CVEs published in June 2019
1,318 vulnerabilities, 192 critical, 9 exploited.
- huawei ar1200, ar1200-s, ar150, ar160, ar200, ar2200, ar2200-s, ar3200, srg1300, srg2300, srg3300, ar1200-s firmware, ar1200 firmware +9 more +11 moreThere is a digital signature verification bypass vulnerability in AR1200, AR1200-S, AR150, AR160,...6.7 Medium
- huawei ap4050dn-e, ap4050dn-e firmware +1 moreThere is an improper authentication vulnerability in some Huawei AP products before version...6.8 Medium
- huawei emily-l29c, emily-l29c firmware +1 moreEmily-L29C Huawei phones versions earlier than 9.0.0.159 (C185E2R1P12T8) have a Factory Reset...4.6 Medium
- huawei p20, p20 firmware +1 moreThere is a Factory Reset Protection (FRP) bypass security vulnerability in P20 Huawei smart...4.6 Medium
- huawei mate20, mate20 firmware +1 moreMate20 Huawei smartphones versions earlier than HMA-AL00C00B175 have an out-of-bounds read...3.9 Low
- huawei mate 9 pro, mate 9 pro fimware +1 moreMate 9 Pro Huawei smartphones earlier than LON-L29C 8.0.0.361(C636) versions have an information...5.5 Medium
- huawei y9 2019, y9 2019 firmware +1 moreThere is an information leak vulnerability in some Huawei phones, versions earlier than Jackman...4.6 Medium
bytenpmOut-of-bounds Read in byteNo scorecloudcmdnpmCross-Site Scripting (XSS) in cloudcmdNo scorepemnpmSensitive Data Exposure in pem7.5 HighfloodynpmRemote Memory Exposure in floody5.1 Medium- grailsIncorrect Resource Transfer Between Spheres in Grails8.1 High
- ui aircam firmwareOn Ubiquiti airCam 3.1.4 devices, a Denial of Service vulnerability exists in the RTSP Service...7.5 High
GraphicsMagickSUSERecommended update for GraphicsMagickNo score- exim, canonical ubuntu linux, debian linux +1 more +3 moreA flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient...9.0 Critical
- linux kernel, netapp active iq unified manager, aff a700s firmware +4 more +6 moreAn issue was discovered in get_vdev_port_node_info in arch/sparc/kernel/mdesc.c in the Linux...7.5 High
- southrivertech titan ftp serverA Directory Traversal issue was discovered in the Web GUI in Titan FTP Server 2019 Build 3505....6.5 Medium
- vfrontVFront 0.99.5 has stored XSS via the admin/sync_reg_tab.php azzera parameter, which is mishandled...6.1 Medium
- vfrontVFront 0.99.5 has Reflected XSS via the admin/menu_registri.php descrizione_g parameter or the...6.1 Medium
- bluditBludit before 3.9.0 allows remote code execution for an authenticated user by uploading a php...8.8 High
- citrix sd-wan center, netscaler sd-wan center +1 moreCitrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow...9.8 Critical
- 3cx live chatThe WP Live Chat Support Pro plugin through 8.0.26 for WordPress contains an arbitrary file...9.8 Critical
- progress fiddlerTelerik Fiddler v5.0.20182.28034 doesn't verify the hash of EnableLoopback.exe before running it,...7.8 High
- auo solar data recorderAn issue was discovered in AUO Solar Data Recorder before 1.3.0. The web portal uses HTTP Basic...9.8 Critical
- auo solar data recorderStored XSS was discovered in AUO Solar Data Recorder before 1.3.0 via the protect/config.htm addr...5.4 Medium
- atutorATutor 2.2.4 allows Arbitrary File Upload and Directory Traversal, resulting in remote code...8.8 High
- carel pcoweb card firmwareAn issue was discovered in Carel pCOWeb prior to B1.2.4. In /config/pw_changeusers.html the...8.8 High
- cyrus imap, canonical ubuntu linux, debian linux +5 more +7 moreThe CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows...9.8 Critical
- carel pcoweb card firmwareStored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pw_snmp...5.4 Medium
- liferay portalLiferay Portal Allows Cross-Site Scripting (XSS) via the SimpleCaptcha API4.7 Medium
- ivanti connect secure, policy secure, pulsesecure pulse policy secure +2 moreIn Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7...8.8 High
- ivanti landesk management suiteImproper access control and open directories in Ivanti LANDESK Management Suite (LDMS, aka...9.0 Critical
- ivanti landesk management suiteA SQL Injection vulnerability exists in Ivanti LANDESK Management Suite (LDMS, aka Endpoint...8.1 High
- htc viveportPrivilege escalation in the "HTC Account Service" and "ViveportDesktopService" in HTC VIVEPORT...7.8 High
- ivanti landesk management suiteOpen directories in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168...6.3 Medium
- ivanti landesk management suiteUse of a hard-coded encryption key in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager...4.5 Medium
- htc viveportPrivilege escalation due to insecure directory permissions affecting ViveportDesktopService in...7.8 High
- ivanti landesk management suiteA vulnerable upl/async_upload.asp web API endpoint in Ivanti LANDESK Management Suite (LDMS, aka...9.8 Critical
- orpak siteomatA stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote...9.8 Critical
- orpak siteomatThe Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017...9.8 Critical
- exagrid backup appliance firmwareExaGrid appliances with firmware version v4.8.1.1044.P50 have a /monitor/data/Upgrade/ directory...9.8 Critical
- orpak siteomatAn insecure communication was found between a user and the Orpak SiteOmat management console for...9.8 Critical
- orpak siteomatA SQL injection vulnerability exists in all Orpak SiteOmat versions prior to 2017-09-25. The...9.8 Critical
- orpak siteomatAll known versions of the Orpak SiteOmat web management console is vulnerable to multiple...6.1 Medium
- orpak siteomatAn authentication bypass was found in an unknown area of the SiteOmat source code. All SiteOmat...9.8 Critical
- quest kace k1000 appliance, quest kace systems management appliance firmware +1 moreThe Quest Kace K1000 Appliance is vulnerable to multiple Blind SQL Injections.6.5 Medium
- quest kace k1000 appliance, quest kace systems management appliance firmware +1 moreThe Quest Kace K1000 Appliance is vulnerable to JavaScript injection.5.4 Medium
- quest kace k1000 appliance, quest kace systems management appliance firmware +1 moreThe Quest Kace K1000 Appliance misconfigures the Cross-Origin Resource Sharing (CORS) mechanism.8.8 High
- facebook osqueryIn some configurations an attacker can inject a new executable path into the extensions.load file...8.1 High
- [unknown] rktrkt through version 1.30.0 does not isolate processes in containers that are run with `rkt enter`...4.7 Medium
- Show moreLoading…