CVEs published in April 2019
1,481 vulnerabilities, 188 critical, 17 exploited.
- auth0 auth0-wcf-service-jwtCritical severity vulnerability that affects Auth0-WCF-Service-JWT9.8 Critical
- iobit smart defragSmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is...5.5 Medium
- cmsmadesimple cms made simpleAn issue was discovered in CMS Made Simple 2.2.8. In the module FrontEndUsers (in the file class...8.8 High
- jfrog artifactoryAn issue was discovered in JFrog Artifactory 6.7.3. By default, the access-admin account is used...9.8 Critical
- zarafa webaccessUnauthenticated reflected cross-site scripting (XSS) exists in Zarafa Webapp 2.0.1.47791 and...6.1 Medium
- silverstripeSilverstripe Framework SQLi Vulnerability9.8 Critical
- dasannetworks h660rm firmwareThe Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to...8.8 High
- dasannetworks h660rm firmwareDASAN H660RM devices with firmware 1.03-0022 use a hard-coded key for logs encryption. Data...7.5 High
- dasannetworks h660rm firmwarediag_tool.cgi on DASAN H660RM GPON routers with firmware 1.03-0022 lacks any authorization check,...9.1 Critical
- capsule technologies smartlinx neuron 2, capsuletech smartlinx neuron 2 firmware +1 moreA restricted environment escape vulnerability exists in the “kiosk mode” function of Capsule...7.6 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager +1 moreOn BIG-IP versions 14.0.0-14.0.0.4, 13.0.0-13.1.1.1, 12.1.0-12.1.4, 11.6.0-11.6.3.4, and 11.5.1...8.6 High
- nvidia jetson tx2NVIDIA Jetson TX2 contains a vulnerability in the kernel driver (on all versions prior to R28.3)...6.1 Medium
- nvidia jetson tx1 and tx2, jetson tx1, jetson tx2 +2 moreNVIDIA Jetson TX1 and TX2 contain a vulnerability in the Linux for Tegra (L4T) operating system ...9.1 Critical
- uipath orchestratorUiPath Orchestrator through 2018.2.4 allows any authenticated user to change the information of...8.8 High
- d-link dap-1530 firmware, dap-1610 firmware, dwr-116 firmware +5 more +7 moreOn D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1...9.8 Critical
- hp laserjet enterprise printers, hp pagewide enterprise printers, hp laserjet managed printers, hp officejet enterprise printers, color laserjet cm4540 mfp firmware, color laserjet enterprise cp5525 firmware +141 more +143 moreHP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers,...9.8 Critical
- linux kernel, redhat enterprise linux +1 moreIt was found that the net_dma code in tcp_recvmsg() in the 2.6.32 kernel as shipped in RHEL6 is...6.1 Medium
- redhat satellite, red hat qpid-dispatch-router +1 moreA lack of access control was found in the message queues maintained by Satellite's QPID broker...8.0 High
- verizon fios quantum gateway (g1100), fios quantum gateway g1100 firmware +1 moreInformation disclosure vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02...7.5 High
- verizon fios quantum gateway (g1100), fios quantum gateway g1100 firmware +1 moreAuthentication Bypass by Capture-replay vulnerability in Verizon Fios Quantum Gateway (G1100)...7.5 High
- verizon fios quantum gateway (g1100), fios quantum gateway g1100 firmware +1 moreRemote command injection vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version...7.2 High
- mkcms project mkcmsMKCMS V5.0 has a CSRF vulnerability to add a new admin user via the ucenter/userinfo.php URI.8.8 High
- fastadminFastAdmin V1.0.0.20190111_beta has a CSRF vulnerability to add a new admin user via the admin...8.8 High
- apple icloud, icloud for windows, ios +6 more +8 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ios +6 more +8 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ios +6 more +8 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ios +5 more +7 moreA logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2,...6.1 Medium
- apple icloud, icloud for windows, ios +9 more +11 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS...8.8 High
- apple icloud, icloud for windows, ios +9 more +11 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS...8.8 High
- apple icloud, icloud for windows, ios +8 more +10 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...8.8 High
- apple icloud, icloud for windows, ios +5 more +7 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ios +5 more +7 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ios +6 more +8 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ios +10 more +12 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12...8.8 High
- linux kernel** DISPUTED ** The Linux kernel through 5.0.7, when CONFIG_IA32_AOUT is enabled and ia32_aout is...2.5 Low
- linux kernelThe Linux kernel before 4.8 allows local users to bypass ASLR on setuid programs (such as /bin/su...4.7 Medium
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and...7.5 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and...9.8 Critical
- paessler prtg network monitorPRTG before 19.1.49.1966 has Cross Site Scripting (XSS) in the WEBGUI.6.1 Medium
wgetMageiaUpdated wget packages fix security vulnerabilityNo score- lighttpd** DISPUTED ** lighttpd before 1.4.54 has a signed integer overflow, which might allow remote...9.8 Critical
- kentico xperienceKentico CMS before 11.0.45 allows unrestricted upload of a file with a dangerous type.8.8 High
- sap crystal reports, sap se crystal reports for visual studio +1 moreThe .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010)...9.8 Critical
- sap hanaSLD Registration in SAP HANA (fixed in versions 1.0, 2.0) does not sufficiently validate an XML...6.0 Medium
- sap netweaver process integration, sap se netweaver process integration (adapter engine) +1 moreSAP NetWeaver Process Integration (Adapter Engine), fixed in versions 7.10 to 7.11, 7.30, 7.31, 7...7.1 High
- sap netweaver process integration, sap se netweaver process integration (runtime workbench) +1 moreSeveral web pages in SAP NetWeaver Process Integration (Runtime Workbench), fixed in versions 7...5.3 Medium
- sap se basis, sap business application software integrated solution +1 moreABAP BASIS function modules INST_CREATE_R3_RFC_DEST, INST_CREATE_TCPIP_RFCDEST, and...8.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX5000 series: Kernel crash (vmcore) upon receipt of a specific packet on fxp0 interface7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: RPD process crashes upon receipt of a specific SNMP packet7.5 High
- juniper identity management serviceIncorrect messages from Juniper Identity Management Service (JIMS) can trigger Denial of Service or firewall bypass conditions for SRX series devices5.7 Medium
- Show moreLoading…