CVEs published in May 2019
1,381 vulnerabilities, 265 critical, 14 exploited.
- dhcpcd project dhcpcd, debian linux +1 moredhcp6.c in dhcpcd before 6.11.7 and 7.x before 7.2.2 has a buffer over-read in the...9.8 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in service workers in Google Chrome prior to 74.0.3729.108...5.4 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in developer tools in Google Chrome on OS X prior to 74.0.3729.108...7.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUninitialized data in media in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote...8.8 High
- google chrome, fedoraproject fedora, opensuse backports +1 more +3 moreProcess lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a...8.8 High
- xmlsoft libxslt, debian linux, google chrome +2 moreNokogiri implementation of libxslt vulnerable to heap corruption7.5 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreInadequate security UI in iOS UI in Google Chrome prior to 74.0.3729.108 allowed a remote...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreIncorrect handling of CORS in ServiceWorker in Google Chrome prior to 74.0.3729.108 allowed a...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInformation leak in autofill in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in file chooser in Google Chrome prior to 74.0.3729.108 allowed a remote attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreObject lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse-after-free in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to...6.5 Medium
- smartbear readyapiThe WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to...8.8 High
- f5 big-ip (ltm, aam, afm, apm, asm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +6 more +8 moreOn BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, the Traffic Management Microkernel...7.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8,...4.9 Medium
- php imagick, php group imagick extension +1 moreOut of bounds memory write in PHP Imagick extension4.9 Medium
- lenovo xclarity administratorAn internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy...8.7 High
- atlassian jira, jira server +1 moreThe labels gadget in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2...6.1 Medium
- atlassian jiraThe WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject...6.1 Medium
- red hat wildfly, redhat jboss enterprise application platform +1 moreIt was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem in versions from...5.4 Medium
- red hat wildfly, redhat jboss enterprise application platform +1 moreA flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are...5.5 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, a...6.5 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8,...7.2 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, internal methods used to prevent...6.5 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8,...4.9 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, SNMP may expose...5.3 Medium
- f5 big-ip (ltm, aam, afm, apm, asm, dns, gtm, link controller, pem), big-ip access policy manager, big-ip advanced firewall manager +7 more +9 moreOn BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8,...7.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreWhen BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8...7.5 High
- cisco prime collaboration assuranceCisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability6.1 Medium
- cisco hyperflex hx-series, hx220c af m5 firmware, hx220c all nvme m5 firmware +12 more +14 moreCisco HyperFlex HX-Series Web-Based Management Interface Cross-Site Request Forgery Vulnerability6.1 Medium
- cisco small business 200 series smart switches, sf200-24 firmware, sf200-24fp firmware +112 more +114 moreCisco Small Business Switches Secure Shell Certificate Authentication Bypass Vulnerability7.2 High
- cisco application policy infrastructure controller, application policy infrastructure controller (apic) +1 moreCisco Application Policy Infrastructure Controller Web-Based Management Interface Cross-Site Scripting Vulnerability5.4 Medium
- cisco email security appliance (esa), email security appliance +1 moreCisco Email Security Appliance Filter Bypass Vulnerability5.3 Medium
- cisco prime network registrar, network registrar +1 moreCisco Prime Network Registrar Cross-Site Scripting Vulnerability6.1 Medium
- cisco expressway, telepresence video communication server +1 moreCisco Expressway Series Directory Traversal Vulnerability4.1 Medium
- cisco web security appliance, web security appliance (wsa) +1 moreCisco Web Security Appliance Malformed Request Denial of Service Vulnerability8.6 High
- cisco nx-os software for nexus 9000 series fabric switches aci mode, nx-os +1 moreCisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Symbolic Link Path Traversal Vulnerability5.5 Medium
- cisco nx-os software for nexus 9000 series fabric switches aci mode 11.0.1b, nexus 93108tc-ex firmware, nexus 93120tx firmware +11 more +13 moreCisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Default SSH Key Vulnerability9.8 Critical
- cisco umbrellaCisco Umbrella Dashboard Session Management Vulnerability7.6 High
- cisco web security appliance (wsa), web security appliance +1 moreCisco Web Security Appliance Privilege Escalation Vulnerability5.3 Medium
- cisco adaptive security appliance (asa) software, firepower threat defense (ftd) software, adaptive security appliance device manager +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability5.3 Medium
- cisco small business rv series router firmware, rv320 dual gigabit wan vpn router software, rv325 dual wan gigabit vpn router firmware +2 moreCisco Small Business RV320 and RV325 Routers Session Hijacking Vulnerability8.8 High
- Show moreLoading…