CVEs published in April 2019
1,481 vulnerabilities, 188 critical, 17 exploited.
- utimaco securityserver cse firmwareIncorrect Access Controls of Security Officer (SO) in PKCS11 R2 provider that ships with the...6.5 Medium
- fortinet fortiosAn information disclosure vulnerability in Fortinet FortiOS 6.0.1, 5.6.7 and below allows...5.3 Medium
- eclipse kura, the eclipse foundation eclipse kura +1 moreIn Eclipse Kura versions up to 4.0.0, the Web UI package and component services, the Artemis...7.5 High
- eclipse kura, the eclipse foundation eclipse kura +1 moreIn Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its...5.3 Medium
- eclipse kura, the eclipse foundation eclipse kura +1 moreIn Eclipse Kura versions up to 4.0.0, the SkinServlet did not checked the path passed during...5.3 Medium
- odoo, odoo enterprise +1 moreImproper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote...8.1 High
- odoo, odoo community, enterprise +2 moreCross-site scripting vulnerability in the Discuss App of Odoo Community 12.0 and earlier, and...5.9 Medium
- odoo, odoo community, enterprise +2 moreImproper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo...6.5 Medium
- fortinet fortiosA privilege escalation vulnerability in Fortinet FortiOS 6.0.0 to 6.0.6, 5.6.0 to 5.6.10, 5.4 and...7.2 High
- spring security, vmware spring security, debian linux +2 moreInsecure Randomness When Using a SecureRandom Instance Constructed by Spring Security3.8 Low
- rapid7 insightvmRapid7 InsightVM Stored Credential Exposure3.1 Low
- samba, fedoraproject fedora, synology directory server +4 more +6 moreA vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10...6.1 Medium
- the foreman foreman, redhat satellite +1 moreIn Foreman it was discovered that the delete compute resource operation, when executed from the...4.9 Medium
- advantech webaccessAdvantech WebAccess 8.3.4 allows unauthenticated, remote attackers to delete arbitrary files via...7.5 High
- advantech webaccessAdvantech WebAccess 8.3.4 is vulnerable to file upload attacks via unauthenticated RPC call. An...9.8 Critical
- gatship web moduleGAT-Ship Web Module before 1.40 suffers from a vulnerability allowing authenticated attackers to...8.8 High
- zyxel nas326 firmwareAn XSS vulnerability in the Zyxel NAS 326 version 5.21 and below allows a remote authenticated...5.4 Medium
- zyxel nas326 firmwareAn eval injection vulnerability in the Python web server routing on the Zyxel NAS 326 version 5...8.8 High
- zyxel nas326 firmwareA directory traversal vulnerability in the file browser component on the Zyxel NAS 326 version 5...6.5 Medium
- zyxel nas326 firmwareShell Metacharacter Injection in the package installer on Zyxel NAS 326 version 5.21 and below...8.8 High
- zyxel nas326 firmwareA plaintext password vulnerability in the Zyxel NAS 326 through 5.21 allows an elevated...8.8 High
- wireshark, fedoraproject fedora +1 moreIn Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet...7.5 High
- wireshark, fedoraproject fedora +1 moreIn Wireshark 3.0.0, the Rbm dissector could go into an infinite loop. This was addressed in epan...7.5 High
- wireshark, fedoraproject fedora +1 moreIn Wireshark 3.0.0, the GSUP dissector could go into an infinite loop. This was addressed in epan...7.5 High
- wireshark, fedoraproject fedora +1 moreIn Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop. This was addressed...7.5 High
- microsoft windows, windows server, windows 10 +7 more +9 moreAn information disclosure vulnerability exists when the Windows kernel fails to properly...5.5 Medium
- microsoft internet explorer, internet explorer 10, internet explorer 11 +2 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists in the way that the ActiveX Data objects (ADO)...7.5 High
- microsoft win32k, windows, windows server +13 more +15 moreAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to...7.8 High
- microsoft lync server, skype for business server, lync server 2013 +1 more +3 moreA spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly...6.1 Medium
- microsoft win32k, windows, windows server +2 more +4 moreAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to...7.8 High
- microsoft visual studio 2017A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer...7.8 High
- canonical ubuntu server, ubuntu linux +1 moreA security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic...5.1 Medium
- microsoft windows, windows server, windows 10 +7 more +9 moreAn information disclosure vulnerability exists in the way that the Windows SMB Server handles...6.5 Medium
- microsoft edgeA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft chakracore, edge +1 moreHigh severity vulnerability that affects Microsoft.ChakraCore7.5 High
- microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists in the way that the VBScript engine handles objects...8.8 High
- microsoft chakracore, edge +1 moreHigh severity vulnerability that affects Microsoft.ChakraCore7.5 High
- microsoft windows, windows server, windows 10 +7 more +9 moreAn information disclosure vulnerability exists when the Windows GDI component improperly...6.5 Medium
- microsoft windows, windows server, windows 10 +7 more +9 moreAn information disclosure vulnerability exists when the Windows kernel improperly handles objects...4.7 Medium
- microsoft windows, windows server, windows 10 +2 more +4 moreAn information disclosure vulnerability exists when the win32k component improperly provides...5.5 Medium
- microsoft team foundation server, team foundation server 2018 +1 moreA Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly...5.4 Medium
- microsoft sharepoint enterprise server, sharepoint foundation +1 moreA cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not...5.4 Medium
- microsoft edgeA remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in...7.5 High
- microsoft edge, internet explorer 10, internet explorer 11 +1 more +3 moreA remote code execution vulnerability exists in the way that Microsoft browsers access objects in...7.5 High
- microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser...8.8 High
- microsoft nuget, .net core sdk, visual studio +6 more +8 moreA tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow...6.5 Medium
- microsoft windows, windows server, windows 10 +7 more +9 moreAn information disclosure vulnerability exists when the Windows Print Spooler does not properly...5.5 Medium
- microsoft internet explorer, internet explorer 10, internet explorer 11 +2 moreA security feature bypass vulnerability exists when Internet Explorer fails to validate the...6.5 Medium
- microsoft edge, internet explorer 11, internet explorer +2 moreA security feature bypass vulnerability exists when Microsoft browsers improperly handle requests...4.3 Medium
- Show moreLoading…