CVEs published in May 2019
1,381 vulnerabilities, 265 critical, 14 exploited.
- wso2 dashboard serverAn issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to force the application...5.8 Medium
- wso2 api managerAn issue was discovered in WSO2 API Manager 2.6.0. Uploaded documents for API documentation are...5.3 Medium
- wso2 dashboard serverAn issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to inject a JavaScript...4.8 Medium
- wso2 api managerAn issue was discovered in WSO2 API Manager 2.6.0. It is possible to force the application to...4.1 Medium
- tubigan welcome to our resortThe Tubigan "Welcome to our Resort" 1.0 software allows SQL Injection via index.php?p...9.8 Critical
- sony photo sharing plusSony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used...8.1 High
- samsung s10 firmware, s9\+ firmware, xcover 4 firmware +2 more** DISPUTED ** Samsung S9+, S10, and XCover 4 P(9.0) devices can become temporarily inoperable...5.5 Medium
- debian linux, lemonldap-ng lemonldap\ +1 moreLemonLDAP::NG -2.0.3 has Incorrect Access Control.9.8 Critical
- fedoraproject fedora, intel microarchitectural data sampling uncacheable memory firmware, intel corporation central processing units (cpus) +2 moreMicroarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some...5.6 Medium
- heimdal project heimdal, samba +1 moreA flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4...7.5 High
- fedoraproject fedora, intel microarchitectural fill buffer data sampling firmware, intel corporation central processing units (cpus) +2 moreMicroarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors...5.6 Medium
- fedoraproject fedora, intel microarchitectural load port data sampling firmware, intel corporation central processing units (cpus) +2 moreMicroarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing...5.6 Medium
- fedoraproject fedora, intel microarchitectural store buffer data sampling firmware, intel corporation central proccve-2018-12126essing units (cpus) +2 moreMicroarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors...5.6 Medium
- gracemedia media player project media playerThe GraceMedia Media Player plugin 1.0 for WordPress allows Local File Inclusion via the "cfg"...9.8 Critical
- bosch video management system, video recording manager, divar ip 2000 firmware +1 more +3 moreA Path Traversal vulnerability located in the webserver affects several Bosch hardware and...6.5 Medium
- bosch video management system, video recording manager, divar ip 2000 firmware +1 more +3 moreAn Open Redirect vulnerability located in the webserver affects several Bosch hardware and...6.1 Medium
- ipbrick osAn issue was discovered in the administration page in IPBRICK OS 6.3. There are multiple XSS...4.8 Medium
- ipbrick osAn issue was discovered in the Web Management Console in IPBRICK OS 6.3. There are multiple SQL...8.8 High
- ipbrick osAn issue was discovered in the administrator interface in IPBRICK OS 6.3. The application doesn't...8.8 High
- suricata-ids suricataAn issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the function...9.8 Critical
- openprojectA SQL injection vulnerability in the activities API in OpenProject before 8.3.2 allows a remote...8.1 High
- bibliosoft bibliopacCross-site scripting (XSS) vulnerability in BIBLIOsoft BIBLIOpac 2008 allows remote attackers to...6.1 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Web UI Command Injection Vulnerability7.2 High
- cisco 15454-m-wse-k9 firmware, analog voice network interface modules firmware, asa 5500 firmware +25 more +27 moreCisco Secure Boot Hardware Tampering Vulnerability6.7 Medium
- rust-lang rust, fedoraproject fedora, opensuse leap +2 moreThe Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method...8.1 High
- sharing-file easy file sharing web serverAn issue was discovered in Easy File Sharing (EFS) Web Server 7.2. A stack-based buffer overflow...9.8 Critical
- citrix sharefileCitrix ShareFile through 19.1 allows a downgrade from two-factor authentication to one-factor...5.9 Medium
- citrix sharefileCitrix ShareFile through 19.1 allows User Enumeration. It is possible to enumerate application...7.5 High
- konakartKonaKart 8.9.0.0 is vulnerable to Remote Code Execution by uploading a web shell as a product...9.8 Critical
- lifesize icon 300 firmware, icon 500 firmware, icon 700 firmware +2 moreA Remote Code Execution issue in the DNS Query Web UI in Lifesize Icon LS_RM3_3.7.0 (2421) allows...8.8 High
- eq-3 ccu3 firmwareUnauthenticated password hash disclosure in the User.getUserPWD method in eQ-3 AG Homematic CCU3...7.5 High
- eq-3 ccu3 firmwareDirectory Traversal / Arbitrary File Read in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows...7.5 High
- oisf suricataA buffer over-read issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the...7.5 High
- foxitsoftware foxit readerA Local Privilege Escalation in libqcocoa.dylib in Foxit Reader 3.1.0.0111 on macOS has been...7.8 High
- mobatek mobaxtermIn MobaTek MobaXterm Personal Edition v11.1 Build 3860, the SSH private key and its password can...9.8 Critical
- ibm spectrum scaleA security vulnerability has been identified in IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4...4.0 Medium
- cam the university of cambridge web authentication system apache authentication agentDirectory Traversal was discovered in University of Cambridge mod_ucam_webauth before 2.0.2. The...9.8 Critical
- anker-in roav dashcam a1 firmwareAn exploitable code execution vulnerability exists in the HTTP request-parsing function of the...10.0 Critical
- anker-in roav dashcam a1 firmwareAn exploitable denial-of-service vulnerability exists in the thumbnail display functionality of...7.5 High
- anker-in roav dashcam a1 firmwareAn exploitable denial-of-service vulnerability exists in the XML_UploadFile Wi-Fi command of the...5.3 Medium
- anker-in roav dashcam a1 firmwareAn exploitable firmware update vulnerability exists in the NT9665X Chipset firmware running on...5.3 Medium
- anker-in roav dashcam a1 firmwareAn exploitable firmware update vulnerability exists in the NT9665X Chipset firmware, running on...10.0 Critical
- anker-in roav dashcam a1 firmwareAn exploitable denial-of-service vulnerability exists in the XML_GetRawEncJpg Wi-Fi command of...7.5 High
- anker-in roav dashcam a1 firmwareAn exploitable denial-of-service vulnerability exists in the XML_GetScreen Wi-Fi command of the...7.5 High
- anker-in roav dashcam a1 firmwareAn exploitable code execution vulnerability exists in the XML_UploadFile Wi-Fi command of the...10.0 Critical
- anker-in roav dashcam a1 firmwareAn exploitable vulnerability exists in the Wi-Fi Access Point feature of the Roav A1 Dashcam...7.1 High
- anker-in roav dashcam a1 firmwareAn exploitable code execution vulnerability exists in the URL-parsing functionality of the Roav...8.0 High
- anker-in roav dashcam a1 firmwareAn exploitable code execution vulnerability exists in Wi-Fi Command 9999 of the Roav A1 Dashcam...8.0 High
- control-webpanel webpanelCentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version), 0.9.8.753 ...4.8 Medium
- grideaGridea v0.8.0 has an XSS vulnerability through which the Nodejs module can be called to achieve...6.1 Medium
- Show moreLoading…