CVEs published in May 2019
1,381 vulnerabilities, 265 critical, 14 exploited.
-
react-svgnpm Cross-Site Scripting in react-svg No score -
base64-urlnpm Out-of-bounds Read in base64-url No score -
publicnpm Cross-Site Scripting in public No score -
angular-http-servernpm Path Traversal in angular-http-server 7.5 High -
deapnpm Prototype Pollution in deap 7.3 High -
foremannpm Denial of Service in foreman 7.5 High - ais logistic software SQL Injection in Advanced InfoData Systems (AIS) ESEL-Server 67 (which is the backend for the AIS... 9.8 Critical
- godotengine godot In Godot through 3.1, remote code execution is possible due to the deserialization policy not... 9.8 Critical
- nuuo network video recorder firmware NUUO Network Video Recorder Firmware 1.7.x through 3.3.x allows unauthenticated attackers to... 9.8 Critical
- zyxel p-660hn-t1 firmware The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 (2.00... 9.8 Critical
- saet webapp, tebe small firmware +1 more The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices... 9.8 Critical
- saet webapp, tebe small firmware +1 more The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices... 7.5 High
- pydio It is possible for an attacker with regular user access to the web application of Pydio through 8... 7.3 High
- pydio The ImageMagick plugin that is installed by default in Pydio through 8.2.2 does not perform the... 7.2 High
- pydio PyDio Stored XSS Vulnerability 5.4 Medium
- nvidia geforce experience NVIDIA GeForce Experience versions prior to 3.19 contains a vulnerability in the Web Helper... 7.8 High
- pydio An unauthenticated attacker can obtain information about the Pydio 8.2.2 configuration including... 5.3 Medium
- pydio The "action" get_sess_id in the web application of Pydio through 8.2.2 discloses the session... 6.5 Medium
- evernote Evernote 7.9 on macOS allows attackers to execute arbitrary programs by embedding a reference to... 7.8 High
- schneider-electric citectscada, aveva vijeo citect and citectscada, schneider-electric scada expert vijeo citect +2 more In Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40, a vulnerability has been identified... 7.8 High
- tldp advanced bash-scripting guide The function getopt_simple as described in Advanced Bash Scripting Guide (ISBN 978-1435752184)... 9.8 Critical
- sitecore cms, cms and experience platform (xp) +1 more Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an... 8.8 High
- sitecore cms, cms and experience platform (xp), experience platform +2 more Deserialization of Untrusted Data in the Sitecore.Security.AntiCSRF (aka anti CSRF) module in... 9.8 Critical
- jector fm-k75 firmware Jector Smart TV FM-K75 devices allow remote code execution because there is an adb open port with... 9.8 Critical
- gitea, jenkins project gitea plugin +1 more Improper handling of untrusted branches in Gitea Jenkins Plugin 7.5 High
- eficode influxdb, jenkins project influxdb plugin +1 more Plaintext password storage in Jenkins InfluxDB Plugin 8.8 High
- jenkins pipeline remote loader, jenkins project pipeline remote loader plugin +1 more Unsafe entry in Script Security list of approved signatures in Pipeline Remote Loader Plugin 9.9 Critical
- jenkins pipeline maven integration, jenkins project pipeline maven integration plugin +1 more XML External Entity processing vulnerability in Pipeline Maven Integration Jenkins Plugin 8.1 High
- jenkins project warnings ng plugin, jenkins warnings next generation +1 more Jenkins Warnings NG Plugin cross-site request forgery vulnerability 4.3 Medium
- jenkins project warnings ng plugin, jenkins warnings next generation +1 more Jenkins Warnings NG Plugin Cross-site scripting vulnerability 5.4 Medium
- jenkins project artifactory plugin, jfrog artifactory +1 more Cross-site request forgery vulnerability in Jenkins Artifactory Plugin 6.5 Medium
- jenkins project artifactory plugin, jfrog artifactory +1 more Jenkins Artifactory Plugin missing permission check 4.3 Medium
- jenkins project artifactory plugin, jfrog artifactory +1 more Jenkins Artifactory Plugin missing permission check 4.3 Medium
- jenkins project artifactory plugin, jfrog artifactory +1 more Jenkins Artifactory Plugin cross-site request forgery vulnerability 4.3 Medium
- phprelativepath project phprelativepath An XSS vulnerability exists in PHPRelativePath (aka Relative Path) through 1.0.2 via the... 6.1 Medium
- mobotix s14 firmware There is a lack of CSRF countermeasures on MOBOTIX S14 MX-V4.2.1.61 cameras, as demonstrated by... 8.8 High
- mi m365 firmware The Xiaomi M365 scooter 2019-02-12 before 1.5.1 allows spoofing of "suddenly accelerate" commands... 6.5 Medium
- firejail project firejail Firejail before 0.9.60 allows truncation (resizing to length 0) of the firejail binary on the... 8.1 High
- hybridgroup gobot Hybrid Group Gobot Improper Certificate Validation vulnerability 7.5 High
- tinycc An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source... 5.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more A race condition is present in the crash generation server used to generate data for the crash... 8.3 High
- mozilla firefox, firefox esr, thunderbird +2 more If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous... 8.1 High
- mozilla firefox, firefox esr, thunderbird +2 more A vulnerability exists in the Windows sandbox where an uninitialized value in memory can be... 7.5 High
- glyphandcog xpdfreader A stack-based buffer over-read exists in PostScriptFunction::transform in Function.cc in Xpdf 4... 7.1 High
- gpac, debian linux +1 more An issue was discovered in GPAC 0.7.1. There is a heap-based buffer overflow in the function... 7.8 High
- gpac, debian linux +1 more An issue was discovered in GPAC 0.7.1. There is a NULL pointer dereference in the function... 7.5 High
- gpac, debian linux +1 more An issue was discovered in GPAC 0.7.1. There is a NULL pointer dereference in the function GetESD... 5.5 Medium
- bacnet protocol stack project protocol stack BACnet Protocol Stack through 0.8.6 could allow an unauthenticated, remote attacker to cause a... 7.5 High
-
bracket-templatenpm Cross-Site Scripting in bracket-template No score - synacor zimbra collaboration server Synacor Zimbra Collaboration Server 8.x before 8.7.0 has Reflected XSS in admin console. 6.1 Medium
- Show olderLoading…