airsonic project airsonicXXE issue in Airsonic before 10.1.2 during parse.9.8 Critical
- jenkins cloudcoreo deploytime, jenkins project cloudcoreo deploytime plugin +1 moreJenkins CloudCoreo DeployTime Plugin stores credentials in plain text8.8 High
- jenkins koji, jenkins project koji plugin +1 moreJenkins Koji Plugin stores credentials in plain text8.8 High
- jenkins sametime, jenkins project sametime plugin +1 moreJenkins Sametime Plugin stores credentials in plain text8.8 High
- jenkins serena sra deploy, jenkins project serena sra deploy plugin +1 moreJenkins Serena SRA Deploy Plugin stores credentials in plain text8.8 High
- jenkins crittercism-dsym, jenkins project crittercism-dsym plugin +1 moreJenkins crittercism-dsym Plugin stores API key in plain text8.8 High
- jenkins kmap, jenkins project kmap plugin +1 moreJenkins Kmap Plugin stores credentials in plain text8.8 High
- jenkins kmap, jenkins project kmap plugin +1 moreMissing permission check in Jenkins Kmap Plugin allow SSRF6.5 Medium
- jenkins kmap, jenkins project kmap plugin +1 moreCSRF vulnerability in Jenkins Nomad Plugin allow SSRF6.5 Medium
- jenkins netsparker cloud scan, jenkins project netsparker cloud scan plugin +1 moreJenkins Netsparker Enterprise Scan Plugin stored credentials in plain text8.8 High
- jenkins netsparker cloud scan, jenkins project netsparker cloud scan plugin +1 moreMissing permission check in Jenkins Netsparker Cloud Scan Plugin6.5 Medium
- jenkins netsparker cloud scan, jenkins project netsparker cloud scan plugin +1 moreCSRF vulnerability in Jenkins Netsparker Enterprise Scan Plugin6.5 Medium
- jenkins jabber server, jenkins project jabber server plugin +1 moreJenkins Jabber Server Plugin stores credentials in plain text8.8 High
- jenkins youtrack-plugin, jenkins project youtrack-plugin plugin +1 moreJenkins youtrack-plugin Plugin stored credentials in plain text8.8 High
- jenkins deployhub, jenkins project deployhub plugin +1 moreJenkins DeployHub Plugin stores credentials in plain text8.8 High
- jenkins minio storage, jenkins project minio storage plugin +1 moreJenkins Minio Storage Plugin stores credentials in plain text8.8 High
- Show moreLoading…