CVEs published in May 2019
1,381 vulnerabilities, 265 critical, 14 exploited.
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows remote authenticated...4.8 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCybozu Garoon 4.0.0 to 4.6.3 allows authenticated attackers to alter the information with...8.7 High
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to bypass access restriction to browse...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to...6.1 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to...6.1 Medium
- ibm websphere application serverIBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary...9.0 Critical
- ibm cloud privateIBM Cloud Private Kubernetes API server 2.1.0, 3.1.0, 3.1.1, and 3.1.2 can be used as an HTTP...3.1 Low
- gitlabAn insecure permissions issue was discovered in GitLab Community and Enterprise Edition 9.4 and...7.5 High
- gitlabGitLab CE/EE versions 8.18 up to 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11...7.5 High
- digitaldruid hoteldruidHotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mese_fine, origine, and anno parameters...6.1 Medium
- zohocorp manageengine netflow analyzerAn issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in...6.1 Medium
- zohocorp manageengine netflow analyzerAn issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in...6.1 Medium
- zohocorp manageengine netflow analyzerAn issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in...6.1 Medium
- zohocorp manageengine netflow analyzerAn issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in...6.1 Medium
- apple macos, mac os x +1 moreA logic issue was addressed with improved validation. This issue is fixed in macOS Mojave 10.14.4...7.5 High
- linux kernelIn the tun subsystem in the Linux kernel before 4.13.14, dev_get_valid_name is not called before...5.5 Medium
- systemd project systemd, netapp cn1610 firmware, snapprotect +1 more +3 moresystemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext...4.3 Medium
- zohocorp manageengine netflow analyzerAn issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. An Absolute...4.3 Medium
- apachefriends xamppXAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter. NOTE: This...6.1 Medium
jqueryDebianjquery - regression updateNo score- apple icloud, icloud for windows, ios +7 more +9 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...6.5 Medium
- apple icloud, icloud for windows, ios +8 more +10 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12...6.5 Medium
- apple icloud, icloud for windows, ios +7 more +9 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- intel i915 firmwareInsufficient input validation in Kernel Mode Driver in Intel(R) i915 Graphics for Linux before...7.8 High
- microsoft dynamics 365, dynamics crm 2015, dynamics 365 (on-premises) +1 more +3 moreA security feature bypass vulnerability exists in Dynamics On Premise, aka 'Microsoft Dynamics On...5.9 Medium
- microsoft azure active directory connectAn elevation of privilege vulnerability exists in Microsoft Azure Active Directory Connect build...5.3 Medium
- microsoft internet explorer, internet explorer 11, internet explorer 11 on windows 10 version 1903 for 32-bit systems +2 more +4 moreA security feature bypass vulnerability exists when urlmon.dll improperly handles certain Mark of...8.8 High
- microsoft asp.net coreDenial of service in ASP.NET Core7.5 High
- microsoft .net core, .net framework, .net framework 2.0 +45 more +47 moreDenial of service in ASP.NET Core7.5 High
- microsoft .net core, .net framework, .net framework 2.0 +45 more +47 moreDenial of service in ASP.NET Core7.5 High
- microsoft azure devops server, team foundation server, team foundation server 2018 +2 moreA Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation...5.4 Medium
- microsoft nugetNuGet Package Manager Tampering Vulnerability5.5 Medium
- microsoft azure devops server, team foundation server, team foundation server 2018 +2 moreAn information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team...6.5 Medium
- microsoft sharepoint foundationA cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not...5.4 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreAn information disclosure vulnerability exists when the Windows GDI component improperly...6.5 Medium
- microsoft sharepoint server, sharepoint foundation +1 moreAn elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly...8.8 High
- microsoft sharepoint server, sharepoint enterprise server +1 moreAn elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly...8.8 High
- microsoft sharepoint enterprise server, sharepoint foundation +1 moreAn information disclosure vulnerability exists when Microsoft SharePoint Server does not properly...6.5 Medium
- microsoft word, office, office online server +1 more +3 moreA remote code execution vulnerability exists in Microsoft Word software when it fails to properly...7.8 High
- microsoft sharepoint enterprise server, sharepoint foundation +1 moreA remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to...8.8 High
- microsoft sharepoint foundationA spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a...5.4 Medium
- microsoft sharepoint server, sharepoint enterprise server, sharepoint foundation +2 moreA spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a...5.7 Medium
- microsoft sharepoint server, sharepoint enterprise server, sharepoint foundation +2 moreA spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a...5.7 Medium
- microsoft officeA remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine...7.8 High
- microsoft office, office 365 proplus +1 moreA remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine...7.8 High
- microsoft office, office 365 proplus, office 365 +2 moreA remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine...7.8 High
- microsoft windows, windows 10, windows server +2 more +4 moreAn elevation of privilege vulnerability exists in the Unified Write Filter (UWF) feature for...5.5 Medium
- microsoft edge, internet explorer 10, internet explorer 11 +8 more +10 moreA remote code execution vulnerability exists in the way that Microsoft browsers access objects in...7.5 High
- microsoft edge, edge on windows 10 version 1903 for 32-bit systems, edge on windows 10 version 1903 for arm64-based systems +1 more +3 moreAn elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to...9.0 Critical
- microsoft edge, chakracore, edge on windows 10 version 1903 for 32-bit systems +2 more +4 moreOut-of-bounds write7.5 High
- Show moreLoading…