CVEs published in April 2019
1,481 vulnerabilities, 188 critical, 17 exploited.
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before...6.5 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 10.x (starting from 10.8) and...9.8 Critical
- fortinet fortisiemAn information disclosure vulnerability in Fortinet FortiSIEM 5.2.0 and below versions exposes...7.2 High
- shimovpn shimo vpnAn exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service...9.3 Critical
- beyondtrust avecto defendpointAvecto Defendpoint 4 prior to 4.4 SR6 and 5 prior to 5.1 SR1 has an Untrusted Search Path...7.5 High
- shimovpn shimo vpnAn exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service...7.1 High
- shimovpn shimo vpnAn exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service...9.3 Critical
- shimovpn shimo vpnAn exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service...9.0 Critical
- apache pdfbox, james, fedoraproject fedora +11 more +13 moreVulnerability that affects org.apache.pdfbox:pdfbox9.8 Critical
- check point zonealarm point zonealarm, checkpoint zonealarm +1 moreSome of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where...5.5 Medium
- check point zonealarm point zonealarm, checkpoint zonealarm +1 moreA hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the...7.1 High
- deltaww cncsoft screeneditor, ics-cert delta industrial automation cncsoft +1 moreDelta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple...7.8 High
- deltaww cncsoft screeneditor, ics-cert delta industrial automation cncsoft +1 moreDelta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple...7.8 High
- deltaww cncsoft screeneditor, ics-cert delta industrial automation cncsoft +1 moreDelta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple out...5.5 Medium
- abb 1sap120600r0071 pm554-tp-eth, pm554-tp-eth firmware, abb, phoenix contact, schneider electric, siemens, and wago 2700974 ilc 151 eth +19 more +21 moreABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers,...7.5 High
- cisco duo network gateway, duo security network gateway +1 moreMultiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal7.7 High
- omniauth saml, omnitauth-saml +1 moreMultiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal7.7 High
- clever saml2-jsMultiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal7.7 High
- onelogin ruby-samlMultiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal7.7 High
- onelogin pythonsamlMultiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal7.7 High
- siemens spectrum power 4, siemens ag spectrum power™ 4 +1 moreA vulnerability has been identified in Spectrum Power 4 (with Web Office Portal). An attacker...9.8 Critical
- siemens simatic cp 443-1 opc ua, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants), simatic hmi comfort outdoor panels 7" & 15" (incl. siplus variants) +37 more +39 moreA vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP...7.5 High
- siemens sinema remote connect serverA vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Due to...8.8 High
- siemens simatic cp 1604, simatic cp 1616, cp1604 firmware +141 more +143 moreA vulnerability has been identified in RFID 181EIP, SIMATIC CP 1604, SIMATIC CP 1616, SIMATIC CP...7.5 High
- siemens simatic s7-300 cpus, simatic s7-300 firmware, simatic s7-300f firmware +2 more +4 moreA vulnerability has been identified in SIMATIC S7-300 CPUs (All versions < V3.X.16). The affected...7.5 High
- siemens simatic s7-1500 cpu, simatic s7-1500 firmware +1 moreA vulnerability has been identified in SIMATIC S7-1500 CPU (All versions >= V2.0 and < V2.5),...7.5 High
- siemens simatic s7-1500 cpu, simatic s7-1500 firmware +1 moreA vulnerability has been identified in SIMATIC S7-1500 CPU (All versions >= V2.0 and < V2.5),...7.5 High
- siemens cp 1604, cp 1616, cp 1604 firmware +1 more +3 moreA vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). The...6.5 Medium
- siemens cp 1604, cp 1616, cp 1604 firmware +1 more +3 moreA vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). The...6.1 Medium
- siemens cp 1604, cp 1616, cp 1604 firmware +1 more +3 moreA vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). An...9.1 Critical
- cloud foundry capi-releaseEscalation of Privileges in Cloud Controller6.0 Medium
- dell emc isilonsd management server, dell emc isilonsd management server +1 moreCross-Site Scripting Vulnerability while registering vCenter servers8.3 High
- dell emc isilonsd management server, dell emc isilonsd management server +1 moreCross-Site Scripting Vulnerability in OVA file upload feature8.3 High
- w1.fi hostapd, wi-fi alliance hostapd with sae support, fedoraproject fedora +2 more +4 moreAn invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps7.5 High
- w1.fi hostapd, wi-fi alliance hostapd with sae support, fedoraproject fedora +7 more +9 moreThe implementations of SAE in hostapd and wpa_supplicant are vulnerable to side-channel attacks5.9 Medium
- clusterlabs pacemaker, canonical ubuntu linux, fedoraproject fedora +2 moreA use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result...3.3 Low
- red hat 389-ds-base, debian linux, fedoraproject 389 directory server +1 more +3 moreIn 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will...5.3 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreHeap over-read in PHP EXIF extension4.8 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreHeap over-read in PHP EXIF extension4.8 Medium
- clusterlabs pacemaker, canonical ubuntu linux, debian linux +6 more +8 moreA flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification...6.2 Medium
- clusterlabs pacemaker, canonical ubuntu linux, debian linux +6 more +8 moreA flaw was found in the way pacemaker's client-server authentication was implemented in versions...8.8 High
firefoxUbuntufirefox regressionsNo score- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11...6.5 Medium
- tp-link wr840n firmwareThe ping feature in the Diagnostic functionality on TP-LINK WR840N v2 Firmware 3.16.9 Build...4.9 Medium
- jfrog artifactoryJFrog Artifactory Pro 6.5.9 has Incorrect Access Control.9.8 Critical
- miniblog.core project miniblog.coreMadsKristensen.AspNetCore.Miniblog subject to Improper Input Validation9.8 Critical
- freeradius, canonical ubuntu linux, fedoraproject fedora +7 more +9 moreFreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is...9.8 Critical
- freeradius, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreFreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a ...9.8 Critical
- filemanagerpro file managerThere is an XSS vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the...6.1 Medium
- filemanagerpro file managerThere is a CSRF vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the...8.8 High
- Show moreLoading…