CVEs published in April 2019
1,481 vulnerabilities, 188 critical, 17 exploited.
- microsoft internet explorer, internet explorer 10, internet explorer 11 +2 moreA remote code execution vulnerability exists when Internet Explorer improperly accesses objects...7.5 High
- microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists in the way that comctl32.dll handles objects in...8.8 High
- microsoft windows, windows server, windows 10 +2 more +4 moreAn elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file...7.8 High
- microsoft windows, windows server, windows 10 +7 more +9 moreAn information disclosure vulnerability exists when the Windows kernel improperly initializes...5.5 Medium
- microsoft internet explorer, internet explorer 11 +1 moreA security feature bypass vulnerability exists when Internet Explorer VBScript execution policy...4.3 Medium
- microsoft chakracore, edge +1 moreHigh severity vulnerability that affects Microsoft.ChakraCore7.5 High
proftpd-dfsgDebianproftpd-dfsg - security updateNo score- linux kernel, canonical ubuntu linux, fedoraproject fedora +8 more +10 moreA flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access...6.7 Medium
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash...7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was...7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This...7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was...7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash....7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This...7.5 High
- microsoft windows, windows server, windows 10 +2 more +4 moreA memory corruption vulnerability exists in the Windows DHCP client when an attacker sends...9.8 Critical
- microsoft windows, windows server, windows 10 +2 more +4 moreA memory corruption vulnerability exists in the Windows DHCP client when an attacker sends...9.8 Critical
- microsoft windows, windows server, windows 10 +2 more +4 moreA denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to...6.8 Medium
- microsoft windows, windows server, windows 10 +7 more +9 moreAn information disclosure vulnerability exists when the Windows kernel improperly handles objects...5.5 Medium
- microsoft windows, windows server, windows 10 1507 +14 more +16 moreAn information disclosure vulnerability exists in the way that the Windows SMB Server handles...6.5 Medium
- microsoft windows, windows server, windows 10 +7 more +9 moreAn information disclosure vulnerability exists in the way that the Windows SMB Server handles...6.5 Medium
- microsoft windows, windows server, windows 10 +2 more +4 moreA memory corruption vulnerability exists in the Windows DHCP client when an attacker sends...9.8 Critical
- microsoft chakracore, edge, internet explorer 10 +3 more +5 moreMicrosoft.ChakraCore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor6.5 Medium
- microsoft officeA remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine...7.8 High
- microsoft windows, windows server, windows 10 +7 more +9 moreA denial of service vulnerability exists when Windows improperly handles objects in memory, aka ...5.5 Medium
- microsoft windows, windows server, windows 10 +7 more +9 moreAn information disclosure vulnerability exists when the Windows kernel improperly handles objects...5.5 Medium
- microsoft edgeAn elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce...6.8 Medium
- microsoft internet explorer, internet explorer 11 +1 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft windows, windows server, windows 10 +2 more +4 moreAn elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem...7.8 High
- microsoft windows, windows server, windows 7 +1 more +3 moreAn elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default...5.9 Medium
- microsoft windows, windows server, windows 10 +2 more +4 moreAn elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem...7.8 High
- microsoft windows, windows server, windows 10 +6 more +8 moreA denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server...6.8 Medium
- microsoft windows, windows server, windows 10 +2 more +4 moreAn elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem...7.8 High
- microsoft windows, windows server, windows 10 +2 more +4 moreAn elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem...7.8 High
- microsoft windows, windows server, windows 10 +2 more +4 moreAn elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem...7.8 High
- microsoft windows, windows server, windows 10 +2 more +4 moreA denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to...6.8 Medium
- microsoft windows, windows server, windows 10 +2 more +4 moreAn elevation of privilege vulnerability exists when the Windows kernel fails to properly handle...7.8 High
- microsoft internet explorer 10, internet explorer 11, internet explorer 9 +1 more +3 moreA remote code execution vulnerability exists in the way that the VBScript engine handles objects...7.5 High
- microsoft internet explorer 10, internet explorer 11, internet explorer 9 +1 more +3 moreA remote code execution vulnerability exists in the way that the VBScript engine handles objects...7.5 High
- microsoft internet explorer 10, internet explorer 11, internet explorer +2 moreA remote code execution vulnerability exists in the way that the VBScript engine handles objects...7.5 High
- microsoft chakracore, internet explorer, edge +2 moreHigh severity vulnerability that affects Microsoft.ChakraCore7.5 High
- microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft windows, windows server, windows 10 +7 more +9 moreAn information disclosure vulnerability exists when the Windows GDI component improperly...6.5 Medium
- microsoft edgeA security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge...5.3 Medium
- microsoft chakracore, edge +1 moreHigh severity vulnerability that affects Microsoft.ChakraCore7.5 High
- microsoft chakracore, edge, internet explorer 11 +1 more +3 moreHigh severity vulnerability that affects Microsoft.ChakraCore7.5 High
- microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists in the way that Windows Deployment Services TFTP...7.5 High
- microsoft chakracore, edge +1 moreHigh severity vulnerability that affects Microsoft.ChakraCore7.5 High
- freedesktop poppler, fedoraproject fedora +1 moreFontInfoScanner::scanFonts in FontInfo.cc in Poppler 0.75.0 has infinite recursion, leading to a...6.5 Medium
- cacti, debian linux +1 moreIn clearFilter() in utilities.php in Cacti before 1.2.3, no escaping occurs before printing out...5.4 Medium
- saitoha libsixelThe load_pnm function in frompnm.c in libsixel.a in libsixel 1.8.2 has infinite recursion.5.5 Medium
- Show moreLoading…