CVEs published in May 2019
1,381 vulnerabilities, 265 critical, 14 exploited.
- adobe bridge ccAdobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation...6.5 Medium
- adobe xdAdobe XD versions 16.0 and earlier have a path traversal vulnerability. Successful exploitation...9.8 Critical
- adobe dreamweaverAdobe Dreamweaver versions 19.0 and earlier have an insecure protocol implementation...7.5 High
- adobe xdAdobe XD versions 16.0 and earlier have a path traversal vulnerability. Successful exploitation...9.8 Critical
- adobe indesignAdobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability....9.8 Critical
- adobe bridge ccAdobe Bridge CC versions 9.0.2 have a heap overflow vulnerability. Successful exploitation could...9.8 Critical
- adobe bridge ccAdobe Bridge CC versions 9.0.2 have an out-of-bounds write vulnerability. Successful exploitation...8.8 High
- adobe bridge ccAdobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation...6.5 Medium
- zohocorp manageengine opmanagerAn issue was discovered in ZOHO ManageEngine OpManager 12.2. An authenticated user can upload any...6.5 Medium
- adobe bridge ccAdobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation...6.5 Medium
- adobe bridge ccAdobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation...6.5 Medium
- adobe bridge ccAdobe Bridge CC versions 9.0.2 have an use after free vulnerability. Successful exploitation...6.5 Medium
- zohocorp manageengine applications managerIn Zoho ManageEngine Application Manager 13.1 Build 13100, the 'haid' parameter of the '...8.1 High
- zohocorp manageengine applications managerIn Zoho ManageEngine Application Manager 13.1 Build 13100, an authenticated user, with...6.1 Medium
- adobe bridge ccAdobe Bridge CC versions 9.0.2 have a memory corruption vulnerability. Successful exploitation...6.5 Medium
- zohocorp manageengine applications managerIn Zoho ManageEngine Application Manager 13.1 Build 13100, the administrative user has the...8.8 High
- open-xchange appsuiteOX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).5.4 Medium
- percona serverThe Percona Server 5.6.44-85.0-1 packages for Debian and Ubuntu suffered an issue where the...9.8 Critical
- open-xchange appsuiteOpen-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF.4.3 Medium
- open-xchange appsuiteOpen-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).6.1 Medium
- artifex ghostscriptArtifex Ghostscript 9.22 is affected by: Obtain Information. The impact is: obtain sensitive...5.5 Medium
- open-xchange appsuiteOX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions.9.8 Critical
- open-xchange appsuiteOX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).5.4 Medium
- open-xchange appsuiteOpen-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Information Exposure.9.8 Critical
- open-xchange appsuiteOpen-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing.7.5 High
- open-xchange appsuiteOpen-Xchange GmbH OX App Suite 7.8.3 is affected by: Incorrect Access Control.9.8 Critical
- open-xchange appsuiteOpen-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS).6.1 Medium
- buildbotImproper Authentication in Buildbot9.8 Critical
- openwrt luciIn OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and admin...9.8 Critical
- ibm mq, websphere mq +1 moreIBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local non...7.4 High
- ibm mq, websphere mq +1 moreIBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local attacker...6.2 Medium
- apache zookeeper, activemq, drill +7 more +9 moreAccess control bypass in Apache ZooKeeper5.9 Medium
- leanify project leanifyLeanify 0.4.3 allows remote attackers to trigger an out-of-bounds write (1024 bytes) via a...5.5 Medium
- pandasecurity panda antivirus, panda antivirus pro, panda dome +3 more +5 moreInsecure permissions of the section object Global\PandaDevicesAgentSharedMemory and the event...9.8 Critical
- mitsubishi electric melsec-q series ethernet module, mitsubishielectric qj71e71-100 firmware +1 moreIn Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior,...7.5 High
- westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware, my cloud ex2100 firmware +6 more +8 moreWestern Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100...8.8 High
- motorola cx2 firmware, m2 firmware +1 moreAn issue was discovered in scopd on Motorola routers CX2 1.01 and M2 1.01. There is a Use of an...9.8 Critical
- wolfsslwolfSSL 4.0.0 has a Buffer Overflow in DoPreSharedKeys in tls13.c when a current identity size is...9.8 Critical
generate-passwordnpmCryptographically Weak PRNG in generate-passwordNo scoremysqlnpmmysql Node.JS Module Vulnerable to Remote Memory ExposureNo scorewebpack-bundle-analyzernpmCross-Site Scripting in webpack-bundle-analyzer6.3 Medium- wireshark, canonical ubuntu linux, debian linux +13 more +15 moreIn Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could...7.5 High
- freedesktop popplerIn Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in...8.8 High
- linux kernelA flaw was found in the Linux kernel's freescale hypervisor manager implementation, kernel...7.1 High
- dockerIn Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable...7.5 High
- schneider-electric triconex tristation emulatorA CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex...5.9 Medium
- schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon...7.5 High
- schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580,...9.8 Critical
- schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon...7.5 High
- schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon...7.5 High
- Show moreLoading…