CVEs published in April 2019
1,481 vulnerabilities, 188 critical, 17 exploited.
- gitlabGitLab CE & EE 11.2 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 have Persistent XSS.6.1 Medium
- simplybookIncorrect Access Control in the Account Access / Password Reset Link in SimplyBook.me Enterprise...8.1 High
- simplybookIncorrect Access Control in the Administrative Management Interface in SimplyBook.me Enterprise...8.8 High
- audiocodes 405hd firmwareCross Site Scripting in different input fields (domain field and personal settings) in AudioCodes...6.1 Medium
- audiocodes 405hd firmwareA missing password verification in the web interface in AudioCodes 405HD VoIP phone with firmware...8.8 High
- audiocodes 405hd firmwareA command injection (missing input validation, escaping) in the monitoring or memory status web...8.0 High
- wolfcms wolf cmsWolfCMS v0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/file_manager/browse/.4.8 Medium
- wolfcms wolf cmsWolfCMS 0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/file_manager/browse/.4.8 Medium
- tenda ac10 firmware, ac7 firmware, ac9 firmware +2 moreAn issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9...7.5 High
- tenda ac10 firmware, ac7 firmware, ac9 firmware +2 moreAn issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9...7.5 High
- imperva securesphereA command injection vulnerability in PWS in Imperva SecureSphere 13.0.0.10 and 13.1.0.10 Gateway...8.8 High
- coolpad defiant firmware, t-mobile revvl plus firmware +1 moreThe Coolpad Defiant (Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys) and the T...7.5 High
- vivo v7 firmwareThe Vivo V7 Android device with a build fingerprint of vivo/1718/1718:7.1.2/N2G47H/compil11021857...6.3 Medium
- leagoo p1 firmwareThe Leagoo P1 device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android...9.1 Critical
- leagoo p1 firmwareThe Leagoo P1 Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K...5.5 Medium
- oppo f5 firmwareThe Oppo F5 Android device with a build fingerprint of OPPO/CPH1723/CPH1723:7.1.1/N6F26Q...7.8 High
- essential phone firmwareThe Essential Phone Android device with a build fingerprint of essential/mata/mata:8.1.0/OPM1...7.5 High
- asus zenfone 3 max firmware, zenfone v live firmware +1 moreThe ASUS Zenfone V Live Android device with a build fingerprint of asus/VZW_ASUS_A009/ASUS_A009:7...7.8 High
- coolpad defiant firmware, t-mobile revvl plus firmware, zte zmax pro firmware +2 moreThe Coolpad Defiant device with a build fingerprint of Coolpad/cp3632a/cp3632a:7.1.1/NMF26F...9.8 Critical
- coolpad defiant firmware, t-mobile revvl plus firmware, zte zmax pro firmware +2 moreThe Coolpad Defiant device with a build fingerprint of Coolpad/cp3632a/cp3632a:7.1.1/NMF26F...7.5 High
- plum-mobile compass firmwareThe Plum Compass Android device with a build fingerprint of PLUM/c179_hwf_221/c179_hwf_221:6.0...7.5 High
- sony xperia l1 firmwareThe Sony Xperia L1 Android device with a build fingerprint of Sony/G3313/G3313:7.0/43.0.A.6.49...5.5 Medium
- asus zenfone 3 max firmwareThe ASUS ZenFone 3 Max Android device with a build fingerprint of asus/US_Phone/ASUS_X008_1:7.0...7.1 High
- symantec endpoint protection managerSymantec Endpoint Protection Manager (SEPM) prior to and including 12.1 RU6 MP9 and prior to 14.2...7.8 High
- symantec norton security, symantec corporation sep (windows client), sep cloud +4 more +6 moreSymantec Norton Security prior to 22.16.3, SEP (Windows client) prior to and including 12.1 RU6...6.5 Medium
- mitel cmg suiteSQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated...9.8 Critical
- mitel cmg suiteSQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated...9.8 Critical
- symantec endpoint protection, symantec corporation endpoint protection (mac client) +1 moreSEP (Mac client) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to...6.3 Medium
- enhancesoft osticketIn osTicket before 1.12, XSS exists via /upload/file.php, /upload/scp/users.php?do=import-users,...6.1 Medium
- wordfenceThe Wordfence plugin 7.2.3 for WordPress allows XSS via a unique attack vector.6.1 Medium
- rockwell automation compactlogix 5370 l1 controllers, compactlogix 5370 l2 controllers, compactlogix 5370 l3 controllers +8 more +10 moreIn Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and...6.1 Medium
- datools daviewindyDaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the...7.8 High
- datools daviewindyDaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the...7.8 High
- hmtalk daviewindyDaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the...7.8 High
- fortinet fortimanager, fortinet, inc. fortinet fortimanager +1 moreA cleartext transmission of sensitive information vulnerability in Fortinet FortiManager 5.2.0...8.1 High
- neatorobotics botvac connected firmwareA Buffer Overflow in Network::AuthenticationClient::VerifySignature in /bin/astro in Neato Botvac...9.8 Critical
- datools daviewindyDaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when...7.8 High
- symantec norton security, endpoint protection, endpoint protection cloud +2 more +4 moreNorton Security (Windows client) prior to 22.16.3 and SEP SBE (Windows client) prior to Cloud...7.8 High
- datools daviewindyDaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when...7.8 High
- contao cmsContao SQL injection in the backend and listing module9.8 Critical
- cerner connectivity engine 4 firmwareAn issue was discovered on Cerner Connectivity Engine (CCE) 4 devices. The hostname, timezone,...9.8 Critical
- cerner connectivity engine 4 firmwareAn issue was discovered on Cerner Connectivity Engine (CCE) 4 devices. The user running the main...7.8 High
- envoyproxy envoyEnvoyProxy Envoy Missing HTTP URL path normalization6.5 Medium
- envoyproxy envoy, redhat openshift service mesh +1 moreWhen parsing HTTP/1.x header values, Envoy 1.9.0 and before does not reject embedded zero...6.5 Medium
- ibm infosphere information server, infosphere information server on cloud +1 moreIBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting....5.4 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 could allow an authenticated...4.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site...4.0 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 could allow an authenticated...3.1 Low
- ibm content navigatorIBM Content Navigator 2.0.3 and 3.0CD could allow a remote attacker to conduct phishing attacks,...6.8 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site...5.4 Medium
- Show moreLoading…