CVEs published in April 2019
1,481 vulnerabilities, 188 critical, 17 exploited.
- sony photo sharing plusAn incorrect access control exists in the Sony Photo Sharing Plus application in the firmware...5.9 Medium
- ibm mq, mq appliance +1 moreIBM MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, and 9.1.0.0 through 9.1.1 is vulnerable...7.5 High
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 discloses sensitive information to unauthorized users. The information can be...5.3 Medium
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux +4 more +6 moreIn Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a...7.5 High
- matrix sydentMatrix Sydent mishandles emails5.9 Medium
bluemanSUSESecurity update for bluemanNo score- rust-random randUnaligned memory access in rand_core9.8 Critical
- qemuhw/sparc64/sun4u.c in QEMU 3.1.50 is vulnerable to a NULL pointer dereference, which allows the...7.5 High
- ffmpegThe studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1...8.8 High
- mkcms project mkcmsMKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a username and...8.8 High
- xinruidz sundray wan controller firmwareWAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a Remote Code...9.8 Critical
- ntpNetwork Time Protocol (NTP), as specified in RFC 5905, uses port 123 even for modes where a fixed...8.1 High
- xinruidz sundray wan controller firmwareWAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a backdoor account...9.8 Critical
- miuiA vulnerability was found in the MIUI OS version 10.1.3.0 that allows a physically proximate...6.8 Medium
- dell supportassist, supportassist client +1 moreDell SupportAssist Client versions prior to 3.2.0.90 contain a remote code execution...7.1 High
- dell supportassist, supportassist client +1 moreDell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation...7.6 High
- centos-webpanel centos web panelCentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version) and 0.9.8.753...4.8 Medium
- squareup okhttpCertificatePinner.java in OkHttp 3.x through 3.12.0 allows man-in-the-middle attackers to bypass...5.9 Medium
- gbraad gauthGAuth 0.9.9 beta has stored XSS that shows a popup repeatedly and discloses cookies.6.1 Medium
- cprime power scriptsThe Cprime Power Scripts app before 4.0.14 for Atlassian Jira allows Directory Traversal.6.5 Medium
- dlink di-524 firmwareOn D-Link DI-524 V2.06RU devices, multiple Stored and Reflected XSS vulnerabilities were found in...4.8 Medium
- kofax front office serverAn XML external entity (XXE) vulnerability in Kofax Front Office Server Administration Console...6.5 Medium
- kofax front office serverKofax Front Office Server version 4.1.1.11.0.5212 (both Thin Client and Administration Console)...5.4 Medium
- kofax front office serverIn Kofax Front Office Server Administration Console 4.1.1.11.0.5212, some fields, such as...4.9 Medium
- atlassian confluence, confluence server and data center, confluence server +2 moreConfluence Server and Data Center had a path traversal vulnerability in the...8.8 High
- supportcandyAn Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress...9.8 Critical
- jenkins ontrack, jenkins project ontrack plugin +1 moreSandbox bypass in ontrack Jenkins Plugin9.9 Critical
- jenkins xebialabs xl deploy, jenkins project xebialabs xl deploy plugin +1 moreMissing permission check in Jenkins XebiaLabs XL Deploy Plugin6.5 Medium
- jenkins xebialabs xl deploy, jenkins project xebialabs xl deploy plugin +1 moreJenkins XebiaLabs XL Deploy Plugin vulnerable to Cross-site request forgery (CSRF)6.5 Medium
- jenkins azure publishersettings credentials, jenkins project azure publishersettings credentials plugin +1 moreJenkins Azure PublisherSettings Credentials Plugin stored credentials in plain text8.8 High
- jenkins jira-ext, jenkins project jira-ext plugin +1 moreJenkins jira-ext Plugin stores credentials unencrypted8.8 High
- jenkins gitlab, jenkins project gitlab plugin +1 moreJenkins GitLab Plugin missing permission checks8.8 High
- jenkins gitlab, jenkins project gitlab plugin +1 moreJenkins GitLab Plugin Cross-Site Request Forgery vulnerability8.0 High
- blackberry uem, unified endpoint management +1 moreAn XML External Entity vulnerability in the UEM Core of BlackBerry UEM version(s) earlier than 12...7.5 High
- motorola cx2 firmware, m2 firmware +1 moreAn issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the...9.8 Critical
- motorola cx2 firmware, m2 firmware +1 moreAn issue was discovered in Motorola CX2 1.01 and M2 1.01. The router opens TCP port 8010. Users...5.3 Medium
- motorola cx2 firmware, m2 firmware +1 moreIn Motorola CX2 1.01 and M2 1.01, users can access the router's /priv_mgt.html web page to launch...9.8 Critical
- motorola cx2 firmware, m2 firmware +1 moreAn issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the...9.8 Critical
- printeronPrinterOn Enterprise 4.1.4 contains multiple Cross Site Request Forgery (CSRF) vulnerabilities in...6.5 Medium
- redhat libvirt, debian linux +1 morelibvirt-domain.c in libvirt before 1.3.1 supports virDomainGetTime API calls by guest agents with...7.5 High
- dovecot, opensuse leap +1 moreThe JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the...7.5 High
- cisco catalyst center, digital network architecture center (dna center) +1 moreCisco DNA Center Unintended Proxy Via SWIM Import Interface Vulnerability6.5 Medium
- cisco unified communications managerCisco Unified Communications Manager Denial of Service Vulnerability5.3 Medium
- cisco prime network registrarCisco Prime Network Registrar Denial of Service Vulnerability8.6 High
- cisco email security appliance (esa), email security appliance +1 moreCisco Email Security Appliance Content Filter Bypass Vulnerability5.8 Medium
- cisco aironet access point firmware, aironet access point software +1 moreCisco Aironet Series Access Points Denial of Service Vulnerability7.4 High
- cisco aironet access point firmware, aironet access point software +1 moreCisco Aironet Series Access Points Directory Traversal Vulnerability4.4 Medium
- cisco aironet access point firmware, aironet access point software +1 moreCisco Aironet Series Access Points Quality of Service Denial of Service Vulnerability6.8 Medium
- cisco aironet access point firmware, aironet access point software +1 moreCisco Aironet Series Access Points Command Injection Vulnerability6.7 Medium
- cisco wireless lan controller (wlc), wireless lan controller software +1 moreCisco Wireless LAN Controller Locally Significant Certificate Denial of Service Vulnerability4.9 Medium
- Show moreLoading…