CVEs published in May 2019
1,381 vulnerabilities, 265 critical, 14 exploited.
- qualcomm technologies, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +19 more +21 moreA new account can be inserted into simContacts service using Android command line tool in...5.5 Medium
- qualcomm technologies, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +14 more +16 moreWhile iterating through the models contained in a fixed-size array in the actData structure,...7.8 High
- qualcomm technologies, inc. snapdragon mobile, qualcomm sd 425 firmware, sd 427 firmware +11 more +13 moreIn case of using an invalid android verified boot signature with very large length, an integer...7.8 High
- qualcomm technologies, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +19 more +21 moreA Use After Free Condition can occur in Thermal Engine in Snapdragon Automobile, Snapdragon...7.8 High
- qualcomm technologies, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +10 more +12 moreWhile processing camera buffers in camera driver, a use after free condition can occur in...7.8 High
- qualcomm technologies, inc. snapdragon mobile, qualcomm sd 410 firmware, sd 412 firmware +14 more +16 moreWhen HOST sends a Special command ID packet, Controller triggers a RAM Dump and FW reset in...5.5 Medium
- qualcomm technologies inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +26 more +28 moreIn QTEE, an incorrect fuse value can be blown in Snapdragon Automobile, Snapdragon Mobile,...7.8 High
- veeam one reporterVeeam ONE Reporter 9.5.0.3201 allows CSRF.8.8 High
- dlink dcs-5009l firmware, dcs-5010l firmware, dcs-5020l firmware +7 more +9 moreThe D-Link DCS series of Wi-Fi cameras contains a stack-based buffer overflow in alphapd, the...8.8 High
- ascensia contour diabetesAn issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01...7.4 High
- ascensia contour diabetesAn issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01...7.4 High
- ascensia contour diabetesAn issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01...7.5 High
- ascensia contour diabetesAn issue was discovered in the Ascensia Contour NEXT ONE application for iOS and Android before...5.3 Medium
- ascensia contour diabetesAn issue was discovered in the Ascensia Contour NEXT ONE app for iOS before 2019-01-15. An...7.5 High
- sierrawireless airlink es450 firmwareAn exploitable information disclosure vulnerability exists in the ACEManager template_load.cgi...6.5 Medium
- phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreThe WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to...8.6 High
- sierra wireless airlink aleos, sierrawireless aleos +1 moreAn exploitable remote code execution vulnerability exists in the upload.cgi functionality of...8.8 High
- sierrawireless airlink es450 firmwareAn exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of...8.8 High
- sierrawireless airlink es450 firmwareA hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless...8.1 High
- sierrawireless airlink es450 firmwareAn exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task...8.8 High
- sierrawireless airlink es450 firmwareAn exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task...8.8 High
- impresscmsImpressCMS XSS6.1 Medium
- sierrawireless airlink es450 firmwareAn exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task...8.8 High
- sierrawireless airlink es450 firmwareAn exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task...8.8 High
- sierrawireless airlink es450 firmwareAn exploitable cross-site scripting vulnerability exists in the ACEManager ping_result.cgi...6.1 Medium
- sierrawireless airlink es450 firmwareAn exploitable command injection vulnerability exists in the ACEManager iplogging.cgi...8.8 High
- sierrawireless airlink es450 firmwareAn exploitable information disclosure vulnerability exists in the ACEManager functionality of...5.3 Medium
- visser woocommerce checkout managerThe WooCommerce Checkout Manager plugin before 4.3 for WordPress allows media deletion via the wp...7.5 High
- sierrawireless airlink es450 firmwareAn information disclosure vulnerability exists in the ACEManager authentication functionality of...7.5 High
- apache commons imagingInfinite Loop in Apache Sanselan7.5 High
- apache commons imagingImproper Input Validation in Apache Sanselan7.5 High
- ui unifi videoIn UniFi Video 3.10.0 and prior, due to the lack of CSRF protection, it is possible to abuse the...8.8 High
- revive adserver, revive-sas revive adserver +1 moreAn attacker could send a specifically crafted payload to the XML-RPC invocation script and...9.8 Critical
- revive adserver, revive-adserver revive adserver +1 moreA user having access to the UI of a Revive Adserver instance could be tricked into clicking on a...5.4 Medium
- mqtt-packet project mqtt-packetImproper Input Validation and Buffer Over-read in mqtt-packet7.5 High
- twitter kit for ios, kit +1 moreThis vulnerability was caused by an incomplete fix to CVE-2017-0911. Twitter Kit for iOS versions...5.4 Medium
- eclipse xtend, xtext, the eclipse foundation eclipse xtext +2 morePotentially compromised builds8.1 High
- spring cloud config, vmware spring cloud config, oracle communications cloud native core policy +2 moreDirectory Traversal with spring-cloud-config-server6.5 Medium
- pivotal software spring data java persistence api, spring boot +1 moreAdditional information exposure with Spring Data JPA derived queries3.5 Low
- facebook thriftLegacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving...7.5 High
- facebook thriftImproper Input Validation and Excessive Iteration in Go Facebook Thrift7.5 High
- facebook thriftJava Facebook Thrift servers would not error upon receiving messages with containers of fields of...7.5 High
- facebook thriftPython Facebook Thrift servers would not error upon receiving messages with containers of fields...7.5 High
- facebook thriftC++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers...7.5 High
- artifex ghostscript, canonical ubuntu linux, debian linux +3 more +5 moreIt was found that in ghostscript some privileged operators remained accessible from various...7.3 High
- sensiolabs symfonyInvalid HTTP method overrides allow possible XSS or other attacks in Symfony9.8 Critical
- sensiolabs symfony, drupal +1 moreImproper authentication in Symfony7.5 High
- sensiolabs symfony, drupal +1 moreSymfony Service IDs Allow Injection9.8 Critical
- sensiolabs symfony, drupal +1 moreSymfony Cross-site Scripting (XSS) vulnerability5.4 Medium
- phpbbphpBB Server side request forgery (SSRF)5.8 Medium
- Show moreLoading…