CVEs published in May 2019
1,381 vulnerabilities, 265 critical, 14 exploited.
- bmc patrol agentBy default, BMC PATROL Agent through 11.3.01 uses a static encryption key for encrypting...9.8 Critical
- ibm storwize v7000 unified (2073), storwize unified v7000 software +1 moreIBM Storwize V7000 Unified (2073) 1.6 configuration may allow an attacker to reveal the server...5.3 Medium
- hclsoftware bigfix platformIBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into...6.5 Medium
- hclsoftware bigfix platformIBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- hclsoftware bigfix platformIBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that...3.3 Low
- libsdl simple directmedia layerAn issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9. There is an out-of...6.5 Medium
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +4 more +6 moreAn issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in...6.5 Medium
- libsdl simple directmedia layer, sdl2 image +1 moreAn issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in...6.5 Medium
- libsdl simple directmedia layer, sdl2 image +1 moreAn issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in...8.8 High
- libsdl simple directmedia layer, sdl2 image +1 moreAn issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in...6.5 Medium
- libsdl simple directmedia layer, sdl2 image +1 moreAn issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in...6.5 Medium
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in...6.5 Medium
- matomo** DISPUTED ** A full path disclosure vulnerability was discovered in Matomo v3.9.1 where a user...4.3 Medium
- freeimage project freeimageIn FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG...7.5 High
- freeimage project freeimage, canonical ubuntu linux, debian linux +1 more +3 moreWhen FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp...6.5 Medium
- freeimage project freeimageWhen FreeImage 3.18.0 reads a special JXR file, the StreamCalcIFDSize function of JXRMeta.c...7.5 High
- freeimage project freeimage, canonical ubuntu linux +1 moreWhen FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF...7.5 High
- valvesoftware steam clientIn Valve Steam 1528829181 BETA, it is possible to perform a homograph / homoglyph attack to...5.4 Medium
- f5 njsnjs through 0.3.1, used in NGINX, has a heap-based buffer overflow in njs_function_native_call in...9.8 Critical
- f5 njsnjs through 0.3.1, used in NGINX, has a heap-based buffer over-read in nxt_utf8_decode in nxt...9.8 Critical
- f5 njsnjs through 0.3.1, used in NGINX, has a heap-based buffer overflow in nxt_utf8_encode in nxt_utf8.c.9.8 Critical
- joomla joomla\!An issue was discovered in Joomla! before 3.9.6. The debug views of com_users do not properly...6.1 Medium
- gohttp project gohttpIn GoHttp through 2017-07-25, there is a stack-based buffer over-read via a long User-Agent header.7.5 High
- elabftweLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController...8.8 High
- boostio boostnoteThere is XSS in browser/components/MarkdownPreview.js in BoostIO Boostnote 0.11.15 via a label...5.4 Medium
cups-filtersDebiancups-filters - regression updateNo score- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 32.0.0.171 and earlier, 32.0.0.171 and earlier, and 32.0.0.171 and...8.8 High
- macdown project macdownMacDown 0.7.1 (870) allows remote code execution via a file:\\\ URI, with a .app pathname, in the...8.8 High
- typoraTypora 0.9.9.21.1 (1913) allows arbitrary code execution via a modified file: URL syntax in the...7.8 High
- atutorATutor through 2.2.4 is vulnerable to arbitrary file uploads via the mods/_core/backups/upload...8.8 High
- four-faith f3x24 firmwareFour-Faith Wireless Mobile Router F3x24 v1.0 devices allow remote code execution via the Command...7.2 High
- gatship web moduleGAT-Ship Web Module through 1.30 allows remote attackers to obtain potentially sensitive...5.3 Medium
- f-secure client security, computer protection, internet security +2 more +4 moreIn the F-Secure installer in F-Secure SAFE for Windows before 17.6, F-Secure Internet Security...7.8 High
- falcoAn issue was discovered in Sysdig through 0.24.2, as used in Falco through 0.14.0 and other...5.5 Medium
- webpagetestWPO WebPageTest 19.04 allows SSRF because ValidateURL in www/runtest.php does not consider octal...8.8 High
- gohttp project gohttpGoHTTP through 2017-07-25 has a sendHeader use-after-free.9.8 Critical
- gohttp project gohttpGoHTTP through 2017-07-25 has a stack-based buffer over-read in the scan function (when called...7.5 High
- gohttp project gohttpGoHTTP through 2017-07-25 has a GetExtension heap-based buffer overflow via a long extension.9.8 Critical
- fujitsu paperstream ip \(twain\)In PaperStream IP (TWAIN) 1.42.0.5685 (Service Update 7), the FJTWSVIC service running with...7.8 High
- fasterxml jackson-databind, debian linux +1 moreInformation exposure in FasterXML jackson-databind7.5 High
- simplybookSimplyBook.me through 2019-05-11 does not properly restrict File Upload which could allow remote...9.8 Critical
- vtiger crmSQL injection vulnerability in Vtiger CRM before 7.1.0 hotfix3 allows authenticated users to...8.8 High
- gitlabAn Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition 11.7...9.1 Critical
- open-emr openemrAn issue was discovered in OpenEMR before 5.0.1 Patch 7. SQL Injection exists in the SaveAudit...9.8 Critical
- gitlabAn information disclosure issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x...7.5 High
- open-emr openemrAn issue was discovered in OpenEMR before 5.0.1 Patch 7. Directory Traversal exists via docid=../...5.3 Medium
- open-emr openemrAn issue was discovered in OpenEMR before 5.0.1 Patch 7. There is SQL Injection in the make_task...9.8 Critical
- gitlabAn Incorrect Access Control (issue 2 of 3) issue was discovered in GitLab Community and...4.3 Medium
- gitlabAn Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition...6.5 Medium
- gitlabAn Improper Input Validation issue was discovered in GitLab Community and Enterprise Edition...7.5 High
- Show moreLoading…