CVEs published in May 2019
1,381 vulnerabilities, 265 critical, 14 exploited.
- synacor zimbra collaboration suiteSynacor Zimbra Mail Client 8.6 before 8.6.0 Patch 5 has XSS via the error/warning dialog and...6.1 Medium
- logicaldocLogicalDOC Community Edition 8.x before 8.2.1 has a path traversal vulnerability that allows...7.1 High
ipnsnpmImproper Key Verification in ipns7.5 Highweb3npmInsecure Credential Storage in web33.3 LowbootboxnpmCross-Site Scripting in bootboxNo score- fstream project fstreamArbitrary File Overwrite in fstream7.5 High
ltt.jsnpmDirectory Traversal in ltt.jsNo score- synacor zimbra collaboration suiteSynacor Zimbra Admin UI in Zimbra Collaboration Suite before 8.8.0 beta 2 has Persistent XSS via...4.8 Medium
- synacor zimbra collaboration suiteThere is a Persistent XSS vulnerability in the briefcase component of Synacor Zimbra...6.1 Medium
- fortinet forticlient, forticlientwindows +1 moreA local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows...7.1 High
- fortinet forticlient, forticlient for windows +1 moreA local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows...7.8 High
- fortinet forticlient, forticlient for windows +1 moreA local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows...7.8 High
- gog galaxy, gog.com gog galaxy +1 moreAn exploitable local privilege elevation vulnerability exists in the file system permissions of...9.3 Critical
- google api c\+\+ clientAn unhandled exception vulnerability exists during Google Sign-In with Google API C++ Client...8.6 High
- sqlite, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreSQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the...9.8 Critical
- synacor zimbra collaboration suiteAn issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x...5.3 Medium
- apache hadoopPrivilege escalation vulnerability in Apache Hadoop8.8 High
- webport web portWeb Port 1.19.1 allows XSS via the /log type parameter.6.1 Medium
- webport web portWeb Port 1.19.1 allows XSS via the /access/setup type parameter.6.1 Medium
- afian filerunFileRun 2019.05.21 allows customizables/plugins/audio_player Directory Listing.5.3 Medium
- afian filerunFileRun 2019.05.21 allows css/ext-ux Directory Listing.5.3 Medium
- afian filerunFileRun 2019.05.21 allows images/extjs Directory Listing.5.3 Medium
- linux kernelAn issue was discovered in the MPT3COMMAND case in _ctl_ioctl_main in drivers/scsi/mpt3sas...7.8 High
- linux kernelAn issue was discovered in sunxi_divs_clk_setup in drivers/clk/sunxi/clk-sunxi.c in the Linux...5.5 Medium
- linux kernelAn issue was discovered in wcd9335_codec_enable_dec in sound/soc/codecs/wcd9335.c in the Linux...7.8 High
- synacor zimbra collaboration suitemailboxd component in Synacor Zimbra Collaboration Suite 8.6, 8.7 before 8.7.11 Patch 7, and 8.8...6.1 Medium
- synacor zimbra collaboration suiteSynacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web...6.1 Medium
- synacor zimbra collaboration suiteZimbra Collaboration Suite 8.7.x through 8.8.11 allows Blind SSRF in the Feed component.6.5 Medium
- synacor zimbra collaboration suiteZxChat (aka ZeXtras Chat), as used for zimbra-chat and zimbra-talk in Synacor Zimbra...9.8 Critical
- synacor zimbra collaboration suiteSynacor Zimbra Collaboration Suite 8.7.x through 8.8.11 allows insecure object deserialization in...9.8 Critical
- synacor zimbra collaboration suite, zimbra collaboration suite (zcs) +1 moremailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML...9.8 Critical
- fortinet fortiosAn Information Exposure vulnerability in Fortinet FortiOS 6.0.1, 5.6.5 and below, allow attackers...5.3 Medium
jquery.terminalnpmReflected Cross-Site Scripting in jquery.terminalNo scoreterriajs-servernpmServer-Side Request Forgery in terriajs-serverNo score- bosch smart home controller, smart home controller firmware +1 moreIncorrect pviilege assignment in the 3rd party pairing mechanism of the Bosch Smart Home Controller (SHC)5.5 Medium
- bosch smart home controller, smart home controller firmware +1 moreImproper access control in the JSON-RPC interface of the Bosch Smart Home Controller (SHC)5.3 Medium
- bosch smart home controller, smart home controller firmware +1 moreImproper access control in the backup mechanism of the Bosch Smart Home Controller (SHC)5.7 Medium
- bosch smart home controller, smart home controller firmware +1 moreIncorrect privilege assignment in the app permission update API of the Bosch Smart Home Controller (SHC)5.5 Medium
- hp z4 g4 core-x workstation firmware, z4 g4 workstation firmware, z6 g4 workstation firmware +1 more +3 moreHP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware)...6.8 Medium
- hp z4 g4 core-x workstation firmware, z4 g4 workstation firmware, z6 g4 workstation firmware +1 more +3 moreHP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware)...7.2 High
- bosch smart home controller, smart home controller firmware +1 moreImproper access control in the JSON-RPC interface of the Bosch Smart Home Controller (SHC)7.5 High
- bosch smart home controller, smart home controller firmware +1 moreIncorrect privilege assignment in the app pairing mechanism of the Bosch Smart Home Controller (SHC)8.0 High
concat-with-sourcemapsnpmOut-of-bounds Read in concat-with-sourcemapsNo score- bosch access professional edition, video client, video management system +10 more +12 moreBuffer Overflow for Bosch Video Systems, PSIM and Access Control Systems9.8 Critical
- bosch access professional edition, video client, video management system +8 more +10 moreImproper Access Control for Bosch Video Systems, PSIM and Access Control Systems9.8 Critical
- traefikContainous Traefik Exposes Password Hashes7.5 High
- netgate pfsenseIn pfSense 2.4.4-p3, a stored XSS vulnerability occurs when attackers inject a payload into the...6.1 Medium
- incsub hustleThe Hustle (aka wordpress-popup) plugin 6.0.7 for WordPress is vulnerable to CSV Injection as it...8.8 High
- verdaccioCross-Site Scripting (XSS) in Verdaccio6.1 Medium
- yealink ultra-elegant ip phone sip-t41p firmwareThe diagnostics web interface in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware 66.83.0...8.0 High
- Show moreLoading…