CVEs published in June 2019
1,318 vulnerabilities, 192 critical, 9 exploited.
- spring data jpa, pivotal software spring data java persistance api +1 moreAdditional information exposure with Spring Data JPA example matcher3.5 Low
- atlassian bitbucket, bitbucket data center +1 moreAtlassian Bitbucket Data Center licensed instances starting with version 5.13.0 before 5.13.6 ...9.1 Critical
- atlassian crowd, crowd and crowd data center +1 moreAtlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled...9.8 Critical
- netgear insightNETGEAR Insight Cloud with firmware before Insight 5.6 allows remote authenticated users to...6.8 Medium
GraphicsMagickopenSUSERecommended update for GraphicsMagickNo score- firejail project firejailIn Firejail before 0.9.60, seccomp filters are writable inside the jail, leading to a lack of...8.8 High
- apcupsd, netgate pfsense +1 moreApcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an...9.8 Critical
- apcupsd, netgate pfsense +1 moreApcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an XSS...6.1 Medium
- rakuten viberA vulnerability in Viber before 10.7.0 for Desktop (Windows) could allow an attacker to execute...7.8 High
- linux kernel, canonical ubuntu linux, debian linux +9 more +11 moreA flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in...8.0 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreAn issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in...4.1 Medium
- php, debian linux, opensuse leap +1 more +3 moreHeap buffer overflow in EXIF extension4.8 Medium
- php, debian linux, opensuse leap +1 more +3 moreOut-of-bounds read in iconv.c4.2 Medium
- veronalabs wp statisticsThe WP Statistics plugin through 12.6.5 for Wordpress has stored XSS in includes/class-wp...5.4 Medium
- douco douphpIn DouCo DouPHP v1.5 Release 20190516, remote attackers can view the database backup file via a...9.8 Critical
- strangebee thehiveAn improper authorization check in the User API in TheHive before 2.13.4 and 3.x before 3.3.1...8.8 High
- glpi dashboard project dashboardIncorrect access control was discovered in the stdonato Dashboard plugin through 0.9.7 for GLPI,...9.8 Critical
- glyphandcog xpdfreaderThere is an out-of-bounds read vulnerability in the function FlateStream::getChar() located at...7.1 High