CVEs published in May 2019
1,381 vulnerabilities, 265 critical, 14 exploited.
- bilboplanetAn issue was discovered in Bilboplanet 2.0. There is a stored XSS vulnerability when adding a tag...6.1 Medium
- bilboplanetAn issue was discovered in Bilboplanet 2.0. Stored XSS exists in the user_id parameter to signup...6.1 Medium
- bilboplanetAn issue was discovered in Bilboplanet 2.0. Stored XSS exists in the fullname parameter to signup...6.1 Medium
- tp-link archer cr700 firmwareTP-Link Archer CR-700 1.0.6 devices have an XSS vulnerability that can be introduced into the...6.1 Medium
- capstone-engine capstoneCapstone SEGV caused by a read memory access5.5 Medium
- libp2pFailure to properly verify ed25519 signatures in libp2p-core7.5 High
- libnyoci project libnyocicoap_decode_option in coap.c in LibNyoci 0.07.00rc1 mishandles certain packets with "Uri-Path: ...7.5 High
- debian linux, linux kernel, canonical ubuntu linux +12 more +14 morefs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in...5.5 Medium
- php-fusionIn PHP-Fusion 9.03.00, edit_profile.php allows remote authenticated users to execute arbitrary...8.8 High
- sylabs singularity, fedoraproject fedora, opensuse backports +1 more +3 moreIncorrect Permission Assignment for Critical Resource in Singularity8.8 High
- sap identity management, sap se identity management (rest interface) +1 moreUnder certain conditions, it is possible to request the modification of role or privilege...8.8 High
- sap e-commerce, sap se e-commerce (sap-crmjav, sap-crmweb, sap-shrweb, sap-shrjav, sap-crmapp, sap-shrapp) +1 moreSAP E-Commerce (Business-to-Consumer) application does not sufficiently encode user-controlled...6.1 Medium
- sap solution manager system, sap se solution manager system (st-pi) +1 moreRead of RFC destination does not always perform necessary authorization checks, resulting in...6.5 Medium
- sap solution managerUnder certain conditions Solution Manager, version 7.2, allows an attacker to access information...5.5 Medium
- sap businessobjects, sap se businessobjects business intelligence platform +1 moreUnder certain conditions SAP BusinessObjects Business Intelligence platform (Analysis for OLAP),...7.1 High
- sap businessobjects, sap se businessobjects business intelligence platform (central management server) +1 moreUnder certain conditions SAP BusinessObjects Business Intelligence platform (Central Management...7.6 High
- sap treasury and risk management, sap se enterprise financial services (s4core), treasury and risk management(ea-finserv) +2 moreSAP Treasury and Risk Management (EA-FINSERV 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18 and 8...8.8 High
- microsoft .net framework, rapidflows rapid4 +1 moreGetFile.aspx in Rapid4 RapidFlows Enterprise Application Builder 4.5M.23 (when used with .NET...6.5 Medium
- lg n1a1 nas, n1a1 firmware +1 moreLG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary...9.8 Critical
- kyocera taskalfa 4002i firmware, taskalfa 6002i firmware +1 moreDoBox_CstmBox_Info.model.htm on Kyocera TASKalfa 4002i and 6002i devices allows remote attackers...7.5 High
- tibco spotfire analytics platform for aws, spotfire server, tibco software inc. spotfire analytics platform for aws marketplace +2 moreTIBCO Spotfire Server Vulnerabilities With Integrity of Comments and Bookmarks4.3 Medium
- tibco spotfire analytics platform for aws, spotfire server, tibco software inc. spotfire analytics platform for aws marketplace +2 moreTIBCO Spotfire Server Exposes Multiple Reflected Cross-Site Scripting Vulnerabilities8.8 High
- tibco spotfire statistics servicesTIBCO Spotfire Statistics Services Exposes Sensitive Files9.9 Critical
- siemens sinamics perfect harmony gh180 with nxg i control, mlfbs: 6sr2...-, 6sr3...-, 6sr4...-, siemens ag sinamics perfect harmony gh180 with nxg ii control, mlfbs: 6sr2...-, 6sr3...-, 6sr4...-, siemens sinamics perfect harmony gh180 with nxg i control mlfb 6sr2 firmware +5 more +7 moreA vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs:...7.5 High
- siemens simatic wincc (tia portal), simatic wincc runtime advanced, simatic wincc runtime professional +16 more +18 moreA vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1...5.4 Medium
- siemens simatic wincc (tia portal), simatic wincc runtime advanced, simatic wincc runtime professional +16 more +18 moreA vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1...7.5 High
- siemens sinamics perfect harmony gh180 with nxg i control, mlfbs: 6sr2...-, 6sr3...-, 6sr4...-, siemens ag sinamics perfect harmony gh180 with nxg ii control, mlfbs: 6sr2...-, 6sr3...-, 6sr4...-, siemens sinamics perfect harmony gh180 with nxg i control mlfb 6sr2 firmware +5 more +7 moreA vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs:...7.5 High
- siemens simatic wincc (tia portal), simatic wincc runtime advanced, simatic wincc runtime professional +16 more +18 moreA vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1...9.1 Critical
- siemens logo! soft comfort, logo\! soft comfort +1 moreA vulnerability has been identified in LOGO! Soft Comfort (All versions). The vulnerability could...7.8 High
- siemens simatic pcs 7 v8.0 and earlier, simatic pcs 7 v8.1 and newer, simatic wincc v7.2 and earlier +3 more +5 moreA vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS...9.8 Critical
- siemens logo! 8 bm (incl. siplus variants), logo\!8 bm firmware +1 moreA vulnerability has been identified in LOGO!8 BM (All versions). Unencrypted storage of passwords...7.5 High
- siemens logo! 8 bm (incl. siplus variants), logo\!8 bm firmware +1 moreA vulnerability has been identified in LOGO!8 BM (All versions). Project data stored on the...7.5 High
- siemens logo! 8 bm (incl. siplus variants), logo\!8 bm firmware +1 moreA vulnerability has been identified in LOGO!8 BM (All versions). Attackers with access to port...9.4 Critical
- siemens simatic pcs 7 v8.0 and earlier, simatic pcs 7 v8.1, simatic pcs 7 v8.2 +15 more +17 moreA vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS...8.8 High
- siemens simatic pcs 7 v8.0 and earlier, simatic pcs 7 v8.1, simatic pcs 7 v8.2 +15 more +17 moreA vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS...5.5 Medium
- siemens simatic pcs 7 v8.0 and earlier, simatic pcs 7 v8.1, simatic pcs 7 v8.2 +15 more +17 moreA vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS...8.8 High
- facebook whatsapp business for android, whatsapp business for ios, whatsapp for android +5 more +7 moreA buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via...9.8 Critical
- ellucian banner enterprise identity services, banner web tailor +1 moreAn improper authentication vulnerability can be exploited through a race condition that occurs in...8.1 High
- microstrategy web servicesAn issue was discovered in MicroStrategy Web Services (the Microsoft Office plugin) before 10.4...9.8 Critical
- enghouse contact center\ClientServiceConfigController.cs in Enghouse Cloud Contact Center Platform 7.2.5 has...9.8 Critical
- tencent wechatvcodec2_hls_filter in libvoipCodec_v7a.so in the WeChat application through 7.0.3 for Android...5.5 Medium
- ricoh sp 4520dn firmwareAn HTML Injection vulnerability has been discovered on the RICOH SP 4520DN via the /web/entry/en...6.1 Medium
- ricoh sp 4510dn firmwareAn HTML Injection vulnerability has been discovered on the RICOH SP 4510DN via the /web/entry/en...6.1 Medium
- dotcms/servlets/ajax_file_upload?fieldName=binary3 in dotCMS 5.1.1 allows XSS and HTML Injection.6.1 Medium
- abus secvest wireless alarm system fuaa50000 firmwareDue to the use of an insecure RFID technology (MIFARE Classic), ABUS proximity chip keys (RFID...8.1 High
- apachefriends xamppXAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE:...9.8 Critical
- webiness inventory project inventoryAn issue was discovered in Webiness Inventory 2.3. The ProductModel component allows Arbitrary...6.5 Medium
- emerson ve6046 firmwareEmerson VE6046 09.0.12 devices have hardcoded admin credentials allowing remote connection to the...9.8 Critical
- qdpmqdPM 9.1 suffers from Cross-site Scripting (XSS) via configuration?type=[XSS] parameter.6.1 Medium
- qdpmqdPM 9.1 suffers from Cross-site Scripting (XSS) in the search[keywords] parameter.6.1 Medium
- Show moreLoading…