CVEs published in May 2019
1,381 vulnerabilities, 265 critical, 14 exploited.
- cisco nx-os, nx-os software +1 moreCisco Nexus 3000 Series and 9000 Series Switches in NX-OS Mode CLI Command Software Image Signature Verification Vulnerability6.7 Medium
- cisco 550x series stackable managed switches, esw2-350g52dc firmware, esw2-550x48dc firmware +103 more +105 moreCisco Small Business Series Switches Simple Network Management Protocol Denial of Service Vulnerability7.7 High
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Command Injection Vulnerability6.7 Medium
- cisco nx-os software, nx-os, firepower extensible operating system +2 moreCisco FXOS and NX-OS Software Command Injection Vulnerability6.7 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Command Injection Vulnerability6.7 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Command Injection Vulnerability6.7 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Command Injection Vulnerability6.7 Medium
- aware knomiThe Face authentication component in Aware mobile liveness 2.2.1 sdk 2.2.0 for Knomi allows a...7.5 High
- cisco nx-os software, nx-os, fx-os +2 moreCisco FXOS and NX-OS Software Command Injection Vulnerability6.7 Medium
- cisco nx-os software, nx-os, fx-os +2 moreCisco FXOS and NX-OS Software Command Injection Vulnerability6.7 Medium
- cisco nx-os software, nx-os, firepower extensible operating system +2 moreCisco FXOS and NX-OS Software Command Injection Vulnerability4.2 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Command Injection Vulnerability6.7 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Command Injection Vulnerability6.7 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Command Injection Vulnerability6.7 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Command Injection Vulnerability6.7 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before...5.4 Medium
- cisco webex wrf player, webex business suite, webex business suite lockdown +2 more +4 moreCisco Webex Network Recording Player Arbitrary Code Execution Vulnerability7.8 High
- cisco webex wrf player, webex business suite, webex business suite lockdown +2 more +4 moreCisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities7.8 High
- gitlabAn Insecure Permissions issue (issue 1 of 3) was discovered in GitLab Community and Enterprise...6.5 Medium
- cisco nx-os software, ns-ox +1 moreCisco NX-OS Software Command Injection Vulnerability4.2 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Line Card Command Injection Vulnerability6.7 Medium
- cisco webex wrf player, webex business suite, webex business suite lockdown +2 more +4 moreCisco Webex Network Recording Player Arbitrary Code Execution Vulnerability7.8 High
- gitlabAn Information Exposure issue (issue 1 of 2) was discovered in GitLab Community and Enterprise...5.3 Medium
- gitlabAn Incorrect Access Control (issue 1 of 2) was discovered in GitLab Community and Enterprise...5.4 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.7.10, 11.8.x before...7.5 High
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Command Injection Vulnerability (CVE-2019-1735)4.4 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Buffer Overflow and Command Injection Vulnerability6.7 Medium
- nanosvg library nanosvgnanosvg library nanosvg after commit c1f6e209c16b18b46aa9f45d7e619acf42c29726 is affected by:...6.5 Medium
drupal/multiple_registrationPackagistThis module enables you to use special routes for user registration with special roles and custom field sets defined for the role. The module doesn't sufficiently check which user roles can be registe…No scoredrupal/opigno_learning_pathPackagistIn certain configuration cases, when a learning path is configured as semi-private, anonymous users are allowed to join a learning path when they should not.No scoredrupal/opigno_forumPackagistIn certain circumstances it is possible that certain forum information is available to unprivileged users because the access check is done with node access instead of grants. This vulnerability is mit…No score- harman amx mvp5150 firmwareHARMAN AMX MVP5150 v2.87.13 devices allow remote OS Command Injection.8.8 High
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Bash Bypass Guest Shell Vulnerability6.0 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software SSH Key Information Disclosure Vulnerability5.1 Medium
- cisco nx-os software, nx-os, nx os +2 moreCisco NX-OS Software Remote Package Manager Command Injection Vulnerability6.4 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software NX-API Sandbox Cross-Site Scripting Vulnerability5.4 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Python Parser Privilege Escalation Vulnerability4.2 Medium
- cisco nx-os software, nx-os +1 moreCisco FXOS and NX-OS Software Secure Configuration Bypass Vulnerability6.7 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Arbitrary File Overwrite Vulnerability6.7 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software CLI Bypass to Internal Service Vulnerability5.3 Medium
- cisco video surveillance managerCisco Video Surveillance Manager Web-Based Management Interface Information Disclosure Vulnerability7.5 High
- mcafee endpoint security, mcafee, llc mcafee endpoint security (ens) +1 moreMcAfee Endpoint Security firewall not always acting on GTI lookup results7.5 High
- mcafee network security manager, mcafee, llc mcafee network security manager (nsm) +1 moreCross site scripting vulnerability in McAfee NSM impacting authenticated users4.8 Medium
- kie kie-serverPassword in config file in KIE server5.9 Medium
- dell emc recoverpoint, dell emc recoverpoint, dell recoverpoint for virtual machines +2 moreOS command injection vulnerability6.4 Medium
- rsa netwitness, netwitness platform, security analytics +2 moreCommand Injection vulnerability9.8 Critical
- rsa netwitness platform, security analytics +1 moreAuthorization Bypass VulnerabilityRSA Netwitness Platform6.5 Medium
- freebsdIn FreeBSD 11.3-PRERELEASE before r345378, 12.0-STABLE before r345377, 11.2-RELEASE before 11.2...7.5 High
- freebsdIn FreeBSD 11.3-PRERELEASE and 12.0-STABLE before r347591, 11.2-RELEASE before 11.2-RELEASE-p10,...9.1 Critical
- vmware workstationVMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are...7.8 High
- Show moreLoading…