CVEs published in May 2019
1,381 vulnerabilities, 265 critical, 14 exploited.
- oneshield policyPersistent XSS has been found in the OneShield Policy (Dragon Core) framework before 5.1.10....6.1 Medium
- printerlogic management software, print management +1 morePrinterLogic Print Management Software does not sanitize special characters9.8 Critical
- printerlogic management software, print management +1 morePrinterLogic Print Management Software updates and executes the code without origin and code verification9.8 Critical
- printerlogic management software, print management +1 morePrinterLogic Print Management Software fails to validate the management portal SSL certificates7.4 High
- htmlyMultiple cross-site scripting (XSS) vulnerabilities in HTMLy 2.7.4 allow remote attackers to...6.1 Medium
- barni master ip camera01 firmwareMASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd...9.8 Critical
- misp-project mispAn issue was discovered in app/webroot/js/misp.js in MISP before 2.4.107. There is persistent XSS...6.1 Medium
- misp-project mispAn issue was discovered in app/View/Elements/Events/View/value_field.ctp in MISP before 2.4.107....6.1 Medium
- misp-project mispA persistent XSS issue was discovered in app/View/Helper/CommandHelper.php in MISP before 2.4.107...6.1 Medium
- google android, canonical ubuntu linux +1 moreIn the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +11 more +13 moreAn issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8....8.1 High
- wago 750-330 firmware, 750-352 firmware, 750-829 firmware +13 more +15 moreThe Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881...9.8 Critical
- google android, nvidia tegra tlk widevine trust application +1 moreNVIDIA Tegra TLK Widevine Trust Application contains a vulnerability in which missing the input...7.8 High
- parsecgaming parsecA vulnerability in Parsec Windows 142-0 and Parsec 'Linux Ubuntu 16.04 LTS Desktop' Build 142-1...9.8 Critical
- jio jmr1140 firmwareJioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain an admin token by...8.1 High
- jio jmr1140 firmwareJioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain the Wi-Fi password...9.8 Critical
- jio jmr1140 firmwarecgi-bin/qcmap_web_cgi on JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices has POST based reflected...6.1 Medium
- coship rt3050 firmware, rt3052 firmware, rt7620 firmware +1 more +3 moreAn issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices. The password...9.8 Critical
- rukovoditelRukovoditel through 2.4.1 allows XSS via a URL that lacks a module=users%2flogin substring.6.1 Medium
- axiosDenial of Service in axios7.5 High
- ibm tririga application platformIBM TRIRIGA Application Platform 3.5.3 and 3.6.0 is vulnerable to an XML External Entity...7.1 High
- ibm tririga application platformIBM TRIRIGA Application Platform 3.5.3 and 3.6.0 may disclose sensitive information only...4.0 Medium
- ibm tririga application platformIBM TRIRIGA Application Platform 3.5.3 and 3.6.0 could disclose sensitive information to an...4.3 Medium
- ibm cram social program management, curam social program management +1 moreIBM Cram Social Program Management 6.1.1, 6.2.0, 7.0.4, and 7.0.5 is vulnerable to cross-site...4.3 Medium
- zohocorp manageengine netflow analyzerXSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone...6.1 Medium
- zohocorp manageengine netflow analyzerXSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone...6.1 Medium
- alliedtelesis 8100l\/8 firmwareAllied Telesis 8100L/8 devices allow XSS via the edit-ipv4_interface.php vlanid or subnet_mask...6.1 Medium
- blogengine blogengine.netBlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd.9.8 Critical
- coppermine-gallery coppermine photo galleryecard.php in Coppermine Photo Gallery (CPG) 1.5.46 has XSS via the sender_name, recipient_email,...6.1 Medium
- phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreThe WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is vulnerable to a...7.5 High
- phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreThe WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is prone to CSRF.8.8 High
- phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreThe WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext...8.2 High
- phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreThe WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 leaks private...5.3 Medium
- sonatype nexus repository managerSonatype Nexus Repository Manager 2.x before 2.14.13 allows XSS.6.1 Medium
- ninjaforms ninja forms file uploadsPath Traversal and Unrestricted File Upload exists in the Ninja Forms plugin before 3.0.23 for...8.1 High
- maharaAn issue was discovered in Mahara 17.10 before 17.10.8, 18.04 before 18.04.4, and 18.10 before 18...4.9 Medium
- hisilicon hi3516 firmwareA buffer overflow vulnerability in the streaming server provided by hisilicon in HI3516 models...9.8 Critical
- maharaAn issue was discovered in Mahara 17.10 before 17.10.8, 18.04 before 18.04.4, and 18.10 before 18...5.4 Medium
- linux kernel, opensuse leap, redhat enterprise linux +6 more +8 moreAn issue was discovered in the Linux kernel before 5.0.4. There is a use-after-free upon...7.0 High
- slice-deque project slice-dequeOut of bounds write in slice-deque9.8 Critical
- ratpack project ratpackUse of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Ratpack3.7 Low
JudyAlmaLinuxmariadb:10.3 bug fix updateNo scorespacewalk-remote-utilsAlmaLinux,koanAlmaLinux,osadAlmaLinux +27 more +29 morerhn-tools:1.0 bug fix updateNo scoreoci-systemd-hookAlmaLinux,oci-umountAlmaLinux +1 morecontainer-tools bug fix updateNo scorefirefox-esrDebianfirefox-esr - new upstream versionNo score- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur...7.5 High
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreAn issue was discovered in the Linux kernel before 4.20. There is a race condition in...8.1 High
- qualcomm technologies, inc. small cell soc, snapdragon mobile, snapdragon wear, qualcomm fsm9055 firmware, fsm9955 firmware +37 more +39 moreLack of check of buffer length before copying can lead to buffer overflow in camera module in...7.8 High
- qualcomm technologies, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +15 more +17 moreAn integer underflow may occur due to lack of check when received data length from...7.8 High
- qualcomm technologies, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +7 more +9 moreSecure camera logic allows display/secure camera controllers to access HLOS memory during secure...7.8 High
- Show moreLoading…