CVEs published in May 2019
1,381 vulnerabilities, 265 critical, 14 exploited.
- yealink ultra-elegant ip phone sip-t41p firmwareA CSRF (Cross Site Request Forgery) in the web interface of the Yeahlink Ultra-elegant IP Phone...8.8 High
- yealink ultra-elegant ip phone sip-t41p firmwareThe network diagnostic function (ping) in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware...8.8 High
- adobe experience manager formsAdobe Experience Manager Forms versions 6.2, 6.3 and 6.4 have a stored cross-site scripting...6.1 Medium
- auerswald comfortel 1200 ip firmwareA buffer overflow vulnerability in the DHCP and PPPOE configuration interface of the Auerswald...8.0 High
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 moreA heap buffer overflow in Fortinet FortiOS all versions below 6.0.5 in the SSL VPN web portal may...4.3 Medium
- auerswald comfortel 1200 ip firmwareA command injection (missing input validation, escaping) in the ftp upgrade configuration...8.0 High
- mitel micollab, micollab audio\, web \& video conferencing +1 moreMiCollab 7.3 PR2 (7.3.0.204) and earlier, 7.2 (7.2.2.13) and earlier, and 7.1 (7.1.0.57) and...9.8 Critical
- windriver vxworksWhen RPC is enabled in Wind River VxWorks 6.9 prior to 6.9.1, a specially crafted RPC request can...8.1 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.7.7 and 11.8.x...6.5 Medium
- horde groupware, debian linux +1 moreRemote code execution was discovered in Horde Groupware Webmail 5.2.22 and 5.2.17. Horde/Form...8.8 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 10.x (starting from 10.8) and...9.8 Critical
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before...9.8 Critical
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before...5.5 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before...9.8 Critical
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.5.10,...4.3 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.2.8 WinCollect could allow an attacker to obtain sensitive information by...5.9 Medium
- ibm api connectIBM API Connect 5.0.0.0 through 5.0.8.6 uses weaker than expected cryptographic algorithms that...5.9 Medium
- ibm jazz reporting serviceIBM Jazz Reporting Service 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm cognos analyticsIBM Cognos Analytics 11.0, 11.1.0, and 11.1.1 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm spectrum control standard edition, spectrum control +1 moreIBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 could allow a remote attacker to...5.9 Medium
- ibm spectrum control standard edition, spectrum control +1 moreIBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 is vulnerable to cross-site...6.1 Medium
- sitecore rocksThe Sitecore Rocks plugin before 2.1.149 for Sitecore allows an unauthenticated threat actor to...9.8 Critical
- projectatomic bubblewrapbubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point....7.4 High
- gnome glib, canonical ubuntu linux, debian linux +6 more +8 morefile_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict...9.8 Critical
- gnome gvfs, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles...5.7 Medium
- gnome gvfsAn issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race...8.1 High
- gnome gvfs, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles...7.3 High
- emerson ovation ocr400 controller, ovation ocr400 firmware +1 moreIn Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow...8.8 High
- emerson ovation ocr400 controller, ovation ocr400 firmware +1 moreIn Emerson Ovation OCR400 Controller 3.3.1 and earlier, a heap-based buffer overflow...8.8 High
- fortinet forticlient, forticlientwindows +1 moreAn Unsafe Search Path vulnerability in FortiClient Online Installer (Windows version before 6.0.6...8.6 High
- iball ib-wrb302n firmwareiBall Baton iB-WRB302N20122017 devices have improper access control over the UART interface,...6.8 Medium
- revive adserver, revive-adserver revive adserver +1 moreUse of cryptographically weak PRNG in the password recovery token generation of Revive Adserver <...8.1 High
- fortinet fortianalyzer, fortimanager +1 moreAn Improper Neutralization of Script-Related HTML Tags in Fortinet FortiAnalyzer 5.6.0 and below...6.1 Medium
- ca risk authentication, strong authentication +1 moreA UI redress vulnerability in the administrative user interface of CA Technologies CA Strong...4.3 Medium
- ca risk authentication, strong authentication +1 moreA privilege escalation vulnerability in the administrative user interface of CA Technologies CA...8.8 High
- apache camel, oracle enterprise data quality, enterprise manager base platform +2 more +4 moreXML External Entity injection in Apache Camel7.5 High
- apache rollerServer-side Request Forgery (SSRF) and File Enumeration vulnerability in Apache Roller 5.2.1, 5.2...9.8 Critical
- dynmap project dynmapIn Webbukkit Dynmap 3.0-beta-3, with Spigot 1.13.2, due to a missing login check in servlet...5.3 Medium
- torproject tor browserTor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to...4.3 Medium
- linux kernelAn issue was discovered in drm_load_edid_firmware in drivers/gpu/drm/drm_edid_load.c in the Linux...5.5 Medium
- linux kernelAn issue was discovered in ip_ra_control in net/ipv4/ip_sockglue.c in the Linux kernel through 5...5.5 Medium
- linux kernelAn issue was discovered in the efi subsystem in the Linux kernel through 5.1.5....5.5 Medium
- linux kernelAn issue was discovered in con_insert_unipair in drivers/tty/vt/consolemap.c in the Linux kernel...5.5 Medium
- linux kernelAn issue was discovered in ip6_ra_control in net/ipv6/ipv6_sockglue.c in the Linux kernel through...5.5 Medium
- petraware ptransformer adcPetraware pTransformer ADC before 2.1.7.22827 allows SQL Injection via the User ID parameter to...7.8 High
- apache tomcatCross-site scripting in Apache Tomcat6.1 Medium
- phome empirecmsEmpireCMS 7.5.0 has XSS via the HTTP Referer header to e/member/doaction.php.6.1 Medium
- phome empirecmsEmpireCMS 7.5.0 has XSS via the from parameter to e/member/doaction.php, as demonstrated by a...6.1 Medium
- glyphandcog xpdfreaderA stack-based buffer over-read exists in FoFiTrueType::dumpString in fofi/FoFiTrueType.cc in Xpdf...7.1 High
- kibokolabs hostelXSS exists in the Kiboko Hostel plugin before 1.1.4 for WordPress.6.1 Medium
- Show moreLoading…