CVEs published in May 2019
1,381 vulnerabilities, 265 critical, 14 exploited.
- microsoft windows server, windows server, version 1903 (server core installation), windows server 2008 +3 more +5 moreA memory corruption vulnerability exists in the Windows Server DHCP service when processing...9.8 Critical
- microsoft remote desktop services, huawei agile controller-campus firmware, bh620 v2 firmware +67 more +69 moreA remote code execution vulnerability exists in Remote Desktop Services formerly known as...9.8 Critical
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +9 more +11 moreAn elevation of privilege vulnerability exists in the Network Driver Interface Specification ...7.0 High
- yeelight smart ai speaker firmwareYeelight Smart AI Speaker 3.3.10_0074 devices have improper access control over the UART...6.8 Medium
- cisco nx-os software, nx-os, firepower extensible operating system +2 moreCisco FXOS and NX-OS Software Command Injection Vulnerability4.2 Medium
- yarnpkg websiteThe signature verification routine in install.sh in yarnpkg/website through 2018-06-05 only...5.9 Medium
- gpg-pgp project gpg-pgpThe signature verification routine in the Airmail GPG-PGP Plugin, versions 1.0 (9) and earlier,...5.9 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before...7.5 High
- gitlabAn Open Redirect issue was discovered in GitLab Community and Enterprise Edition before 11.7.8,...6.1 Medium
- applaudsolutions applaud hcmApplaud HCM 4.0.42+ uses HTML tag fields for HTML inputs in a form. This leads to an XSS...6.1 Medium
- gitlabAn Insecure Permissions issue (issue 3 of 3) was discovered in GitLab Community and Enterprise...4.3 Medium
- ibm rational doors web accessIBM Rational DOORS Web Access 9.5.1 through 9.5.2.9, and 9.6 through 9.6.1.9 is vulnerable to...5.4 Medium
- gitlabAn Insecure Permissions issue (issue 2 of 3) was discovered in GitLab Community and Enterprise...6.5 Medium
- gitlabAn Information Exposure issue (issue 2 of 2) was discovered in GitLab Community and Enterprise...7.5 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before...7.5 High
- fangfa fdcmsadmin/Lib/Action/FpluginAction.class.php in FDCMS (aka Fangfa Content Manage System) 4.2 allows...7.5 High
- ez ezplatform-admin-ui, ezplatform-page-builder +1 moreezplatform-admin-ui Cross-site Scripting (XSS) vulnerability6.1 Medium
- macdown project macdownMacDown 0.7.1 allows directory traversal, for execution of arbitrary programs, via a file:/// or ...7.8 High
- typoraTypora 0.9.9.24.6 on macOS allows directory traversal, for execution of arbitrary programs, via a...7.8 High
- boostio boostnoteThere is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted...5.4 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Buffer Overflow and Command Injection Vulnerability6.7 Medium
- cisco firepower threat defense software, secure firewall management center +1 moreCisco Firepower Threat Defense Software SSL/TLS Policy Bypass Vulnerability5.8 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers MPLS OAM Denial of Service Vulnerability7.4 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software BGP MPLS-Based EVPN Denial of Service Vulnerability7.4 High
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Arbitrary Client Certificate Creation Vulnerability6.8 Medium
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client for Linux Out-of-Bounds Memory Read Vulnerability4.8 Medium
- cisco nx-os, firepower extensible operating system (fxos), firepower extensible operating system +1 more +3 moreCisco FXOS and NX-OS Software Simple Network Management Protocol Denial of Service Vulnerability8.6 High
- cisco unified intelligence centerCisco Unified Intelligence Center Remote File Injection Vulnerability5.9 Medium
- cisco firepower threat defense software, secure firewall management center +1 moreCisco Firepower Threat Defense Software Detection Engine Policy Bypass Vulnerability5.8 Medium
- cisco prime infrastructure, evolved programmable network manager +1 moreCisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnerability6.5 Medium
- cisco prime infrastructure, evolved programmable network manager +1 moreCisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnerability6.5 Medium
- cisco prime infrastructure, evolved programmable network manager +1 moreCisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnerability6.5 Medium
- cisco prime infrastructure, evolved programmable network manager, network level service +2 moreCisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities8.8 High
- cisco prime infrastructure, evolved programmable network manager +1 moreCisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities8.8 High
- cisco prime infrastructure, evolved programmable network manager, network level service +2 moreCisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities8.8 High
- cisco prime infrastructure, evolved programmable network manager +1 moreCisco Prime Infrastructure and Evolved Programmable Network Manager SQL Injection Vulnerabilities8.1 High
- cisco prime infrastructure, evolved programmable network manager, network level service +2 moreCisco Prime Infrastructure and Evolved Programmable Network Manager SQL Injection Vulnerabilities8.1 High
- cisco small business 300 series managed switches, sf300-08 firmware, sf300-24 firmware +25 more +27 moreCisco Small Business 300 Series Managed Switches DHCP Denial of Service Vulnerability6.8 Medium
- heimdal project heimdal, debian linux, fedoraproject fedora +2 more +4 moreIn the client side of Heimdal before 7.6.0, failure to verify anonymous PKINIT PA-PKINIT-KX key...7.4 High
- miniupnp project miniupnpd, debian linux +1 moreA Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer...7.5 High
- miniupnp.free miniupnpdAn AddPortMapping Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to...7.5 High
- miniupnp project miniupnpdA Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer...7.5 High
- miniupnp project miniupnpdA Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer...7.5 High
- miniupnp.free miniupnpdThe upnp_event_prepare function in upnpevents.c in MiniUPnP MiniUPnPd through 2.1 allows a remote...7.5 High
- miniupnp project miniupnpdThe updateDevice function in minissdpd.c in MiniUPnP MiniSSDPd 1.4 and 1.5 allows a remote...7.5 High
- cisco nx-os software, nx-os +1 moreCisco NX-OS CLI Command Software Image Signature Verification Vulnerabilities6.7 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS CLI Command Software Image Signature Verification Vulnerabilities6.7 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS CLI Command Software Image Signature Verification Vulnerability6.7 Medium
- cisco nx-os software, nx-os +1 moreCisco MDS 9700 Series Multilayer Directors and Nexus 7000/7700 Series Switches Software Patch Signature Verification Vulnerability6.7 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Patch Signature Verification Bypass Vulnerability6.4 Medium
- Show moreLoading…