CVEs published in April 2019
1,481 vulnerabilities, 188 critical, 17 exploited.
- microsoft asp.net coreA denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka ...7.5 High
- microsoft windows, windows server, windows 10 +2 more +4 moreAn information disclosure vulnerability exists when the win32k component improperly provides...5.5 Medium
- microsoft windows admin centerAn elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates...9.8 Critical
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft windows, windows server, windows 10 +7 more +9 moreAn elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV...7.8 High
- microsoft win32k, windows, windows server +15 more +17 moreAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to...7.8 High
- microsoft windows, windows server, windows 10 +7 more +9 moreAn information disclosure vulnerability exists when the Windows GDI component improperly...6.5 Medium
- microsoft office, office 365 proplus +1 moreA remote code execution vulnerability exists when Microsoft Office fails to properly handle...7.8 High
- microsoft windows, windows server, windows 10 +7 more +9 moreAn elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV...5.5 Medium
- microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser...8.8 High
- microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists when OLE automation improperly handles objects in...8.8 High
- microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser...8.8 High
- microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser...8.8 High
- microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser...8.8 High
- microsoft windows, windows server, windows 10 +6 more +8 moreA remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser...8.8 High
- microsoft windows, windows server, windows 10 +2 more +4 moreAn elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) Server...9.8 Critical
- microsoft edge, internet explorer 10, internet explorer 11 +2 more +4 moreA tampering vulnerability exists when Microsoft browsers do not properly validate input under...6.5 Medium
- microsoft internet explorer, internet explorer 10, internet explorer 11 +2 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft internet explorer, internet explorer 10, internet explorer 11 +2 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft edge, chakracore +1 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft windows, windows server, windows 10 +7 more +9 moreAn elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem ...7.8 High
- microsoft windows, windows server, windows 10 +7 more +9 moreA security feature bypass vulnerability exists in Windows which could allow an attacker to bypass...7.8 High
- microsoft windows, windows server, windows 10 +7 more +9 moreAn elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV...7.8 High
- microsoft windows, windows server, windows 10 +7 more +9 moreAn elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV...7.8 High
- microsoft windows, windows server, windows 10 +5 more +7 moreAn information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles...7.5 High
- microsoft windows, windows server, windows 10 +2 more +4 moreAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to...7.8 High
- vmware horizonVMware Horizon Connection Server (7.x before 7.8, 7.5.x before 7.5.2, 6.x before 6.2.8) contains...5.3 Medium
- vmware workstationVMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle...8.8 High
- vmware workstationVMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle...8.8 High
- autodesk advance steel, autocad, autocad architecture +9 more +11 moreAn exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance...7.8 High
- autodesk advance steel, autocad, autocad architecture +9 more +11 moreAn exploitable heap overflow vulnerability in the DXF-parsing functionality in Autodesk Advance...7.8 High
- autodesk advance steel, autocad, autocad architecture +9 more +11 moreAn attacker may convince a victim to open a malicious action micro (.actm) file that has...7.8 High
- autodesk advance steel, autocad, autocad architecture +9 more +11 moreAn exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance...7.8 High
- paloaltonetworks expedition migration tool, palo alto networks expedition migration tool +1 moreThe Expedition Migration tool 1.1.6 and earlier may allow an authenticated attacker to run...5.4 Medium
- norton password manager, symantec norton password manager +1 moreNorton Password Manager may be susceptible to an address spoofing issue. This type of issue may...7.5 High
- forcepoint email securityA stack-based buffer overflow in Forcepoint Email Security version 8.5 allows an attacker to...9.8 Critical
- hewlett packard enterprise hpe integrated lights-out 5 (ilo 5) for hpe gen10 servers, hp integrated lights-out 5 firmware +1 moreA remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE...6.1 Medium
- hp service pack for proliantA local access restriction bypass vulnerability was identified in HPE Service Pack for ProLiant ...7.8 High
- roxyfileman roxy filemanRoxy Fileman 1.4.5 allows attackers to execute renamefile.php (aka Rename File), createdir.php ...9.8 Critical
- solideo systems co,ltd architectural information systemArchitectural Information System 1.0 and earlier versions have a Stack-based buffer overflow,...7.4 High
- wpape ape galleryThe wpape APE GALLERY plugin 1.6.14 for WordPress has stored XSS via the classGallery.php...6.1 Medium
- silverpeasSilverpeas 5.15 through 6.0.2 is affected by an authenticated Directory Traversal vulnerability...9.9 Critical
- tibco activematrix businessworksTIBCO ActiveMatrix BusinessWorks Fails To Properly Enforce Authentication9.1 Critical
- kmplayer, fedoraproject fedora +1 moreKMPlayer Subtitles parser Heap Overflow Vulnerability7.8 High
- cyberark endpoint privilege managerCyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker (who is able to...7.8 High
- sophos ipsec client, ncp-e ncp secure entry client +1 moreThe Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering (www.ncp-e...8.1 High
- isc bind, redhat enterprise linux server aus, enterprise linux server eus +1 more +3 moreA denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker...7.5 High
- search-guard search guardThe floragunn Search Guard plugin before 6.x-16 for Kibana allows URL injection for login...6.1 Medium
- Show moreLoading…