CVEs published in May 2019
1,381 vulnerabilities, 265 critical, 14 exploited.
- billion 5200w-t firmwareThe Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three...8.8 High
- billion 5200w-t firmware, zyxel p660hn-t1a v1 firmware, p660hn-t1a v2 firmware +2 moreThe Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a...8.8 High
- billion 5200w-t firmware, zyxel p660hn-t1a v1 firmware, p660hn-t1a v2 firmware +2 moreThe ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user...9.8 Critical
- billion 5200w-t firmware, zyxel p660hn-t1a v1 firmware, p660hn-t1a v2 firmware +2 moreThe ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command...8.8 High
- billion 5200w-t firmwareThe Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection...9.8 Critical
- billion 5200w-t firmware, zyxel p660hn-t1a routers, p660hn-t1a v1 firmware +1 more +3 moreThe ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by...9.8 Critical
- ibm api connectIBM API Connect 2018.1 and 2018.4.1.4 could allow a remote attacker to hijack the clicking action...6.4 Medium
- tabslab mailcarrierA buffer overflow in the SMTP response service in MailCarrier 2.51 allows the attacker to execute...9.8 Critical
- zohocorp manageengine firewall analyzerThe "default reports" feature in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123218 is...9.8 Critical
- zohocorp manageengine firewall analyzerThe Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224...9.8 Critical
- zohocorp manageengine firewall analyzerThe user defined DNS name in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is...6.1 Medium
- groonga groonga-httpdThe groonga-httpd package 6.1.5-1 for Debian sets the /var/log/groonga ownership to the groonga...7.0 High
- linux kernel, canonical ubuntu linux +1 moreudp_gro_receive_segment in net/ipv4/udp_offload.c in the Linux kernel 5.x through 5.0.11 allows...9.8 Critical
- apache uima ducc, uimaducc +1 moreCross-site Scripting in Apache UIMA6.1 Medium
- apache axis 1.4, axis, oracle agile engineering data management +35 more +37 moreServer Side Request Forgery in Apache Axis7.5 High
- rockwell automation armor compact guardlogix 5370 controllers, compact guardlogix 5370 controllers, compactlogix 5370 l1 controllers +6 more +8 moreRockwell Automation CompactLogix 5370 Uncontrolled Resource Consumption9.8 Critical
- rockwell automation armor compact guardlogix 5370 controllers, compact guardlogix 5370 controllers, compactlogix 5370 l1 controllers +7 more +9 moreRockwell Automation CompactLogix 5370 Stack-based Buffer Overflow7.5 High
- philips tasy emrIn Philips Tasy EMR, Tasy EMR Versions 3.02.1744 and prior, the software incorrectly neutralizes...5.4 Medium
- anomali agaveAnomali Agave (formerly Drupot) through 1.0.0 fails to avoid fingerprinting by including...7.5 High
- gnu recutilsAn issue was discovered in GNU recutils 1.8. There is a heap-based buffer overflow in the...8.8 High
- gnu recutilsAn issue was discovered in GNU recutils 1.8. There is a stack-based buffer overflow in the...8.8 High
- gnu recutilsAn issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function...6.5 Medium
- gnu recutilsAn issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function...6.5 Medium
- z.cash zcashZcash 2.x allows an inexpensive approach to "fill all transactions of all blocks" and "prevent...7.5 High
- ibm sterling b2b integratorIBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 Standard Edition is vulnerable to cross-site...5.4 Medium
- ibm planning analyticsIBM Planning Analytics 2.0 through 2.0.6 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm rational engineering lifecycle managerIBM Rational Engineering Lifecycle Manager 6.0 through 6.0.6 uses weaker than expected...5.9 Medium
- honeypress project honeypressHoneyPress through 2016-09-27 can be fingerprinted by attackers because of the ingrained unique...7.5 High
- octopus deploy, server +1 moreIn Octopus Deploy 2019.1.0 through 2019.3.1 and 2019.4.0 through 2019.4.5, an authenticated user...8.1 High
- qlik analytics, sense, qlikview server +2 moreAn issue was discovered in QlikView Server before 11.20 SR19, 12.00 and 12.10 before 12.10 SR11,...8.2 High
proftpd-dfsgDebianproftpd-dfsg - regression updateNo score