CVEs published in June 2019
1,318 vulnerabilities, 192 critical, 9 exploited.
- aubioAubio is vulnerable to a NULL pointer dereference in new_aubio_filterbank7.5 High
- aubioAubio is vulnerable to a NULL pointer dereference in new_aubio_notes function7.5 High
- broadcom bcm4335c0 firmware, bcm43438a1 firmware, cypress cyw20702a1kwfbg firmware +60 more +62 moreBroadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1...8.8 High
- micro focus solutions business managerMicro Focus Solution Business Manager versions prior to 11.4.2 is susceptible to open redirect.6.1 Medium
- solarwinds serv-u ftp serverThe local management interface in SolarWinds Serv-U FTP Server 15.1.6.25 has incorrect access...7.8 High
- urbackupIn UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and...7.5 High
- cloudera data science workbenchAn SQL injection vulnerability was found in Cloudera Data Science Workbench (CDSW) 1.4.0 through...9.9 Critical
- samsung galaxy appsSamsung Galaxy Apps before 4.4.01.7 allows modification of the hostname used for load balancing...8.1 High
- mi stock browser, redmi 4a firmware, redmi 5 plus firmware +16 more +18 moreXiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones...5.3 Medium
- ui unifi firmwareUbiquiti UniFi 52 devices, when Hotspot mode is used, allow remote attackers to bypass intended...5.9 Medium
- enttec datagate mk2 firmware, e-streamer mk2 firmware, pixelator firmware +1 more +3 moreAn issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with...7.8 High
- enttec datagate mk2 firmware, e-streamer mk2 firmware, pixelator firmware +1 more +3 moreAn issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with...9.8 Critical
- enttec datagate mk2 firmware, e-streamer mk2 firmware, pixelator firmware +1 more +3 moreAn issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with...8.8 High
- enttec datagate mk2 firmware, e-streamer mk2 firmware, pixelator firmware +1 more +3 moreA number of stored XSS vulnerabilities have been identified in the web configuration feature in...6.1 Medium
- ui edgeosUbiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary...7.2 High
- cloudera managerThis CVE relates to an unspecified cross site scripting vulnerability in Cloudera Manager.6.1 Medium
- cloudera navigator key trustee kms, manager +1 moreIn Cloudera Navigator Key Trustee KMS 5.12 and 5.13, incorrect default ACL values allow remote...4.9 Medium
- supra stv-lc40lt0020f firmwareSupra Smart Cloud TV allows remote file inclusion in the openLiveURL function, which allows a...5.5 Medium
- ibm intelligent operations center, intelligent operations center for emergency management, water operations for waternamics +2 moreIBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to cross-site scripting...5.4 Medium
- ibm intelligent operations center, intelligent operations center for emergency management, water operations for waternamics +2 moreIBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not properly validate file types...8.0 High
- ibm intelligent operations center, intelligent operations center for emergency management, water operations for waternamics +2 moreIBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to user enumeration,...5.9 Medium
- ibm intelligent operations center, intelligent operations center for emergency management, water operations for waternamics +2 moreIBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not require that users should...5.9 Medium
- ibm intelligent operations center, intelligent operations center for emergency management, water operations for waternamics +2 moreIBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 could allow an authenciated user to...8.8 High
- gemalto sentinel ldkGemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with...5.3 Medium
- gemalto sentinel ldkHasplm cookie in Gemalto Admin Control Center, all versions prior to 7.92, does not have ...6.5 Medium
- panasonic fpwin pro, control fpwin pro +1 morePanasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded...7.8 High
- panasonic fpwin pro, control fpwin pro +1 morePanasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded...7.8 High
- thinstation project thinstationCommand injection is possible in ThinStation through 6.1.1 via shell metacharacters after the cgi...9.8 Critical
- securitycamera security camera czThe Security Camera CZ application through 1.6.8 for Android stores potentially sensitive...7.5 High
- android, canonical ubuntu linux, debian linux +2 moreIn uvc_parse_standard_control of uvc_driver.c, there is a possible out-of-bound read due to...5.5 Medium
- python, canonical ubuntu linux, debian linux +14 more +16 moreA security regression of CVE-2019-9636 was discovered in python since commit...9.8 Critical
firefoxUbuntufirefox regressionNo score- ibm infosphere information server, infosphere information analyzer, infosphere information governance catalog +1 more +3 moreIBM InfoSphere Information Server 11.5 and 11.7 is affected by an information disclosure...4.3 Medium
- ibm security information queueIBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 generates an error message that...4.3 Medium
- ibm security information queueIBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 allows web pages to be stored...4.0 Medium
- ibm security information queueIBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 could allow a remote attacker to...6.1 Medium
- ibm security information queueIBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 is missing the HTTP Strict...5.9 Medium
- ibm security information queueIBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 discloses sensitive information to...4.0 Medium
- fujitsu arrows nx f05-f firmware, google nexus 7 firmware, nexus 9 firmware +5 more +7 moreXiaomi Mi 5s Plus devices allow attackers to trigger touchscreen anomalies via a radio signal...4.2 Medium
- anviz m3 firmwareAnviz Global M3 Outdoor RFID Access Control executes any command received from any source. No...9.8 Critical
- gallagher command centreGallagher Command Centre before 7.80.939, 7.90.x before 7.90.961, and 8.x before 8.00.1128 allows...6.5 Medium
- pivotal ops manager, pivotal software operations manager +1 moreOps Manager uaa client issues tokens after refresh token expiration6.1 Medium
- dell emc openmanage server administrator, dell emc openmanage server administrator +1 moreWeb Parameter Tampering Vulnerability9.1 Critical
- dell emc openmanage server administrator, dell emc openmanage server administrator +1 moreXML External Entity (XXE) Injection Vulnerability7.5 High
- vmware workstationVMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced...8.8 High
- vmware tools, tools for windows +1 moreVMware Tools for Windows (10.x before 10.3.10) update addresses an out of bounds read...7.1 High
- python pyxdgCode Injection in PyXDG7.5 High
- parso project parsoDeserialization vulnerability exists in parso7.5 High
- vtiger crmvtiger CRM 7.0.1 is affected by one reflected Cross-Site Scripting (XSS) vulnerability affecting...6.1 Medium
- mantisbtAn issue was discovered in MantisBT through 1.3.14, and 2.0.0. Using a crafted request on...6.5 Medium
- Show moreLoading…