CVEs published in April 2019
1,481 vulnerabilities, 188 critical, 17 exploited.
- tribulant slideshow galleryXSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin...6.1 Medium
- tribulant slideshow gallerySQL Injection exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp...9.8 Critical
- tribulant slideshow galleryXSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin...6.1 Medium
- shimovpn shimo vpnAn exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service...9.3 Critical
- shimovpn shimo vpnAn exploitable privilege escalation vulnerability exists in the Shimo VPN helper service due to...8.8 High
- wpfastestcache wp fastest cacheThe WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in...6.1 Medium
- wpfastestcache wp fastest cacheThe WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the wpfastestcacheoptions...6.1 Medium
- wpfastestcache wp fastest cacheThe WP Fastest Cache plugin 0.8.8.5 for WordPress has CSRF via the wp-admin/admin.php...8.8 High
- wpfastestcache wp fastest cacheThe WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in...6.1 Medium
- vmware esxi, fusion, workstation +2 moreVMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x...6.8 Medium
- vmware esxi, fusion, workstation +2 moreVMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x...5.9 Medium
- vmware esxi, fusion, workstation +2 moreVMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x...6.8 Medium
- ibm api connectIBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to...8.9 High
- ibm api connectIBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection. An...10.0 Critical
- ibm cognos analyticsIBM Cognos Analytics 11 could allow a remote attacker to traverse directories on the system. An...6.4 Medium
- ibm bigfix webui profile management, bigfix webui software distribution +1 moreIBM BigFix WebUI Profile Management 6 and Software Distribution 23 is vulnerable to SQL injection...6.3 Medium
- ibm mq, websphere mq +1 moreIBM WebShere MQ 9.1.0.0, 9.1.0.1, 9.1.1 uses weaker than expected cryptographic algorithms that...5.9 Medium
- f5 big-ip apm, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 morePlatform dependent weakness. This issue only impacts iSeries platforms. On these platforms, in...9.8 Critical
- apache tomcatApache Tomcat OS Command Injection vulnerability8.1 High
- python urllib3Improper Neutralization of CRLF Sequences in urllib3 library for Python6.1 Medium
- bijiadao waimai super cmsIn waimai Super Cms 20150505, there is an XSS vulnerability via the /admin.php/Foodcat/addsave...6.1 Medium
- giteaGitea Remote Code Execution8.8 High
- giteaGitea Improper Input Validation7.5 High
jasperDebianjasper - regression updateNo score- intelliants subrion cmsSubrion CMS vulnerable to CSRF in blog/delete8.8 High
- red hat candlepin, redhat satellite +1 moreIt was discovered that a world-readable log file belonging to Candlepin component of Red Hat...5.5 Medium
- moxa eds-405a firmware, eds-408a firmware, eds-510a firmware +2 more +4 moreMoxa IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A...9.8 Critical
- gpac, debian linux +1 moregf_bin128_parse in utils/os_divers.c in GPAC 0.7.1 has a buffer overflow issue for the crypt...7.8 High
- gpac, debian linux +1 moreGPAC 0.7.1 has a buffer overflow issue in gf_import_message() in media_import.c.7.8 High
- soflyy wp all import** DISPUTED ** There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi...6.1 Medium
- soflyy wp all import** DISPUTED ** There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi...6.1 Medium
- soflyy wp all import** DISPUTED ** There are multiple XSS vulnerabilities in WP All Import plugin 3.4.9 for WordPress...6.1 Medium
- soflyy wp all import** DISPUTED ** There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via Add...6.1 Medium
- soflyy wp all import** DISPUTED ** There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via...6.1 Medium
- soflyy wp all import** DISPUTED ** There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via...6.1 Medium
- pixelite events managerThe Events Manager plugin 5.9.4 for WordPress has XSS via the dbem_event_reapproved_email_body...4.8 Medium
- xerox altalink b8045/b8055/b8065/b8075/b8090, altalink c8030/c8035/c8045/c8055/c8070, colorqube 8700/8900 +20 more +22 moreWithin multiple XEROX products a vulnerability allows remote command execution on the Linux...9.8 Critical
- palo alto networks expedition migration toolCross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition Migration tool 1.1.12...5.4 Medium
- nvidia jetson tx2, jetson tegra tx2 +1 moreNVIDIA Jetson TX2 contains a vulnerability in the kernel driver where input/output control (IOCTL...7.8 High
- nvidia jetson tx2NVIDIA Jetson TX2 contains a vulnerability by means of speculative execution where local and...5.5 Medium
- zephyr getaddrinfo, zephyrproject zephyr +1 moreA buffer overflow has been found in the Zephyr Project's getaddrinfo() implementation in 1.9.0...9.8 Critical
- ivanti connect secure, pulsesecure pulse connect secure, pulse secure desktop client +2 moreIn Pulse Secure Pulse Desktop Client and Network Connect, an attacker could access session tokens...8.1 High
- vpcsbd integrated university management systemAn authentication bypass vulnerability in all versions of ValuePLUS Integrated University...9.8 Critical
- broadcom brcmfmac wifi driver, brcmfmac driver, redhat enterprise linux +2 moreBroadcom brcmfmac driver is vulnerable to a frame validation bypass7.9 High
- broadcom brcmfmac wifi driver, brcmfmac driver, linux kernel +2 moreBroadcom brcmfmac driver is vulnerable to a heap buffer overflow7.9 High
- gemalto sentinel ultrapro, sentinel ultrapro client library +1 moreThe uncontrolled search path element vulnerability in Gemalto Sentinel UltraPro Client Library...7.8 High
- aveva wonderware system platformAVEVA Wonderware System Platform 2017 Update 2 and prior uses an ArchestrA network user account...8.8 High
- inteno iopsysAn issue was discovered in the firewall3 component in Inteno IOPSYS 1.0 through 3.16. The...8.8 High
- mybbA reflected XSS vulnerability in index.php in MyBB 1.8.x through 1.8.19 allows remote attackers...6.1 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before...6.1 Medium
- Show moreLoading…