Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2019
April

CVEs published in April 2019

1,481 vulnerabilities, 188 critical, 17 exploited.

Known exploitedIn KEVPublic exploitFix available

oracle retail point-of-serviceVulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications ...CVE-2019-25587.3 HighApril 23, 2019
oracle application testing suiteVulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager...CVE-2019-25576.3 MediumApril 23, 2019
oracle e-business suite, oracle corporation one-to-one fulfillment +1 moreVulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite ...CVE-2019-25518.2 HighApril 23, 2019
oracle database server, oracle corporation database +1 moreVulnerability in the Java VM component of Oracle Database Server. Supported versions that are...CVE-2019-25187.5 HighApril 23, 2019
oracle database server, oracle corporation database +1 moreVulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are...CVE-2019-25179.1 CriticalApril 23, 2019
oracle database server, oracle corporation database +1 moreVulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions...CVE-2019-25168.2 HighApril 23, 2019
oracle retail convenience store back officeVulnerability in the Oracle Retail Convenience Store Back Office component of Oracle Retail...CVE-2019-24247.3 HighApril 23, 2019
oracle corporation micros relate crm software, oracle micros relate customer relationship management software +1 moreVulnerability in the MICROS Relate CRM Software component of Oracle Retail Applications ...CVE-2018-33148.2 HighApril 23, 2019
oracle retail customer engagement, oracle corporation retail customer management and segmentation foundation +1 moreVulnerability in the Oracle Retail Customer Engagement component of Oracle Retail Applications ...CVE-2018-33125.5 MediumApril 23, 2019
oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: libmysqld)....CVE-2018-3123Fix available5.9 MediumApril 23, 2019
oracle micros lucasVulnerability in the MICROS Lucas component of Oracle Retail Applications (subcomponent: Security...CVE-2018-31207.5 HighApril 23, 2019
oracle micros retail-jVulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Back...CVE-2018-28807.5 HighApril 23, 2019
veronalabs wp statisticsThe WP Statistics plugin through 12.6.2 for WordPress has XSS, allowing a remote attacker to...CVE-2019-108646.1 MediumApril 23, 2019
criblCribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request.CVE-2019-11076Public exploit9.8 CriticalApril 23, 2019
apache qpid, apache software foundation qpid proton, redhat enterprise linux desktop +8 more +10 moreWithdrawn Advisory: Improper Certificate Validation in Apache Qpid ProtonCVE-2019-0223Fix available7.4 HighApril 23, 2019
apache zeppelinCross-site Scripting in Apache ZeppelinCVE-2018-1328Fix available6.1 MediumApril 23, 2019
apache zeppelinImproper Authentication in Apache ZeppelinCVE-2018-1317Fix available8.8 HighApril 23, 2019
apache zeppelinSession Fixation in Apache ZeppelinCVE-2017-12619Fix available8.1 HighApril 23, 2019
graphicsmagick, canonical ubuntu linux, debian linux +3 more +5 morecoders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (floating...CVE-2019-11474Fix available6.5 MediumApril 23, 2019
graphicsmagickcoders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (out-of...CVE-2019-11473Fix available6.5 MediumApril 23, 2019
struktur libheiflibheif 1.4.0 has a use-after-free in heif::HeifContext::Image::set_alpha_channel in heif_context...CVE-2019-11471Fix available8.8 HighApril 23, 2019
sass-lang libsassLibSass 3.5.4 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass:...CVE-2018-20822Fix available6.5 MediumApril 23, 2019
sass-lang libsassThe parsing component in LibSass through 3.5.5 allows attackers to cause a denial-of-service ...CVE-2018-20821Fix available6.5 MediumApril 23, 2019
dropbox leptonread_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows attackers to cause a denial-of-service ...CVE-2018-208205.5 MediumApril 23, 2019
dropbox leptonio/ZlibCompression.cc in the decompression component in Dropbox Lepton 1.2.1 allows attackers to...CVE-2018-208197.8 HighApril 23, 2019
printeronAn XML external entity (XXE) vulnerability in PrinterOn version 4.1.4 and lower allows remote...CVE-2018-171697.7 HighApril 23, 2019
zohocorp manageengine applications managerZoho ManageEngine Applications Manager 12 through 14 allows FaultTemplateOptions.jsp resourceid...CVE-2019-11469Public exploitEPSS 17.0%9.8 CriticalApril 23, 2019
linux kernelcipso_v4_validate in include/net/cipso_ipv4.h in the Linux kernel before 3.11.7, when...CVE-2013-7470Fix available5.9 MediumApril 23, 2019
libarchiveA memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c in...CVE-2019-114635.5 MediumApril 23, 2019
oracle corporation java, canonical ubuntu linux, debian linux +13 more +15 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions...CVE-2019-2698Public exploitFix availableEPSS 12.0%8.1 HighApril 23, 2019
oracle corporation java, canonical ubuntu linux, hp xp7 command view +8 more +10 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions...CVE-2019-2697Public exploitFix availableEPSS 11.5%8.1 HighApril 23, 2019
oracle corporation java, apache cassandra, tomcat +15 more +17 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)....CVE-2019-2684Fix availableEPSS 37.6%5.9 MediumApril 23, 2019
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options)....CVE-2019-2683Fix available4.9 MediumApril 23, 2019
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +2 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable...CVE-2019-2632Fix available7.5 HighApril 23, 2019
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2019-2628Fix available4.9 MediumApril 23, 2019
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2019-2627Fix available4.9 MediumApril 23, 2019
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2019-2614Fix available4.4 MediumApril 23, 2019
oracle corporation java, canonical ubuntu linux, debian linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2019-2602Fix available7.5 HighApril 23, 2019
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: PS). Supported...CVE-2019-2592Fix available4.9 MediumApril 23, 2019
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2019-2581Fix available4.9 MediumApril 23, 2019
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +2 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Plug-in)...CVE-2019-2566Fix available4.9 MediumApril 23, 2019
debian linux, linux kernel, canonical ubuntu linux +2 moreThe Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant...CVE-2019-11487Fix available7.8 HighApril 23, 2019
imagemagickReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16...CVE-2019-11472Fix available6.5 MediumApril 23, 2019
imagemagickThe cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of...CVE-2019-11470Fix available6.5 MediumApril 23, 2019
check point endpoint security client for windows, check point zonealarm point endpoint security client for windows, point zonealarm +2 more +4 moreA hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point...CVE-2019-8452Public exploit7.8 HighApril 22, 2019
apache pony mail, the apache software foundation apache pony mail (incubating) +1 moreA vulnerability was discovered wherein a specially crafted URL could enable reflected XSS via...CVE-2019-02186.1 MediumApril 22, 2019
wifi ftp server project ftp serverAn issue was discovered in the Medha WiFi FTP Server application 1.8.3 for Android. An attacker...CVE-2019-113839.8 CriticalApril 22, 2019
zaloraThe Zalora application 6.15.1 for Android stores confidential information insecurely on the...CVE-2019-113849.8 CriticalApril 22, 2019
mchange c3p0, fedoraproject fedora, oracle communications ip service activator +8 more +10 moreBillion laughs attack in c3p0CVE-2019-5427Public exploitFix available7.5 HighApril 22, 2019
gnome nautilusAn issue was discovered in GNOME Nautilus 3.30 prior to 3.30.6 and 3.32 prior to 3.32.1. A...CVE-2019-11461Fix available7.8 HighApril 22, 2019
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open