CVEs published in April 2019
1,481 vulnerabilities, 188 critical, 17 exploited.
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300-MP Series: IP transit traffic can reach the control plane via loopback interface.6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Specially crafted packets sent to port 111 on any interface triggers responses from the management interface6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Login credentials are vulnerable to brute force attacks through the REST API5.3 Medium
- juniper junos, juniper networks junos os +1 moreSRX Series: Crafted packets destined to fxp0 management interface on SRX340/SRX345 devices can lead to DoS6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: jdhcpd crash upon receipt of crafted DHCPv6 solicit message7.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Firewall filter terms named "internal-1" and "internal-2" being ignored7.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: 'set system ports console insecure' allows root password recovery on OAM volumes6.8 Medium
- juniper junos, juniper networks junos os +1 moreSRX Series: A remote attacker may cause a high CPU Denial of Service to the device when proxy ARP is configured.7.5 High
- juniper service insight, service now +1 moreJunos Space Service Now and Service Insight: Organization username and password stored in plaintext in log files.6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: jdhcpd daemon memory consumption Denial of Service when receiving specific IPv6 DHCP packets.7.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: RPD process crashes due to specific BGP peer restarts condition.7.5 High
- juniper junos, juniper networks junos os +1 moreBGP packets can trigger rpd crash when BGP tracing is enabled.7.5 High
- juniper junos, juniper networks junos os +1 moreQFX5000 Series, EX4300, EX4600: A stack buffer overflow vulnerability in Packet Forwarding Engine manager (FXPC) process9.8 Critical
- sap netweaver process integration, sap se netweaver process integration (messaging system) +1 moreUnder certain conditions the Monitoring Servlet of the SAP NetWeaver Process Integration ...4.3 Medium
- jenkins, oracle communications cloud native core automated test suite, redhat openshift container platform +2 moreImproper Neutralization of Input During Web Page Generation in Jenkins5.4 Medium
- jenkins, oracle communications cloud native core automated test suite, redhat openshift container platform +2 moreInsufficient Session Expiration in Jenkins8.1 High
- mcafee data exchange layer, threat intelligence exchange, mcafee, llc data exchange layer (dxl) platform +1 more +3 moreInformation disclosure vulnerability in McAfee TIE Server and DXL Platform8.2 High
- mikrotik routerosMikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6...8.1 High
- symantec endpoint encryptionSymantec Endpoint Encryption prior to SEE 11.2.1 MP1 may be susceptible to a Privilege Escalation...7.8 High
- gnu glibcThe nscd daemon in the GNU C Library (glibc) before version 2.5 does not close incoming client...5.5 Medium
- gnu glibcThe getgrouplist function in the GNU C library (glibc) before version 2.3.5, when invoked with a...9.8 Critical
- apache airflowApache Airflow vulnerable to Stored XSS4.8 Medium
- apache airflowApache Airflow vulnerable to CSRF Attacks8.8 High
- omron common components, cx-programmer, cx-programmer within cx-one +2 moreWhen processing project files, the application (Omron CX-Programmer v9.70 and prior and Common...6.6 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.5. The "refresh list of helpsites" endpoint of...7.5 High
- joomla joomla\!An issue was discovered in Joomla! before 3.9.5. The Media Manager component does not properly...9.8 Critical
- ui edgeswitch x, ubiquiti networks edgemax +1 moreIn Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an unauthenticated user can use the "local...4.8 Medium
- ui edgeswitch x, ubiquiti networks edgemax +1 moreIn Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an authenticated user can execute arbitrary...8.8 High
- ui edgeswitch x, ubiquiti networks edgemax +1 moreIn Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, a privileged user can execute arbitrary shell...8.8 High
- adobe magento, magento commerce, magento commerce +1 more +3 moreMagento 2 Community Edition SQLi Vulnerability9.8 Critical
- lenovo bios, 330-14igm firmware, 330-15igm firmware +175 more +177 moreIn Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this...3.3 Low
- lenovo bootable generator, bootable usb +1 moreA DLL search path vulnerability was reported in Lenovo Bootable Generator, prior to version Mar...5.3 Medium
- cantemo portalCantemo Portal before 3.2.13, 3.3.x before 3.3.8, and 3.4.x before 3.4.9 has XSS. Leveraging this...9.0 Critical
- hclsoftware bigfix platformIBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on...9.0 Critical
- ibm infosphere information server, infosphere information server on cloud, infosphere metadata asset manager +2 moreIBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to SQL injection. A remote attacker...6.3 Medium
- ibm sterling connect:direct for unix, sterling connect\ +1 moreIBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, and 6.0.0 could allow a user with restricted...6.7 Medium
- apache tomcatApache Tomcat Denial of Service vulnerability7.5 High
- suse rancherRancher Project Members Have Continued Access to Namespaces After Being Removed From Them8.1 High
- suse rancherAccess Control Bypass8.8 High
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, hostapd with sae support +10 more +12 moreThe implementations of EAP-PWD in wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit8.1 High
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, hostapd with sae support +10 more +12 moreThe implementations of EAP-PWD in hostapd EAP Server do not validate the scalar and element values in EAP-pwd-Commit8.1 High
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, hostapd with sae support +4 more +6 moreThe implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit8.1 High
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, debian linux +8 more +10 moreThe implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns3.7 Low
- spip, debian linux +1 moreSPIP 3.1 before 3.1.10 and 3.2 before 3.2.4 allows authenticated visitors to execute arbitrary...8.8 High
- webkitgtk, wpewebkit wpe webkit +1 moreWebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy...5.3 Medium
- sequelizejs sequelizeSQL Injection in sequelize7.5 High
- xmlsoft libxslt, canonical ubuntu linux, debian linux +19 more +21 moreNokogiri vulnerable to libxslt protection mechanism bypass9.8 Critical
- gradle, fedoraproject fedora +1 moreInsecure transport protocol in Gradle5.9 Medium
- palo alto networks globalprotect agent, paloaltonetworks globalprotect +1 moreInformation Disclosure in GlobalProtect Agent2.5 Low
- forticlient, fortinet forticlientmac +1 moreAn improper access control vulnerability in FortiClientMac before 6.0.5 may allow an attacker to...6.1 Medium
- Show moreLoading…