CVEs published in April 2019
1,481 vulnerabilities, 188 critical, 17 exploited.
- isaacs tarArbitrary File Overwrite in tar7.5 High
- weaver e-cologyAn issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the ...6.1 Medium
- synacor zimbra collaboration suite, zimbra collaboration suite (zcs) +1 moreZimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8...7.5 High
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus 6.6 Build 6657 allows local users to gain privileges (after a...7.0 High
- linux kernelThe print_binder_transaction_ilocked function in drivers/android/binder.c in the Linux kernel 4...5.5 Medium
- linux kernelThe print_binder_ref_olocked function in drivers/android/binder.c in the Linux kernel 4.14.90...5.5 Medium
- rapid7 metasploit, metasploit framework +1 moreRapid7 Metasploit Framework Zip Import Directory Traversal7.4 High
- fujifilm fcr capsula x/ carbon x, cr-ir 357 fcr capsula x firmware, cr-ir 357 fcr carbon x firmware +1 more +3 moreFujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR...9.8 Critical
- fujifilm fcr capsula x/ carbon x, cr-ir 357 fcr capsula x firmware, cr-ir 357 fcr carbon x firmware +1 more +3 moreFujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR...7.5 High
opensslSUSESecurity update for opensslNo score- atlassian jira, jira server +1 moreThe BrowseProjects.jspa resource in Jira before version 7.13.2, and from version 8.0.0 before...7.5 High
- atlassian application links, crowd, crucible +5 more +7 moreApplication Links before version 5.0.11, from version 5.1.0 before 5.2.10, from version 5.3.0...5.4 Medium
- ibm storediqIBM StoredIQ 7.6 could allow a remote attacker to conduct phishing attacks, using an open...7.4 High
- iobit malware fighterIMFForceDelete.sys in IObit Malware Fighter 6.2 allows a low privileged user to send IOCTL...6.5 Medium
- nodebbCross-site Scripting in NodeBB6.1 Medium
- jenkins azure ad, jenkins project azure ad plugin +1 moreJenkins Azure AD Plugin stored the client secret unencrypted8.8 High
- jenkins sitemonitor, jenkins project sitemonitor plugin +1 moreJenkins SiteMonitor Plugin globally and unconditionally disables SSL/TLS certificate validation5.9 Medium
- jenkins aqua microscanner, jenkins project aqua microscanner plugin +1 moreJenkins Aqua MicroScanner Plugin stored credentials in plain text8.8 High
- jenkins github authentication, jenkins project github authentication plugin +1 moreJenkins GitHub Authentication Plugin Cross-Site Request Forgery vulnerability8.8 High
- jenkins koji, jenkins project koji plugin +1 moreJenkins Koji Plugin globally and unconditionally disables SSL/TLS certificate validation5.9 Medium
- jenkins twitter, jenkins project twitter plugin +1 moreJenkins Twitter Plugin stores credentials in plain text8.8 High
- jenkins ansible tower, jenkins project ansible tower plugin +1 moreMissing permission check in Jenkins Ansible Tower Plugin4.3 Medium
- jenkins ansible tower, jenkins project ansible tower plugin +1 moreJenkins Ansible Tower Plugin missing permission check8.8 High
- jenkins ansible tower, jenkins project ansible tower plugin +1 moreJenkins Ansible Tower Plugin cross-site request forgery vulnerability8.8 High
- jenkins project self-organizing swarm plug-in modules plugin, jenkins self-organizing swarm modules +1 moreJenkins Self-Organizing Swarm Plug-in Modules Plugin XXE vulnerability via UDP broadcast response9.3 Critical
- jenkins static analysis utilities, jenkins project static analysis utilities plugin +1 moreMissing permission check in Jenkins Static Analysis Utilities Plugin6.5 Medium
- jenkins static analysis utilities, jenkins project static analysis utilities plugin +1 moreJenkins Static Analysis Utilities Plugin is vulnerable to Cross-site request forgery vulnerability6.5 Medium
- dovecot, fedoraproject fedora, opensuse leap +2 moreIn the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login component crashes if...7.5 High
- dovecot, fedoraproject fedora, opensuse leap +2 moreIn the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login service crashes when...7.5 High
- imagemagick, canonical ubuntu linux, debian linux +2 more +4 moreAn off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the...6.5 Medium
- ibm jazz reporting serviceIBM Jazz Reporting Service (JRS) 6.0.6 could allow an authenticated user to access the execution...4.3 Medium
- ibm api connectIBM API Connect 2018.1 and 2018.4.1.2 uses weaker than expected cryptographic algorithms that...5.9 Medium
- ibm jazz reporting serviceIBM Jazz Reporting Service (JRS) 6.0 through 6.0.6 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm emptoris contract managementIBM Emptoris Contract Management 10.0.0 and 10.1.3.0 could disclose sensitive information from...5.3 Medium
- microfocus network automation, network operations management, micro focus network automation and micro focus network operations management (nom) +2 moreA potential security vulnerability has been identified in Micro Focus Network Automation Software...8.8 High
- facebook wangleWangle's LineBasedFrameDecoder contains logic for identifying newlines which incorrectly advances...9.8 Critical
- oculus browserA remote web page could inject arbitrary HTML code into the Oculus Browser UI, allowing an...6.1 Medium
- facebook hhvmInsufficient boundary checks for the strrpos and strripos functions allow access to out-of-bounds...9.8 Critical
- check point endpoint security client for windows, checkpoint endpoint security +1 moreA local attacker can create a hard-link between a file to which the Check Point Endpoint Security...7.0 High
- ublockorigin ublock originIn uBlock before 0.9.5.15, the $rewrite filter option allows filter-list maintainers to run...9.0 Critical
- getadblock adblockIn AdBlock before 3.45.0, the $rewrite filter option allows filter-list maintainers to run...8.1 High
- adblockplus adblock plusIn Adblock Plus before 3.5.2, the $rewrite filter option allows filter-list maintainers to run...8.1 High
- filezilla, debian linux, fedoraproject fedora +1 more +3 moreUntrusted search path in FileZilla before 3.41.0-rc1 allows an attacker to gain privileges via a...7.8 High
- netapp element plug-in for vcenter server, hyper converged infrastructure compute node +1 moreElement Plug-in for vCenter Server versions prior to 4.2.3 may disclose sensitive account...7.5 High
- webidsupport webidWeBid 1.2.2 has reflected XSS via the id parameter to admin/deletenews.php, admin/editbannersuser...6.1 Medium
- esotalkesoTalk 1.0.0g4 has XSS via the PATH_INFO to the conversations/ URI.6.1 Medium
- davegamble cjsonparse_string in cJSON.c in cJSON before 2016-10-02 has a buffer over-read, as demonstrated by a...9.8 Critical
- web-dorado contact formThe WebDorado Contact Form plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin...8.8 High
- 10web form makerThe 10Web Form Maker plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax...8.8 High
- facebook fizzAn improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an...7.5 High
- Show moreLoading…