CVEs published in May 2019
1,381 vulnerabilities, 265 critical, 14 exploited.
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017...6.5 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017...6.5 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017...8.8 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017...7.5 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017...6.5 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017...7.5 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017...6.5 Medium
- curl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreAn integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and...3.7 Low
- curl, haxx libcurl, debian linux +12 more +14 moreA heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in...7.8 High
- ffmpegaa_read_header in libavformat/aadec.c in FFmpeg before 3.2.14 does not check for sscanf failure...9.8 Critical
- golang crypto, debian linux +1 moreGolang/x/crypto message forgery vulnerability5.9 Medium
- otrsAn issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6, Community Edition...5.4 Medium
- otrsAn issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6 and Community...5.4 Medium
- wso2 api managerAn issue was discovered in WSO2 API Manager 2.6.0. It is possible for a logged-in user to upload,...5.4 Medium
- opentext brava\!OpenText Brava! Enterprise and Brava! Server 7.5 through 16.4 configure excessive permissions by...7.4 High
- enigmailEnigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can...7.5 High
- zohocorp manageengine servicedesk plusAn issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN...6.1 Medium
- control-webpanel webpanelXSS was discovered in CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.747 via the...5.4 Medium
- zohocorp manageengine servicedesk plusIn Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can...6.5 Medium
- mylittleforum my little forummy little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting...6.5 Medium
- ucms project ucmssadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadmin_ceditpost...8.8 High
- identityserver identityserver4IdentityServer IdentityServer4 through 2.4 has stored XSS via the httpContext to the host...6.1 Medium
- jenkins credentials, jenkins project credentials plugin +1 moreInsertion of Sensitive Information into Externally-Accessible File or Directory in Jenkins Credentials Plugin4.3 Medium
- jenkins project pam authentication plugin, jenkins pluggable authentication module +1 moreMissing permission check in Jenkins PAM Authentication Plugin4.3 Medium
- compact arena project arenaOut of bounds access in compact_arena9.8 Critical
- libvirt, fedoraproject fedora +1 moreA vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin...8.8 High
proftpd-dfsgDebianproftpd-dfsg - regression updateNo score- mozilla firefoxA use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with...8.1 High
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur in the chrome event handler when it is freed while still...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA vulnerability where a JavaScript compartment mismatch can occur while working with the fetch...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreImages from a different domain can be read using a canvas object in some circumstances. This...5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA possible vulnerability exists where type confusion can occur when manipulating JavaScript...5.9 Medium
- mozilla firefoxMozilla developers and community members reported memory safety bugs present in Firefox 66. Some...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers and community members reported memory safety bugs present in Firefox 66,...9.8 Critical
- mozilla firefoxThe default webcal: protocol handler will load a web site vulnerable to cross-site scripting (XSS...6.1 Medium
- mozilla firefoxA malicious page can briefly cause the wrong name to be highlighted as the domain name in the...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIf a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting...5.3 Medium
- mozilla firefoxIf the ALT and "a" keys are pressed when users receive an extension installation prompt, the...6.5 Medium
- mozilla firefoxFiles with the .JNLP extension used for "Java web start" applications are not treated as...7.8 High
- mozilla firefoxA custom cursor defined by scripting on a site can position itself over the addressbar to spoof...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur when listeners are removed from the event listener...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop,...9.8 Critical
- netgate pfsense, opnsense +1 moreIncorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4...7.2 High
- apache jspwikiCross-site Scriptin in JSPWiki6.1 Medium
- apache jspwikiCross-site Scripting in JSPWiki6.1 Medium
- apache jspwikiCross-Site Scripting in JSPWiki6.1 Medium
- carts.guru carts guruThe Carts Guru plugin 1.4.5 for WordPress allows Insecure Deserialization via a cartsguru-source...9.8 Critical
- virim project virimThe Virim plugin 0.4 for WordPress allows Insecure Deserialization via s_values, t_values, or...9.8 Critical
- wpbookingsystem wp booking systemThe WP Booking System plugin 1.5.1 for WordPress has no CSRF protection, which allows attackers...7.2 High
- Show moreLoading…