CVEs published in April 2019
1,481 vulnerabilities, 188 critical, 17 exploited.
- intelbras iwr 3000n firmwareAn issue was discovered on Intelbras IWR 3000N 1.5.0 devices. When the administrator password is...8.8 High
- artifex mujsAn issue was discovered in Artifex MuJS 1.0.5. It has unlimited recursion because the match...7.5 High
- artifex mujs, fedoraproject fedora +1 moreAn issue was discovered in Artifex MuJS 1.0.5. jscompile.c can cause a denial of service (invalid...7.5 High
- artifex mujsAn issue was discovered in Artifex MuJS 1.0.5. The Number#toFixed() and numtostr implementations...9.8 Critical
- openapi-generator openapi generatorOpenAPI Tools OpenAPI Generator uses HTTP in various files8.1 High
- arrow-kt arrowMissing Encryption of Sensitive Data in arrow-kt Arrow8.1 High
- gradle build cache node, enterprise +1 moreIn Gradle Enterprise before 2018.5.2, Build Cache Nodes would reflect the configured password...9.8 Critical
- gradle enterpriseIn Gradle Enterprise before 2018.5.3, Build Cache Nodes did not store the credentials at rest in...9.8 Critical
- siteserver cmsSiteServer CMS RCE via unsafe file upload7.2 High
- tabslab mailcarrierA buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a...9.8 Critical
- tildeslash monitAn issue was discovered in /admin/users/update in M/Monit before 3.7.3. It allows unprivileged...9.8 Critical
- modsecurity owasp modsecurity core rule setAn issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST...5.3 Medium
- modsecurity owasp modsecurity core rule setAn issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST...5.3 Medium
- modsecurity owasp modsecurity core rule setAn issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST...5.3 Medium
- modsecurity owasp modsecurity core rule setAn issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST...5.3 Medium
- modsecurity owasp modsecurity core rule setAn issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST...5.3 Medium
- burrow-wheeler aligner project alignerBWA (aka Burrow-Wheeler Aligner) 0.7.17 r1198 has a Buffer Overflow via a long prefix that is...9.8 Critical
- projectsendAn issue was discovered in ProjectSend r1053. upload-process-form.php allows finished_files[]=../...8.8 High
- wcmswcms/wex/finder/action.php in WCMS v0.3.2 has a Arbitrary File Upload Vulnerability via developer...8.8 High
- brassica soy cms** DISPUTED ** SOY CMS v3.0.2 allows remote attackers to execute arbitrary PHP code via a <?php...7.2 High
- meisivod msvodMsvod v10 has a CSRF vulnerability to change user information via the admin/member/edit.html URI.6.5 Medium
- 74cms74CMS v5.0.1 has a CSRF vulnerability to add a new admin user via the index.php?m=Admin&c=admin&a...8.8 High
- atftp project atftpAn issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex...5.9 Medium
- atftp project atftpAn issue was discovered in atftpd in atftp 0.7.1. A remote attacker may send a crafted packet...9.8 Critical
- rocbossapp/controllers/frontend/PostController.php in ROCBOSS V2.2.1 has SQL injection via the Post...9.8 Critical
debian-security-supportDebiandebian-security-support - security updateNo score- mediaarea mediainfo, fedoraproject fedora +1 moreAn out-of-bounds read in File__Analyze::Get_L8 in File__Analyze_Buffer.cpp in MediaInfoLib in...6.5 Medium
- mediaarea mediainfo, fedoraproject fedora +1 moreAn out-of-bounds read in MediaInfoLib::File__Tags_Helper::Synched_Test in Tag/File__Tags.cpp in...6.5 Medium
- scilico i\, librarianCross-site scripting (XSS) vulnerability in display.php in I, Librarian 4.10 allows remote...6.1 Medium
- activision call of duty\SV_SteamAuthClient in various Activision Infinity Ward Call of Duty games before 2015-08-11 is...9.8 Critical
- ea originThe client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the...7.8 High
- teamspeakTeamSpeak 3 Client before 3.2.5 allows remote code execution in the Qt framework.8.8 High
- cloudbees jenkins operations centerCloudBees Jenkins Operations Center 2.150.2.3, when an expired trial license exists, allows...9.8 Critical
- androidIn l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out-of-bound read due to an...7.5 High
- androidIn the configuration of NFC modules on certain devices, there is a possible failure to...7.3 High
- androidIn SetScanResponseData of ble_advertiser_hci_interface.cc, there is a possible out-of-bound write...7.8 High
- androidIn btm_proc_smp_cback of tm_ble.cc, there is a possible memory corruption due to a use after free...8.8 High
- androidIn rw_i93_process_ext_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a...5.0 Medium
- androidIn rw_i93_sm_detect_ndef of rw_i93.cc, there is a possible out-of-bound read due to a missing...5.0 Medium
- androidIn rw_i93_process_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing...5.5 Medium
- androidIn rw_i93_sm_update_ndef of rw_i93.cc, there is a possible out-of-bound write due to a missing...7.8 High
- androidIn rw_i93_sm_read_ndef of rw_i93.cc, there is a possible out-of-bounds write due to an integer...7.8 High
- androidIn create_hdr of dnssd_clientstub.c, there is a possible use after free. This could lead to local...7.8 High
- androidIn rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a...7.8 High
- androidIn removeInterfaceAddress of NetworkController.cpp, there is a possible use after free. This...9.8 Critical
- androidIn numerous hand-crafted functions in libmpeg2, NEON registers are not preserved. This could lead...8.8 High
- androidIn floor0_inverse1 of floor0.c, there is a possible out of bounds write due to an incorrect...8.8 High
- androidIn updateAssistMenuItems of Editor.java, there is a possible escape from the Setup Wizard due to...7.8 High
- vestacp control panelVesta Control Panel 0.9.8-23 allows XSS via a crafted URL.6.1 Medium
- pluck-cms pluckdata/inc/files.php in Pluck 4.7.8 allows remote attackers to execute arbitrary code by uploading...9.8 Critical
- Show moreLoading…