CVEs published in June 2019
1,318 vulnerabilities, 192 critical, 9 exploited.
- cure53 dompurifyDOMPurify before 3.4.0 ADD_TAGS Function Bypasses FORBID_TAGS5.1 Medium
- cure53 dompurifyDOMPurify before 3.4.7 Hook Mutation Pollution via allowedTags5.3 Medium
- cure53 dompurifyDOMPurify before 3.4.9 Trusted Types Policy State Contamination5.1 Medium
- cure53 dompurifyDOMPurify before 3.4.11 Permanent Attribute Allowlist Pollution via setConfig5.1 Medium
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +53 more +55 morefast-uri vulnerable to host confusion via percent-encoded authority delimiters7.5 High
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +32 more +34 morefast-uri vulnerable to path traversal via percent-encoded dot segments7.5 High
- chimurai http-proxy-middlewarehttp-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass6.9 Medium
- cure53 dompurifyDOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.content6.3 Medium
- cure53 dompurifyDOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM6.1 Medium
- cure53 dompurifyDOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checks6.1 Medium
- cure53 dompurifyDOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)6.0 Medium
- cure53 dompurifyDOMPurify has a SAFE_FOR_TEMPLATES bypass in RETURN_DOM mode6.8 Medium
- cure53 dompurifyDOMPurify: Prototype Pollution to XSS Bypass via CUSTOM_ELEMENT_HANDLING Fallback6.9 Medium
- chimurai http-proxy-middlewareArbitrary Code Execution in handlebars4.0 Medium
- chimurai http-proxy-middlewareArbitrary Code Execution in handlebars4.0 Medium
- cure53 dompurifyArbitrary Code Execution in handlebars4.5 Medium
- cure53 dompurifyDOMPurify nesting-based mXSS10.0 Critical
- cure53 dompurifyTampering by prototype polution in DOMPurify7.3 High
- log4js-node, log4js project log4js, debian linux +2 moreIncorrect Default Permissions in log4js-node5.5 Medium
- handlebarsjs handlebars, netapp e-series performance analyzer +1 morePrototype Pollution5.6 Medium
- handlebarsjs handlebarsRemote Code Execution (RCE)5.6 Medium
- handlebarsjs handlebarsArbitrary Code Execution in handlebars8.1 High
- handlebars.js project handlebars.js, tenable tenable.sc +1 moreArbitrary Code Execution in handlebars9.8 Critical
- nextcloud extractlib/Controller/ExtractionController.php in the Extract add-on before 1.2.0 for Nextcloud allows...9.0 Critical
- nvidia vibrante linuxNVIDIA’s Vibrante Linux version 1.1, 2.0, and 2.2 contains a vulnerability in the user space driver in which protection mechanisms are insufficient, may lead to denial of service or information disclo…8.2 High
gunnpmHigh severity vulnerability that affects gunNo score- phpmyadminphpMyAdmin CSRF Vulnerability6.5 Medium
- phpmyadminphpMyAdmin SQL injection in Designer feature9.8 Critical
- neovim, vim +1 moregetchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute...8.6 High
- fortinet fortiosA reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4 under SSL...6.1 Medium
- fortinet fortiosA reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.2.0 to 6.0.4 under SSL...6.1 Medium
- fortinet fortiosLack of root file system integrity checking in Fortinet FortiOS VM application images all...6.5 Medium
- marvell 88ss1074 firmware, 88ss1079 firmware, 88ss1080 firmware +16 more +18 moreMarvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174,...4.6 Medium
- fortinet fortiosA Host Header Redirection vulnerability in Fortinet FortiOS all versions below 6.0.5 under SSL...6.1 Medium
- fortinet fortios, fortiproxy, fortios, fortiproxy +1 more +3 moreAn Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5...9.1 Critical
- yubico pam-u2fIn Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set using...8.1 High
- yubico pam-u2fYubico pam-u2f 1.0.7 attempts parsing of the configured authfile (default $HOME/.config/Yubico...7.5 High
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 moreA buffer overflow vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4 and below...5.3 Medium
- fortinet fortios, fortiproxy, fortios, fortiproxy +2 moreAn Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet...9.1 Critical
- nodeca js-yamljs-yaml has prototype pollution in merge (<<)5.3 Medium
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 moreA Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5...4.7 Medium
opencvnpmCommand Injection in opencvNo scoresequelizenpmNoSQL Injection in sequelizeNo scoreloopback-connector-mongodbnpmNoSQL Injection in loopback-connector-mongodbNo score- huawei p30,p30 pro, p30 firmware, p30 pro firmware +2 moreSome Huawei 4G LTE devices, P30 versions before ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1) and...4.2 Medium
- huawei leland-al00a, leland-al00a firmware +1 moreThere is a DoS vulnerability in RTSP module of Leland-AL00A Huawei smart phones versions earlier...6.5 Medium
- huawei s12700, s12700, s12700, s12700, s12700, s12700, s12700, s12700, s1700, s1700, s1700, s1700, s1700, s1700, s2300, s2300, s2300, s2300, s2300, s2300, s2300, s2700, s2700, s2700, s2700, s2700, s2700, s2700, s2700, s5300, s5300, s5300, s5300, s5300, s5300, s5300, s5700, s5700, s5700, s5700, s5700, s5700, s5700, s5700, s5700, s600-e, s600-e, s600-e, s600-e, s600-e, s6300, s6300, s6300, s6300, s6300, s6300, s6300, s6300, s6700, s6700, s6700, s6700, s6700, s6700, s6700, s6700, s7700, s7700, s7700, s7700, s7700, s7700, s7700, s7700, s7700, s7900, s7900, s7900, s9300, s9300, s9300, s9300, s9300, s9300, s9300, s9300x, s9300x, s9300x, s9300x, s9700, s9700, s9700, s9700, s9700, s9700, s9700, s9700, s9700, s12700 firmware, s1700 firmware +12 more +14 moreSome Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can...7.5 High
- huawei p30,p30 pro, p30 firmware, p30 pro firmware +2 moreThere is a man-in-the-middle (MITM) vulnerability on Huawei P30 smartphones versions before ELE...6.8 Medium
- huawei p20, p20 firmware +1 moreThere is Factory Reset Protection (FRP) bypass security vulnerability in P20 Huawei smart phones...4.6 Medium
- huawei mate 9 pro, mate 9 pro firmware +1 moreThere is an information disclosure vulnerability on Mate 9 Pro Huawei smartphones versions...4.6 Medium
- Show moreLoading…