CVEs published in June 2019
1,318 vulnerabilities, 192 critical, 9 exploited.
- mybbMyBB 1.8.19 has XSS in the resetpassword function.6.1 Medium
- mybbMyBB 1.8.19 allows remote attackers to obtain sensitive information because it discloses the...5.3 Medium
- soyal ar-727h firmware, ar-829ev5 firmware +1 moreOn SOYAL AR-727H and AR-829Ev5 devices, all CGI programs allow unauthenticated POST access.7.5 High
- kyocera command center rxKyocera Command Center RX TASKalfa4501i and TASKalfa5052ci allows remote attackers to abuse the...8.8 High
- tp-link tl-wr940n firmware, tl-wr941nd firmware +1 moreTP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds...8.8 High
- northern cfengineNorthern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions.8.8 High
- hashicorp consulHashiCorp Consul Incorrect Access Control vulnerability7.5 High
- papercut mf, ng +1 moreAn unspecified vulnerability in the application server in PaperCut MF and NG versions 18.3.8 and...9.8 Critical
- progress sitefinityProgress Sitefinity 10.1.6536 does not invalidate session cookies upon logouts. It instead tries...6.5 Medium
- qualiteam x-cartX-Cart V5 is vulnerable to XSS via the CategoryFilter2 parameter.6.1 Medium
- linksys wrt1900acs firmwareAn issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. A lack of encryption in how...7.8 High
- investment mlm software project mlm softwareAn issue was discovered in PHP Scripts Mall Investment MLM Software 2.0.2. Stored XSS was found...5.4 Medium
express-basic-authnpmexpress-basic-auth Timing Attack due to native string comparison instead of constant time string comparison3.1 LowupmergenpmPrototype Pollution in upmerge7.5 HighredbirdnpmInsecure Default Configuration in redbird4.2 Mediumjwt-simplenpmSignature Verification Bypass in jwt-simpleNo scoreserveynpmPath Traversal in serveyNo scoretypeormnpmSQL Injection in typeorm9.8 Critical- api based travel booking project based travel bookingAn issue was discovered in PHP Scripts Mall API Based Travel Booking 3.4.7. There is Reflected...6.1 Medium
- suse rancherRancher Privilege Escalation Vulnerability8.8 High
- suse rancherRancher code injection via fluentd config commands8.8 High
- chartkick project chartkickCross-site Scripting in Chartkick4.7 Medium
- huawei mate10, mate 10 firmware +1 moreThere is a double free vulnerability on certain drivers of Huawei Mate10 smartphones versions...5.5 Medium
- huawei honor v10, honor view 10 firmware +1 moreHuawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.125(C00E125R2P14T8) have...6.4 Medium
- huawei mate 10, mate 10 firmware +1 moreThe image processing module of some Huawei Mate 10 smartphones versions before ALP-L29 9.0.0.159...5.5 Medium
- huawei honor v10, honor 10, honor play, honor 10 firmware, honor play firmware +1 more +3 moreThere is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than...7.0 High
- honor pcmanagerThere is a code execution vulnerability in Huawei PCManager versions earlier than PCManager 9.0.1...7.8 High
- honor pcmanagerThere is a privilege escalation vulnerability in Huawei PCManager versions earlier than PCManager...7.8 High
- huawei mate10, mate 10 firmware +1 moreThere is a use after free vulnerability on certain driver component in Huawei Mate10 smartphones...5.5 Medium
- sitecore experience platformSitecore Experience Platform (XP) prior to 9.1.1 is vulnerable to remote code execution via...8.8 High
- workdayCSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in...8.8 High
- servo smallvecDouble free in smallvec9.8 Critical
- ibm infosphere information server, infosphere information server on cloud, watson knowledge catalog +2 moreIBM InfoSphere Information Server 11.7.1.0 stores a common hard coded encryption key that could...6.2 Medium
- ibm jazz for service managementIBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow a remote attacker to...7.4 High
- ibm infosphere information server, infosphere information server on cloud +1 moreIBM InfoSphere Information Server 11.7.1 containers are vulnerable to privilege escalation due to...8.3 High
- ibm maximo asset management, control desk, maximo for aviation +7 more +9 moreIBM Maximo Asset Management 7.6 Work Centers' application does not validate file type upon upload...4.3 Medium
- ibm maximo asset management, control desk, maximo for aviation +7 more +9 moreIBM Maximo Asset Management 7.6 could allow a physical user of the system to obtain sensitive...2.1 Low
- ibm maximo asset management, control desk, maximo for aviation +7 more +9 moreIBM Maximo Asset Management 7.6 could allow a an authenticated user to replace a target page with...6.5 Medium
qemuDebianqemu - regression updateNo score- chartered accountant \ auditor website projectPHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has Stored XSS in the Profile...5.4 Medium
- kromtech mackeeperKromtech MacKeeper 3.20.4 suffers from a root privilege escalation vulnerability through its `com...9.8 Critical
- alexpinel dotImproper Control of Generation of Code in doT8.8 High
clean-cssnpmRegular Expression Denial of Service in clean-cssNo scoretesseract.jsnpmInsecure Default Configuration in tesseract.js5.9 Mediumsequelize-clinpmSensitive Data Exposure in sequelize-cli3.5 Low- primasystems flexairPrima Systems FlexAir devices allow Authenticated Stored XSS.9.0 Critical
- primasystems flexairPrima Systems FlexAir devices have Hard-coded Credentials.8.8 High
- gardenerIn Gardener before 0.20.0, incorrect access control in seed clusters allows information...8.5 High
- thomsonreuters concourse matter room, firm central desktop +1 moreAn issue was discovered in Thomson Reuters Desktop Extensions 1.9.0.358. An unauthenticated...9.8 Critical
- gemalto ezio ds3 serverGemalto DS3 Authentication Server 2.6.1-SP01 allows OS Command Injection.8.0 High
- Show moreLoading…