CVEs published in May 2019
1,381 vulnerabilities, 265 critical, 14 exploited.
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in...7.8 High
- gitlabAn issue was discovered in GitLab Enterprise Edition before 11.7.11, 11.8.x before 11.8.7, and 11...6.5 Medium
- denx u-bootDas U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a...9.8 Critical
- netapp oncommand insightOncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers...7.5 High
- lightopenid project lightopenidopenid.php in LightOpenID through 1.3.1 allows SSRF via a crafted OpenID 2.0 assertion request...9.8 Critical
- netapp oncommand unified manager, oncommand unified manager for vmware vsphere,linux and windows 7.2 and above +1 moreOnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without...7.5 High
- netapp oncommand unified manager 7-mode, oncommand unified manager +1 moreOnCommand Unified Manager 7-Mode prior to version 5.2.4 shipped without certain HTTP Security...7.5 High
- sqlite, sqlite sqlite3, canonical ubuntu linux +3 more +5 moreAn exploitable use after free vulnerability exists in the window function functionality of...8.1 High
- hpe virtual connect se 16gb fibre channel module for hpe synergy, hp synergy firmware +1 moreA security vulnerability in the HPE Virtual Connect SE 16Gb Fibre Channel Module for HPE Synergy...9.8 Critical
- hp nonstop safeguard h series, nonstop safeguard j series, nonstop safeguard l series +4 more +6 moreA Local Disclosure of Sensitive Information vulnerability was identified in HPE NonStop Safeguard...7.0 High
- arubanetworks aruba instant, siemens scalance w1750d firmware +1 moreA command injection vulnerability is present that permits an unauthenticated user with access to...9.8 Critical
- arubanetworks aruba instant, siemens scalance w1750d firmware +1 moreA reflected cross-site scripting (XSS) vulnerability is present in an unauthenticated Aruba...6.1 Medium
- arubanetworks aruba instant, siemens scalance w1750d firmware +1 moreA command injection vulnerability is present in Aruba Instant that permits an authenticated...7.2 High
- arubanetworks aruba instant, siemens scalance w1750d firmware +1 moreIf a process running within Aruba Instant crashes, it may leave behind a "core dump", which...7.5 High
- ruby-lang webrick** DISPUTED ** The WEBrick gem 1.4.2 for Ruby allows directory traversal if the attacker once had...5.5 Medium
- dkpro-core project dkpro-corePath Traversal in DKPro Core7.5 High
- open-xchange appsuiteOX Software GmbH App Suite 7.8.4 and earlier is affected by: Information Exposure.7.5 High
- open-xchange appsuiteOX Software GmbH App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).6.1 Medium
- ibm business automation workflow, business process manager +1 moreIBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, and 19.0.0.1 is vulnerable to...5.4 Medium
- ibm cloud app managementIBM Cloud App Management V2018.2.0, V2018.4.0, and V2018.4.1 could allow an attacker to obtain...5.3 Medium
- ibm financial transaction managerIBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.2 is vulnerable to...4.3 Medium
- openmrs openmrs-module-htmlformentryOpenMRS openmrs-module-htmlformentry 3.3.2 is affected by: (Improper Input Validation).9.8 Critical
- xiongmaitech besder ip20h1 firmwareAn issue was discovered on XiongMai Besder IP20H1 V4.02.R12.00035520.12012.047500.00200 cameras....6.5 Medium
- metinfoMetinfo 5.3.18 is affected by: Cross Site Request Forgery (CSRF). The impact is: Information...8.8 High
- opto 22 optodatalink, optoopcserver, pac display basic +5 more +7 moreA vulnerable file in Opto 22 PAC Project Professional versions prior to R9.4006, PAC Project...9.8 Critical
- cisco elastic services controllerCisco Elastic Services Controller REST API Authentication Bypass Vulnerability10.0 Critical
- custom field suite project field suiteThe Custom Field Suite plugin before 2.5.15 for WordPress has XSS for editors or admins.5.4 Medium
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreThe do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel before 5.0.15...3.3 Low
- sensiolabs symfonyDeserialization of untrusted data in Symfony7.1 High
- typesettercms typesetterinclude/admin/Menu/Ajax.php in Typesetter 5.1 has index.php/Admin/Menu/Ajax?cmd=AddHidden title XSS.4.8 Medium
- s9y serendipitySerendipity before 2.1.5 has XSS via EXIF data that is mishandled in the templates/2k11/admin...6.1 Medium
- yuzopro yuzoThe Yuzo Related Posts plugin 5.12.94 for WordPress has XSS because it mistakenly expects that...6.1 Medium
- thehive-project cortex-analyzersTheHive Project UnshortenLink analyzer before 1.1, included in Cortex-Analyzers before 1.15.2,...7.7 High
- microfocus identity managerThe ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an...7.5 High
- palo alto networks demistoCross-site scripting (XSS) vulnerability in Palo Alto Networks Demisto 4.5 build 40249 may allow...6.1 Medium
- ambittechnologies itech b2b script, itech business networking script, itech caregiver script +9 more +11 moreCertain Ambit Technologies Pvt. Ltd products are affected by: SQL Injection. This affects iTech...9.8 Critical
- joomlaextensions component appointmenthttps://www.joomlaextensions.co.in/ Joomla! Component Appointment 1.1 is affected by: SQL...9.8 Critical
- ynetinteractive soa school managementYnet Interactive - http://demo.ynetinteractive.com/soa/ SOA School Management 3.0 is affected by:...9.8 Critical
- ynetinteractive mobiketaYnet Interactive - http://demo.ynetinteractive.com/mobiketa/ Mobiketa 4.0 is affected by: SQL...8.8 High
- webfile explorer project explorerhttp://codecanyon.net/user/Endober WebFile Explorer 1.0 is affected by: SQL Injection. The impact...7.5 High
- matrix sydent, synapse +1 morematrix-sydent and matrix-synapse Use Cryptographically Weak PRNG7.5 High
- mpg123A heap-based buffer over-read in the getbits function in src/libmpg123/getbits.h in mpg123...8.3 High
- qbittorrentThe UI Lock feature in qBittorrent version 3.3.15 is vulnerable to Authentication Bypass, which...7.1 High
- metinfoMetinfo 5.3.18 is affected by: Cross Site Request Forgery (CSRF). The impact is: Information...6.5 Medium
- entropymine imageworsenerThe iwgif_init_screen function in imagew-gif.c:510 in ImageWorsener 1.3.2 allows remote attackers...6.5 Medium
- ibm spectrum control standard edition, spectrum control, tivoli storage productivity center +2 moreIBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2...4.7 Medium
- ibm spectrum control standard edition, spectrum control, tivoli storage productivity center +2 moreIBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2...6.8 Medium
- qnap myqnapcloudBuffer Overflow vulnerability in myQNAPcloud Connect 1.3.3.0925 and earlier could allow remote...7.5 High
- metinfoMultiple cross-site scripting (XSS) vulnerabilities in admin/index.php in Metinfo 5.3.18 allows...6.1 Medium
- ge communicatorGE Communicator, all versions prior to 4.0.517, allows a non-administrative user to replace the...7.8 High
- Show moreLoading…