CVEs published in May 2019
1,381 vulnerabilities, 265 critical, 14 exploited.
- cisco nexus 9000 series application centric infrastructure, nx-os software for nexus 9000 series fabric switches aci mode +1 moreCisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Root Privilege Escalation Vulnerability7.8 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software +1 moreCisco Adaptive Security Appliance Software Cross-Site Request Forgery Vulnerability8.1 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software, firepower threat defense (ftd) software +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software VPN SAML Authentication Bypass Vulnerability5.8 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software +1 moreCisco Adaptive Security Appliance Software VPN Denial of Service Vulnerability5.3 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software +1 moreCisco Adaptive Security Appliance Software IPsec Denial of Service Vulnerability8.6 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software, firepower threat defense (ftd) software +1 more +3 moreCisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software MOBIKE Denial of Service Vulnerability8.6 High
- cisco firepower threat defense software, secure firewall management center, secure firewall threat defense +2 moreCisco Firepower Threat Defense Software Command Injection Vulnerability6.0 Medium
- cisco adaptive security appliance (asa) software, firepower threat defense (ftd) software, adaptive security appliance software +1 more +3 moreCisco Adaptive Security Appliance and Firepower Threat Defense Software WebVPN Cross-Site Scripting Vulnerabilities4.8 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software Packet Processing Denial of Service Vulnerability8.6 High
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software SMB Protocol Preprocessor Detection Engine Denial of Service Vulnerabilities7.5 High
- cisco firepower threat defense (ftd) software, secure firewall management center +1 moreCisco Firepower Threat Defense Software Command Injection Vulnerability6.7 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, secure firewall threat defense +2 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Lightweight Directory Access Protocol Denial of Service Vulnerability6.8 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, firepower threat defense (ftd) software +1 more +3 moreCisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software TCP Timer Handling Denial of Service Vulnerability8.6 High
- cisco adaptive security appliance (asa) software, firepower threat defense (ftd) software, adaptive security appliance software +1 more +3 moreCisco Adaptive Security Appliance and Firepower Threat Defense Software Layer 2 Filtering Bypass Vulnerability4.3 Medium
- cisco firepower threat defense software, secure firewall management center, secure firewall threat defense +2 moreCisco Firepower Threat Defense Software SMB Protocol Preprocessor Detection Engine Denial of Service Vulnerabilities7.5 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software, firepower threat defense (ftd) software +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Denial of Service Vulnerability7.7 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software, secure firewall threat defense +2 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software TCP Proxy Denial of Service Vulnerability6.8 Medium
- cisco application policy infrastructure controller, application policy infrastructure controller (apic) +1 moreCisco Application Policy Infrastructure Controller Web-Based Management Interface Usage Information Disclosure Vulnerability5.3 Medium
- cisco ip phone 7800 series and 8800 series, wireless ip phone 8821 and 8821-ex, ip conference phone 7832 firmware +15 more +17 moreCisco IP Phone 7800 Series and 8800 Series Session Initiation Protocol XML Denial of Service Vulnerability7.5 High
- cisco application policy infrastructure controller, application policy infrastructure controller (apic) +1 moreCisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability7.8 High
- cisco nx-os software for nexus 9000 series fabric switches aci mode, nx-os +1 moreCisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Unmeasured Boot Vulnerability4.2 Medium
- cisco nx-os software for nexus 9000 series fabric switches aci mode, nx-os +1 moreCisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Insecure Fabric Authentication Vulnerability8.1 High
- cisco nx-os software for nexus 9000 series fabric switches aci mode 11.0.1b, nx-os +1 moreCisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Privilege Escalation Vulnerability7.8 High
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software TCP Ingress Handler Denial of Service Vulnerability8.6 High
- cisco application policy infrastructure controller, application policy infrastructure controller (apic) +1 moreCisco Application Policy Infrastructure Controller Recoverable Encryption Key Vulnerability4.6 Medium
- cisco application policy infrastructure controller (apic), nx-os +1 moreCisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Filter Query Information Disclosure Vulnerability4.3 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, secure firewall threat defense +2 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Denial of Service Vulnerability8.6 High
- denx u-bootgen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which...5.9 Medium
openssl-1_1SUSESecurity update for openssl-1_1No score- apple icloud, icloud for windows, ios +5 more +7 moreA cross-origin issue existed with the fetch API. This was addressed with improved input...6.5 Medium
- apple icloud, icloud for windows, ios +5 more +7 moreA logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2,...8.8 High
- apple icloud, icloud for windows, ios +6 more +8 moreA validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, tvOS 12.2,...6.5 Medium
- apple icloud, icloud for windows, ios +5 more +7 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...8.8 High
- apple icloud, icloud for windows, ios +5 more +7 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
opensslSUSESecurity update for opensslNo score- otrs, debian linux +1 moreAn issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0...6.5 Medium
- isc dhcpd, opensuse leap, redhat enterprise linux +16 more +18 moredhcpd: use-after-free error leads crash in IPv6 mode when using mismatched BIND libraries6.5 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreHeap over-read in PHP EXIF extension4.8 Medium
- nema dicom standardAn issue was discovered in the DICOM Part 10 File Format in the NEMA DICOM Standard 1995 through...7.8 High
- phpbbphpBB Denial of Service7.5 High
- lantronix securelinx spider firmwareLantronix SecureLinx Spider (SLS) 2.2+ devices have XSS in the auth.asp login page.6.1 Medium
- buffalo open xdmodAn issue was discovered in Open XDMoD through 7.5.0. An authentication bypass (account takeover)...9.8 Critical
- buffalo open xdmodAn issue was discovered in Open XDMoD through 7.5.0. html/gui/general/dl_publication.php allows...7.5 High
- buffalo open xdmodAn issue was discovered in Open XDMoD through 7.5.0. html/gui/general/login.php has Reflected XSS...6.1 Medium
- nih ncbi toolboxAn XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI...6.1 Medium
- nih ncbi toolboxA heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy...9.8 Critical
- nih ncbi toolboxA path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of...9.1 Critical
- solarwinds dameware mini remote controlDWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 has a Buffer Overflow associated with...7.5 High
- microfocus open enterprise server, oes netstorage component of open enterprise server +1 moreA DOM based XSS vulnerability has been identified in the Netstorage component of Open Enterprise...6.1 Medium
- billion 5200w-t firmware, zyxel p660hn-t1a v1 firmware, p660hn-t1a v2 firmware +2 moreThe ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by...8.8 High
- Show moreLoading…