CVEs published in June 2019
1,319 vulnerabilities, 192 critical, 9 exploited.
- exiv2, fedoraproject fedora +1 more A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a... 5.5 Medium
- exiv2, fedoraproject fedora +1 more An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service ... 6.5 Medium
- exiv2, fedoraproject fedora +1 more An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service ... 6.5 Medium
- matio project matio, fedoraproject fedora +1 more Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73... 9.8 Critical
- arastta ecommerce Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATH_INFO to the login/ URI. 6.1 Medium
- peel shopping Advisto PEEL SHOPPING 9.0.0 has CSRF via en/achat/caddie_ajout.php and en/achat/caddie_affichage... 8.8 High
- cszcms csz cms core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by... 9.8 Critical
- xnview XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000030ecfa. 7.8 High
- xnview XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000026b739. 7.8 High
- xnview XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000384e2a. 7.8 High
- chamilo lms Chamilo LMS 1.11.8 and 2.x allows remote code execution through an lp_upload.php unauthenticated... 9.8 Critical
- synology note station Cross-site scripting (XSS) vulnerability in SYNO.NoteStation.Shard in Synology Note Station... 6.5 Medium
- microsoft office Cross-site scripting (XSS) vulnerability in Chart in Synology Office before 3.1.4-2771 allows... 5.5 Medium
- humhub calendar OS command injection vulnerability in drivers_syno_import_user.php in Synology Calendar before 2... 7.3 High
- qnap systems inc. photo station Relative path traversal vulnerability in SYNO.PhotoStation.File in Synology Photo Station before... 4.3 Medium
- qnap systems inc. photo station SQL injection vulnerability in synophoto_csPhotoDB.php in Synology Photo Station before 6.8.11... 7.3 High
- humhub calendar Cross-site scripting (XSS) vulnerability in Event Editor in Synology Calendar before 2.3.0-0615... 6.5 Medium
- synology moments, photo moments +1 more Relative path traversal vulnerability in SYNO.PhotoTeam.Upload.Item in Synology Moments before 1... 8.0 High
- torproject tor browser Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers... 5.3 Medium
-
wiresharkopenSUSE Security update for wireshark No score - zoneminder Stored XSS in the Filters page (Name field) in ZoneMinder 1.32.3 allows a malicious user to embed... 5.4 Medium
- exiv2, canonical ubuntu linux, debian linux +1 more +3 more http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash... 6.5 Medium
- exiv2, canonical ubuntu linux, fedoraproject fedora +2 more Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to assertion... 6.5 Medium
- exiv2, canonical ubuntu linux, debian linux +1 more +3 more A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an... 6.5 Medium
- exiv2, canonical ubuntu linux, debian linux +1 more +3 more A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1... 6.5 Medium
- f5 njs njs through 0.3.3, used in NGINX, has a buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c.... 9.8 Critical
- logitech k360 firmware, unifying receiver firmware +1 more Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the... 6.5 Medium
- logitech r500 firmware The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to... 6.5 Medium
- logitech unifying receiver firmware Logitech Unifying devices allow keystroke injection, bypassing encryption. The attacker must... 6.5 Medium
- logitech k360 firmware, k400r firmware, k750 firmware +2 more +4 more Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka... 6.5 Medium
- logitech unifying receiver firmware Logitech Unifying devices allow live decryption if the pairing of a keyboard to a receiver is... 6.5 Medium
- gnupg, sks keyserver project keyserver, f5 traffix signaling delivery controller +2 more +4 more Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG... 7.5 High
- toaruos project toaruos An integer wrap in kernel/sys/syscall.c in ToaruOS 1.10.10 allows users to map arbitrary kernel... 7.8 High
- toaruos project toaruos kernel/sys/syscall.c in ToaruOS through 1.10.9 allows a denial of service upon a critical error... 5.5 Medium
- toaruos project toaruos kernel/sys/syscall.c in ToaruOS through 1.10.9 has incorrect access control in sys_sysfunc case 9... 7.8 High
- toaruos project toaruos linker/linker.c in ToaruOS through 1.10.9 has insecure LD_LIBRARY_PATH handling in setuid... 7.8 High
- pandorafms pandora fms Artica Pandora FMS 7.0 NG before 735 suffers from local privilege escalation due to improper... 7.8 High
- grafana Grafana Cross-site Scripting vulnerability 5.4 Medium
- irssi Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use... 8.1 High
- canonical ubuntu linux, fedoraproject fedora, mod auth mellon project auth mellon +1 more +3 more mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as... 6.1 Medium
- debian linux, lemonldap-ng lemonldap\ +1 more LemonLDAP::NG before 1.9.20 has an XML External Entity (XXE) issue when submitting a notification... 8.1 High
- minv electronic identification cards client An incorrect implementation of a local web server in eID client (Windows version before 3.1.2,... 8.8 High
- medtronic minimed 508 pump, minimed paradigm 511 pump, minimed paradigm 512/712 pumps +27 more +29 more Medtronic MiniMed 508 and Paradigm Series Insulin Pumps Improper Access Control 7.1 High
- advantech webaccess, webaccess/scada +1 more In WebAccess/SCADA Versions 8.3.5 and prior, multiple untrusted pointer dereference... 9.8 Critical
- advantech webaccess, webaccess/scada +1 more In WebAccess/SCADA Versions 8.3.5 and prior, multiple out-of-bounds write vulnerabilities are... 8.8 High
- advantech webaccess, webaccess/scada +1 more In WebAccess/SCADA Versions 8.3.5 and prior, an out-of-bounds read vulnerability is caused by a... 7.5 High
- advantech webaccess, webaccess/scada +1 more In WebAccess/SCADA Versions 8.3.5 and prior, multiple heap-based buffer overflow vulnerabilities... 9.8 Critical
- advantech webaccess, webaccess/scada +1 more In WebAccess/SCADA, Versions 8.3.5 and prior, multiple stack-based buffer overflow... 9.8 Critical
- advantech webaccess, webaccess/scada +1 more In WebAccess/SCADA, Versions 8.3.5 and prior, a path traversal vulnerability is caused by a lack... 9.1 Critical
- kubevirt containerized-data-importer A flaw was found in the containerized-data-importer in virt-cdi-cloner, version 1.4, where the... 6.5 Medium
- Show olderLoading…