CVEs published in May 2019
1,381 vulnerabilities, 265 critical, 14 exploited.
- westermo dr-250 firmware, dr-260 firmware, mr-260 firmware +2 moreXSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162 and DR-260 Pre-5162...6.1 Medium
- computrols building automation systemComputrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting vulnerabilities in...6.1 Medium
- computrols building automation softwareComputrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.7.5 High
- computrols building automation softwareComputrols CBAS 18.0.0 has Default Credentials.9.8 Critical
- computrols building automation softwareComputrols CBAS 18.0.0 has hard-coded encryption keys.6.5 Medium
- computrols building automation softwareComputrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as...8.8 High
- computrols building automation softwareComputrols CBAS 18.0.0 allows Authentication Bypass.8.1 High
- computrols building automation softwareComputrols CBAS 18.0.0 allows Authenticated Command Injection.8.8 High
- computrols building automation softwareComputrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if...7.5 High
- 10web form makerIn the Form Maker plugin before 1.13.3 for WordPress, it's possible to achieve SQL injection in...9.8 Critical
- digium asteriskasterisk 13.10.0 is affected by: denial of service issues in asterisk. The impact is: cause a...7.5 High
- exponentcms exponent cmsExponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/help...9.8 Critical
- exponentcms exponent cmsExponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules...9.8 Critical
- b2evolutionb2evolution 6.7.6 suffer from an Object Injection vulnerability in /htsrv/call_plugin.php.9.8 Critical
- vstracam c38s firmware, c7824wip firmware +1 moreAn issue was discovered in upgrade_firmware.cgi on VStarcam 100T (C7824WIP) CH-sys-48.53.75.119...9.8 Critical
- vstarcam c7824iwp firmware, vstracm c38s firmware +1 moreAn issue was discovered in upgrade_htmls.cgi on VStarcam 100T (C7824WIP) KR75.8.53.20 and 200V ...9.8 Critical
- webmproject libwebpIn libwebp 0.5.1, there is a double free bug in libwebpmux.7.5 High
- open-xchange appsuiteOX Software GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF.9.9 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017...7.5 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017...6.5 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017...6.5 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017...7.5 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017...7.5 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017...7.5 High
- sensiolabs symfonySymfony Incorrect Access Control9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017...7.5 High
- zohocorp manageengine applications managerAn issue was discovered in ZOHO ManageEngine Applications Manager 12.3. It is possible for an...5.3 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017...7.5 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017...7.5 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017...6.5 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017...8.8 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017...9.8 Critical
- zohocorp manageengine opmanagerAn issue was discovered in ZOHO ManageEngine OpManager 12.2. The 'apiKey' parameter of "/api/json...7.5 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017...9.8 Critical
- zohocorp manageengine opmanagerAn issue was discovered in ZOHO ManageEngine OpManager 12.2. By adding a Google Map to the...5.4 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017...8.8 High
- adobe shockwave playerAdobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability....9.8 Critical
- adobe shockwave playerAdobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability....9.8 Critical
- adobe shockwave playerAdobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability....9.8 Critical
- adobe shockwave playerAdobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability....9.8 Critical
- adobe shockwave playerAdobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability....9.8 Critical
- adobe shockwave playerAdobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability....9.8 Critical
- adobe shockwave playerAdobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability....9.8 Critical
- Show moreLoading…