CVEs published in June 2019
1,318 vulnerabilities, 192 critical, 9 exploited.
- fatfreecrm fat free crmWithdrawn Advisory: Fat Free CRM Cross-site Scripting vulnerability5.4 Medium
- apache hbase, rust-protobuf project rust-protobuf +1 moreUncontrolled memory consumption in protobuf7.5 High
querystringifynpmPrototype Pollution in querystringifyNo scorenwmatchernpmRegular Expression Denial of ServiceNo scoreexpress-brutenpmRate Limiting Bypass in express-brute5.6 Medium- digitaldruid hoteldruidHotelDruid before v2.3.1 has SQL Injection via the /visualizza_tabelle.php anno parameter.9.8 Critical
- digitaldruid hoteldruidHotelDruid before v2.3.1 has SQL Injection via the /tab_tariffe.php numtariffa1 parameter.9.8 Critical
- digitaldruid hoteldruidIn Hoteldruid before 2.3.1, a division by zero was discovered in $num_tabelle in tab_tariffe.php ...4.9 Medium
- logitech r700 laser presentation remote firmwareDue to unencrypted and unauthenticated data communication, the wireless presenter Logitech R700...8.8 High
- inateck wp2002 firmwareDue to unencrypted and unauthenticated data communication, the wireless presenter Inateck WP2002...8.8 High
- inateck wp1001 firmwareDue to unencrypted and unauthenticated data communication, the wireless presenter Inateck WP1001...8.8 High
- solarwinds dameware mini remote controlDameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote...7.4 High
- dameware remote mini controlDameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote...7.4 High
- dameware remote mini controlDameware Remote Mini Control version 12.1.0.34 and prior contains a unauthenticated remote heap...7.5 High
- moxa awk-3121 firmwareAn issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an...8.8 High
- moxa awk-3121 firmwareAn issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an...8.8 High
- moxa awk-3121 firmwareAn issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an...8.8 High
- moxa awk-3121 firmwareAn issue was discovered on Moxa AWK-3121 1.19 devices. It provides functionality so that an...6.1 Medium
- clusterlabs libqblibqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because...7.1 High
- androidIn nfa_rw_store_ndef_rx_buf of nfa_rw_act.cc, there is a possible out-of-bound write due to a...7.8 High
- androidIn areNotificationsEnabledForPackage of NotificationManagerService.java, there is a possible...7.8 High
- androidIn the Bluetooth Low Energy (BLE) specification, there is a provided example Long Term Key (LTK)....8.8 High
- androidIn HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to...9.8 Critical
- moxa awk-3121 firmwareAn issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides certfile upload...8.8 High
- androidIn EffectRelease of EffectBundle.cpp, there is a possible memory corruption due to a double free....7.8 High
- androidIn callGenIDChangeListeners and related functions of SkPixelRef.cpp, there is a possible use...7.0 High
- androidIn parseMPEGCCData of NuPlayerCCDecoder.cpp, there is a possible out of bounds write due to...7.8 High
- androidIn huff_dec_1D of nlc_dec.cpp, there is a possible out of bounds write due to a missing bounds...8.8 High
- moxa awk-3121 firmwareAn issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET...9.8 Critical
- androidIn isSeparateProfileChallengeAllowed of DevicePolicyManagerService.java, there is a possible...7.8 High
- androidIn GetPermittedAccessibilityServicesForUser of DevicePolicyManagerService.java, there is a...7.8 High
- androidIn isPackageDeviceAdminOnAnyUser of PackageManagerService.java, there is a possible permissions...7.8 High
- moxa awk-3121 firmwareAn issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides ping...8.8 High
- moxa awk-3121 firmwareAn issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a web interface to...8.8 High
- moxa awk-3121 firmwareAn issue was discovered on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an...8.8 High
- moxa awk-3121 firmwareAn issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a Wi-Fi connection...8.1 High
- moxa awk-3121 firmwareAn issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an...8.8 High
- moxa awk-3121 firmwareAn issue was discovered on Moxa AWK-3121 1.14 devices. The session cookie "Password508" does not...6.1 Medium
- moxa awk-3121 firmwareAn issue was discovered on Moxa AWK-3121 1.14 devices. It is intended that an administrator can...7.5 High
- moxa awk-3121 firmwareAn issue was discovered on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic...8.1 High
- salesagility suitecrmSuiteCRM 7.10.x before 7.10.17 and 7.11.x before 7.11.5 allows SQL Injection.9.8 Critical
- salesagility suitecrmSuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL...9.8 Critical
- salesagility suitecrmSuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL...9.8 Critical
- salesagility suitecrmSuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL...9.8 Critical
- foxitsoftware foxit pdf sdk activexA command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX)...7.8 High
- foxitsoftware foxit pdf sdk activexA use after free in the TextBox field Mouse Enter action in IReader_ContentProvider can occur for...7.8 High
- phome empirecmsadmin\db\DoSql.php in EmpireCMS through 7.5 allows XSS via crafted SQL syntax to admin/admin.php.4.8 Medium
- phome empirecmsadmin\db\DoSql.php in EmpireCMS through 7.5 allows remote attackers to execute arbitrary PHP code...7.2 High
- maccmsMaccms through 8.0 allows XSS via the site_keywords field to index.php?m=system-config because of...6.1 Medium
- aubioaubio Buffer Overflow vulnerability9.8 Critical
- Show moreLoading…