Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2019
May

CVEs published in May 2019

1,381 vulnerabilities, 265 critical, 14 exploited.

Known exploitedIn KEVPublic exploitFix available

schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2018-78577.5 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2018-78567.5 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2018-78557.5 HighMay 22, 2019
projectsendCSV Injection was discovered in ProjectSend before r1053, affecting victims who import the data...CVE-2018-72018.8 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2018-7854Public exploit7.5 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2018-78537.5 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2018-7852Public exploit7.5 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-125: Out-of-bounds Read vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2018-7845Public exploit7.5 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-807: Reliance on Untrusted Inputs in a Security Decision vulnerability exists in all...CVE-2018-78505.3 MediumMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580,...CVE-2018-78479.8 CriticalMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon...CVE-2018-7842Public exploitEPSS 35.0%9.8 CriticalMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2018-7848Public exploit7.5 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2018-7843Public exploit7.5 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2018-7849Public exploit7.5 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all...CVE-2018-7846Public exploitEPSS 29.6%9.8 CriticalMay 22, 2019
schneider-electric 140cra312xxx firmware, bmx\/e cra firmware, m340 firmware +2 more +4 moreCWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon...CVE-2018-78516.5 MediumMay 22, 2019
schneider-electric modicon quantum firmwareIn Modicon Quantum all firmware versions, a CWE-94: Code Injection vulnerability could cause an...CVE-2019-68169.1 CriticalMay 22, 2019
schneider-electric modicon quantum firmwareIn Modicon Quantum all firmware versions, CWE-264: Permissions, Privileges, and Access Control...CVE-2019-68159.1 CriticalMay 22, 2019
schneider-electric modicon quantum firmwareA CWE-255 Credentials Management vulnerability exists in Modicon Quantum with firmware versions...CVE-2018-77886.5 MediumMay 22, 2019
schneider-electric tsxetg100 firmwareA CWE-79 Cross-Site Scripting vulnerability exists in all versions of the TSXETG100 allowing an...CVE-2018-78346.1 MediumMay 22, 2019
schneider-electric bmx-nor-0200h firmwareA CWE-798 use of hardcoded credentials vulnerability exists in BMX-NOR-0200H with firmware...CVE-2019-68127.2 HighMay 22, 2019
open-xchange appsuiteOpen-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.CVE-2017-58639.8 CriticalMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could...CVE-2019-68197.5 HighMay 22, 2019
schneider-electric modicon m580 firmware, modicon m340 firmware, modicon premium firmware +1 more +3 moreCWE-330: Use of Insufficiently Random Values vulnerability, which could cause the hijacking of...CVE-2019-68216.5 MediumMay 22, 2019
schneider-electric atv imc drive controller firmware, modicon lmc058 firmware, modicon lmc078 firmware +9 more +11 moreA CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a...CVE-2019-68208.2 HighMay 22, 2019
schneider-electric net5500 firmware, net5501-i firmware, net5501-xt firmware +4 more +6 moreAn Improper Access Control: CWE-284 vulnerability exists in the NET55XX Encoder with firmware...CVE-2019-6814Public exploitEPSS 36.6%9.8 CriticalMay 22, 2019
open-xchange appsuiteOpen-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS).CVE-2017-58646.1 MediumMay 22, 2019
schneider-electric somachine basic, modicon m221 firmware +1 moreA Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all...CVE-2018-78235.3 MediumMay 22, 2019
schneider-electric somachine basic, modicon m221 firmware +1 moreAn Incorrect Default Permissions (CWE-276) vulnerability exists in SoMachine Basic, all versions,...CVE-2018-78225.5 MediumMay 22, 2019
schneider-electric somachine basic, modicon m221 firmware +1 moreAn Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221...CVE-2018-78217.5 HighMay 22, 2019
pelco sarix enhanced and spectra enhanced, pelco sarix enhanced 1st generation and spectra enhanced ptz, schneider-electric d6220 firmware, d6220l firmware +57 more +59 moreAn Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen....CVE-2018-78298.8 HighMay 22, 2019
pelco sarix enhanced and spectra enhanced, pelco sarix enhanced 1st generation and spectra enhanced ptz, schneider-electric d6220 firmware, d6220l firmware +57 more +59 moreA Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced...CVE-2018-78288.8 HighMay 22, 2019
odooOdoo Version <= 8.0-20160726 and Version 9 is affected by: CWE-601: Open redirection. The impact...CVE-2017-58715.4 MediumMay 22, 2019
pelco sarix enhanced and spectra enhanced, pelco sarix enhanced 1st generation and spectra enhanced ptz, schneider-electric d6220 firmware, d6220l firmware +57 more +59 moreA Cross-Site Scripting (XSS) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and...CVE-2018-78275.4 MediumMay 22, 2019
pelco sarix enhanced and spectra enhanced, pelco sarix enhanced 1st generation and spectra enhanced ptz, schneider-electric d6220 firmware, d6220l firmware +57 more +59 moreA Command Injection vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced...CVE-2018-78268.8 HighMay 22, 2019
pelco sarix enhanced and spectra enhanced, pelco sarix enhanced 1st generation and spectra enhanced ptz, schneider-electric d6220 firmware, d6220l firmware +57 more +59 moreA Command Injection vulnerability exists in the web-based GUI of the 1st Gen PelcoSarix Enhanced...CVE-2018-78258.8 HighMay 22, 2019
pelco sarix enhanced and spectra enhanced, pelco sarix enhanced 1st generation and spectra enhanced ptz, schneider-electric d6220 firmware, d6220l firmware +57 more +59 moreA Permissions, Privileges, and Access Control vulnerability exists in the web-based GUI of the...CVE-2018-78166.5 MediumMay 22, 2019
schneider electric modbus serial driver (for 64-bit windows os:v3.17 ie 37 and prior , for 32-bit windows os:v2.17 ie 27 and prior, and as part of the driver suite version:v14.12 and prior), schneider-electric driver suite, modbus serial driver +2 moreAn Externally Controlled Reference to a Resource (CWE-610) vulnerability exists in Schneider...CVE-2018-78244.9 MediumMay 22, 2019
libavIn libavcodec in Libav 9.21, ff_h264_execute_ref_pic_marking() has a heap-based buffer over-read.CVE-2017-59846.5 MediumMay 22, 2019
pelco videoxpert opscenter, videoxpert opscenter versions prior to 3.1 +1 moreA Uncontrolled Search Path Element (CWE-427) vulnerability exists in VideoXpert OpsCenter...CVE-2018-78407.8 HighMay 22, 2019
schneider electric u.motion builder, u.motion builder software version 1.3.4 +1 moreA SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which...CVE-2018-7841In KEVPublic exploitEPSS 72.5%9.8 CriticalMay 22, 2019
open-xchange appsuiteOpen-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.CVE-2017-69128.8 HighMay 22, 2019
open-xchange appsuiteOpen-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.CVE-2017-83408.8 HighMay 22, 2019
open-xchange appsuiteOpen-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing.CVE-2017-83415.3 MediumMay 22, 2019
open-xchange ox cloudOpen-Xchange GmbH OX Cloud Plugins 1.4.0 and earlier is affected by: Missing Authorization.CVE-2017-87777.2 HighMay 22, 2019
open-xchange appsuiteOX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).CVE-2017-98086.1 MediumMay 22, 2019
open-xchange appsuiteOX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Information Exposure.CVE-2017-98095.3 MediumMay 22, 2019
gnu gcc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morestack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler...CVE-2018-128868.1 HighMay 22, 2019
adobe media encoderAdobe Media Encoder version 13.0.2 has an out-of-bounds read vulnerability. Successful...CVE-2019-78446.5 MediumMay 22, 2019
adobe media encoderAdobe Media Encoder version 13.0.2 has a use-after-free vulnerability. Successful exploitation...CVE-2019-78428.8 HighMay 22, 2019
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open