CVEs published in April 2019
1,481 vulnerabilities, 188 critical, 17 exploited.
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Persistent Cross-Site Scripting Vulnerability4.8 Medium
- cisco wireless lan controller (wlc), wireless lan controller software +1 moreCisco Wireless LAN Controller Secure Shell Unauthorized Access Vulnerability5.4 Medium
- cisco wireless lan controller (wlc), wireless lan controller software +1 moreCisco Wireless LAN Controller Software Cross-Site Request Forgery Vulnerability8.1 High
- cisco wireless lan controller (wlc), wireless lan controller, wireless lan controller software +2 moreCisco Wireless LAN Controller Software IAPP Message Handling Denial of Service Vulnerabilities7.4 High
- cisco wireless lan controller (wlc), wireless lan controller, wireless lan controller software +2 moreCisco Wireless LAN Controller Software IAPP Message Handling Denial of Service Vulnerabilities7.4 High
- cisco wireless lan controller (wlc), wireless lan controller, wireless lan controller software +2 moreCisco Wireless LAN Controller Software IAPP Message Handling Denial of Service Vulnerabilities7.4 High
- cisco directory connector, meeting server +1 moreCisco Directory Connector Search Order Hijacking Vulnerability5.1 Medium
- cisco umbrellaCisco Umbrella Cross-Site Scripting Vulnerability6.1 Medium
- cisco ucs b-series blade server software, unified computing system +1 moreCisco UCS B-Series Blade Servers Local Management CLI Arbitrary File Creation or CLI Parameter Injection Vulnerability5.5 Medium
- cisco registered envelope serviceCisco Registered Envelope Service Stored Cross-Site Scripting Vulnerability5.4 Medium
- cisco telepresence video communication server (vcs), telepresence video communication server +1 moreCisco Expressway Series and Cisco TelePresence Video Communication Server Denial of Service Vulnerability6.8 Medium
- cisco telepresence video communication server (vcs), telepresence video communication server +1 moreCisco Expressway Series and Cisco TelePresence Video Communication Server Denial of Service Vulnerability7.7 High
- cisco telepresence video communication server (vcs), expressway series, telepresence video communication server +2 moreCisco Expressway Series and Cisco TelePresence Video Communication Server Cross-Site Request Forgery Vulnerability6.5 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Cross-Site Scripting Vulnerability6.1 Medium
- ffmpeg, canonical ubuntu linux, debian linux +1 more +3 morelibavcodec/hevcdec.c in FFmpeg 4.1.2 mishandles detection of duplicate first slices, which allows...8.8 High
- python urllib3, canonical ubuntu linux +1 moreImproper Certificate Validation in urllib37.5 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Protocol Independent Multicast Denial of Service Vulnerability5.8 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine SSL Renegotiation Denial of Service Vulnerability5.3 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR gRPC Software Denial of Service Vulnerability5.3 Medium
- cisco ios xr software, ios xr +1 moreCisco ASR 9000 Series Aggregation Services Routers ACL Bypass Vulnerability5.8 Medium
- cisco ios xr, ios xr software +1 moreCisco IOS XR 64-Bit Software for Cisco ASR 9000 Series Aggregation Services Routers Network Isolation Vulnerability9.8 Critical
- cisco ap-cos, aironet access point software +1 moreCisco Aironet Series Access Points Development Shell Access Vulnerability7.8 High
- cisco wireless lan controller (wlc), wireless lan controller software +1 moreCisco Wireless LAN Controller Software Session Hijacking Vulnerability5.3 Medium
- cisco wireless lan controller (wlc), wireless lan controller software +1 moreCisco Wireless LAN Controller Software GUI Configuration Denial of Service Vulnerabilities6.8 Medium
- backdropcms backdrop, drupal, jquery +102 more +104 moreXSS in jQuery as used in Drupal, Backdrop CMS, and other products6.1 Medium
drupal/corePackagistThis security release fixes third-party dependencies included in or required by Drupal core. CVE-2019-10909: Escape validation messages in the PHP templating engine. From that advisory: Validation mes…No score- contao cmsContao Information Disclosure via Access Control Flaws6.5 Medium
- contao cmsContao CSRF Token Bypass8.8 High
- contao cmsContao Does Not Expire Tokens Correctly9.8 Critical
- contao cmsContao Does Not Invalidate Existing Sessions When Password Changes9.8 Critical
ntfs-3gUbuntuntfs-3g updateNo score- intel i5-5350u firmwareInsufficient input validation in system firmware for Intel(R) Broadwell U i5 vPro before version...8.2 High
- intel -Memory access in virtual memory mapping for some microprocessors may allow an authenticated user...3.8 Low
- intel graphics performance analyzerInsufficient path checking in the installation package for Intel(R) Graphics Performance Analyzer...7.8 High
- intel media sdkImproper directory permissions in installer for Intel(R) Media SDK before 2018 R2.1 may allow an...7.8 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before...7.5 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before...7.5 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before...8.1 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before...9.8 Critical
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before...3.7 Low
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before...5.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before...5.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before...3.7 Low
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.6.10,...9.1 Critical
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before...3.7 Low
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before...5.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before...5.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before...5.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before...5.9 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before...10.0 Critical
- Show moreLoading…