CVEs published in April 2019
1,481 vulnerabilities, 188 critical, 17 exploited.
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site...5.4 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site...5.4 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site...5.4 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site...5.4 Medium
- ibm content navigatorIBM Content Navigator 2.0.3 and 3.0CD is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.1, 5.2.6.3_6, 6.0.0.0, and 6.0.0.1 uses weaker...5.9 Medium
- mi 5s firmwareThe gyroscope on Xiaomi Mi 5s devices allows attackers to cause a denial of service (resonance...7.5 High
- nopcommerceLibraries/Nop.Services/Localization/LocalizationService.cs in nopCommerce through 4.10 allows XXE...4.9 Medium
- sem-cms semcmsTODOtest7.2 High
- gilacms gila cmscore/classes/db_backup.php in Gila CMS 1.10.1 allows admin/db_backup?download= absolute path...4.9 Medium
- flarumFlarum mishandles invalidation of user email tokens7.5 High
- cmsmadesimple cms made simpleThe File Manager in CMS Made Simple through 2.2.10 has Reflected XSS via the "New name" field in...4.8 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus before build 5708 has XSS via the mobile app API.6.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +11 more +13 moreAn infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and...6.3 Medium
- google tensorflowInteger Overflow or Wraparound in Google TensorFlow9.8 Critical
- graphicsmagick, canonical ubuntu linux, debian linux +2 more +4 moreIn GraphicsMagick from version 1.3.30 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer...8.8 High
- graphicsmagick, canonical ubuntu linux, debian linux +2 more +4 moreIn GraphicsMagick from version 1.3.8 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer...8.8 High
- tibco activematrix bpm, silver fabric enabler, tibco software inc. activematrix bpm distribution for tibco silver fabric +1 more +3 moreTIBCO ActiveMatrix BPM Open Redirect Vulnerability4.7 Medium
- tibco silver fabric enabler, tibco software inc. activematrix bpm, activematrix bpm distribution for tibco silver fabric +2 more +4 moreTIBCO ActiveMatrix BPM Escalation of Privileges Vulnerability5.4 Medium
- tibco activematrix bpm, activematrix policy director, activematrix service bus +6 more +8 moreTIBCO Active Matrix Service Grid Administrator Unauthenticated Download of Sensitive File8.6 High
- tibco activematrix bpm, activematrix policy director, activematrix service bus +6 more +8 moreTIBCO Active Matrix Service Grid Administrator Remote Code Execution9.9 Critical
- tibco activematrix bpm, activematrix policy director, activematrix service bus +5 more +7 moreTIBCO Active Matrix Service Grid Administrator With Multiple Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities8.8 High
- tibco silver fabric enabler, tibco software inc. activematrix bpm, activematrix bpm distribution for tibco silver fabric +2 more +4 moreTIBCO ActiveMatrix BPM Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities8.8 High
- zotonicZotonic before version 0.47 has mod_admin XSS.4.8 Medium
- deltek visionDeltek Vision 7.x before 7.6 permits the execution of any attacker supplied SQL statement through...9.8 Critical
- librenmsLibreNMS arbitrary OS commands execution9.8 Critical
- canonical snapdsnap-confine as included in snapd before 2.39 did not guard against symlink races when performing...7.5 High
- canonical snapdsnap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid...7.5 High
- libseccomp-golang project libseccomp-golangImproper Input Validation in libseccomp-golang7.5 High
- bonobogitserver bonobo git serverImproper handling of extra parameters in the AccountController (User Profile edit) in Jakub...8.8 High
- bonobogitserver bonobo git serverThe GitController in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows execution of...9.8 Critical
- zohocorp servicedesk plusZoho ManageEngine ServiceDesk 9.3 allows session hijacking and privilege escalation because an...8.8 High
- western digital my cloud dl2100, my cloud ex4100, my cloud pr4100 +6 more +8 moreWestern Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud...9.8 Critical
- westerndigital my cloud pr4100 firmware, my cloud dl2100 firmware, my cloud dl4100 firmware +6 more +8 moreWestern Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud...9.8 Critical
- google tensorflowNULL Pointer Dereference in Google TensorFlow6.5 Medium
- google tensorflowImproper Restriction of Operations within the Bounds of a Memory Buffer in Google TensorFlow8.1 High
- google snappy, tensorflow +1 moreImproper Input Validation in Google TensorFlow8.1 High
- keycloakExposure of Sensitive Information to an Unauthorized Actor in Keycloak3.8 Low
- pivotal apps manager, pivotal software application service +1 moreInvitations Service supports HTTP connections8.1 High
- cloudfoundry routing release, cloud foundry cf routing +1 moreGorouter allows space developer to hijack route services hosted outside the platform8.8 High
- cloud foundry bosh backup and restoreBBR could run arbitrary scripts on deployment VMs7.7 High
- hr-technologies easytorecruitIn EasyToRecruit (E2R) before 2.11, the upload feature and the Candidate Profile Management...6.1 Medium
- smartertools smartermailSmarterTools SmarterMail 16.x before build 6985 allows directory traversal. An authenticated user...6.5 Medium
- smartertools smartermailSmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys. An unauthenticated...8.2 High
- dentsplysirona sidexisA default username and password in Dentsply Sirona Sidexis 4.2 and possibly others allows an...9.8 Critical
- smartertools smartermailSmarterTools SmarterMail 16.x before build 6995 has stored XSS. JavaScript code could be executed...6.1 Medium
- robotronic runasspcRobotronic RunAsSpc 3.7.0.0 protects stored credentials insufficiently, which allows locally...7.8 High
- block jit-wasmEOS.IO jit-wasm 4.1 has a heap-based buffer overflow via a crafted wast file.8.8 High
- aquaverde aquarius cmsaquaverde Aquarius CMS through 4.3.5 writes POST and GET parameters (including passwords) to a...7.5 High
- aquaverde aquarius cmsaquaverde Aquarius CMS through 4.3.5 allows Information Exposure through Log Files because of an...7.5 High
- Show moreLoading…