CVEs published in June 2019
1,318 vulnerabilities, 192 critical, 9 exploited.
- zte wf820+ lte outdoor cpe, wf820\+ lte outdoor cpe firmware +1 moreAll versions up to UKBB_WF820+_1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by...9.0 Critical
- joomla joomla\!An issue was discovered in Joomla! before 3.9.7. The subform fieldtype does not sufficiently...6.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.7. The CSV export of com_actionslogs is vulnerable...9.8 Critical
- joomla joomla\!An issue was discovered in Joomla! before 3.9.7. The update server URL of com_joomlaupdate can be...6.5 Medium
- tzumi klic lock, klic smart padlock model 5686 firmware +1 moreAn authentication bypass in website post requests in the Tzumi Electronics Klic Lock application...3.7 Low
- apache fineractSQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary...9.8 Critical
- apache fineractSQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary...9.8 Critical
localhost-nownpmPath Traversal in localhost-nowNo score- misp-project mispAn issue was discovered in MISP 2.4.108. Organization admins could reset credentials for site...6.6 Medium
node-os-utilsnpmRemote Code Execution in node-os-utils7.3 Highm-servernpmPath Traversal in m-serverNo scorehttp-proxy-agentnpmDenial of Service in http-proxy-agentNo score- freedesktop dbus, canonical ubuntu linux +1 moredbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in...7.1 High
- jenkins jx resources, jenkins project jx resources plugin +1 moreJenkins JX Resources Plugin missing permission check8.8 High
- jenkins jx resources, jenkins project jx resources plugin +1 moreJenkins JX Resources Plugin cross-site request forgery vulnerability8.8 High
- jenkins token macro, jenkins project token macro plugin +1 moreImproper Restriction of XML External Entity Reference Jenkins Token Macro Plugin7.5 High
- jenkins electricflow, jenkins project electricflow plugin +1 moreJenkins ElectricFlow Plugin is vulnerable to reflected cross site scripting vulnerability6.1 Medium
- jenkins electricflow, jenkins project electricflow plugin +1 moreJenkins ElectricFlow Plugin is vulnerable to stored cross site scripting vulnerability5.4 Medium
- jenkins electricflow, jenkins project electricflow plugin +1 moreJenkins ElectricFlow Plugin globally and unconditionally disabled SSL/TLS certificate validation6.5 Medium
- jenkins electricflow, jenkins project electricflow plugin +1 moreJenkins ElectricFlow Plugin Missing permission checks4.3 Medium
- jenkins electricflow, jenkins project electricflow plugin +1 moreJenkins ElectricFlow Plugin missing permission check4.3 Medium
- jenkins electricflow, jenkins project electricflow plugin +1 moreJenkins ElectricFlow Plugin cross-site request forgery vulnerability4.3 Medium
- pnet project pnetMissing Initialization of Resource in pnet7.5 High
- gnome gvfsdaemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x...7.8 High
- otrs, debian linux +1 moreAn issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8, Community...5.3 Medium
- otrs, debian linux +1 moreAn issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.7, Community...4.3 Medium
- libgd, php, canonical ubuntu linux +10 more +12 moreUninitialized read in gdImageCreateFromXbm3.1 Low
- starry s00111 firmwareStarry Station (aka Starry Router) sets the Access-Control-Allow-Origin header to "*". This...8.8 High
- starry s00111 firmwareThe HTTP API supported by Starry Station (aka Starry Router) allows brute forcing the PIN setup...8.0 High
- suse rancherRancher Login Parameter Can Be Edited4.7 Medium
- postgresqlA vulnerability was found in postgresql versions 11.x prior to 11.3. Using a purpose-crafted...6.5 Medium
- openid ruby-openidruby-openid SSRF via claimed_id request9.8 Critical
- radare radare2In radare2 through 3.5.1, there is a heap-based buffer over-read in the r_egg_lang_parsechar...7.8 High
- photodex proshow producerAn issue was discovered in Photodex ProShow Producer v9.0.3797 (an application that runs with...7.8 High
- dlink dir-818lw firmwareAn issue was discovered on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a...8.8 High
- dlink dir-818lw firmwareAn issue was discovered on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a...8.8 High
- wampserverWampServer before 3.1.9 has CSRF in add_vhost.php because the synchronizer pattern implemented as...6.5 Medium
- wpengine wpgraphqlThe createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated...5.3 Medium
- wpengine wpgraphqlAn issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress. By querying the 'users'...9.1 Critical
- wpengine wpgraphqlThe WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user with...9.8 Critical
- pix-link lv-wr09 firmwareXSS on the PIX-Link Repeater/Router LV-WR09 with firmware v28K.MiniRouter.20180616 allows...6.1 Medium
- cesanta mongooseAn invalid read of 8 bytes due to a use-after-free vulnerability in the...9.8 Critical
- cesanta mongooseAn invalid write of 8 bytes due to a use-after-free vulnerability in the...9.8 Critical
- cesanta mongooseAn invalid read of 8 bytes due to a use-after-free vulnerability during a "return" in the...9.8 Critical
- cesanta mongooseAn invalid read of 8 bytes due to a use-after-free vulnerability during a "NULL test" in the...9.8 Critical
- cesanta mongoose embedded web server libraryUse-after-free vulnerability in the mg_cgi_ev_handler function in mongoose.c in Cesanta Mongoose...8.8 High
- bevywise mqttrouteIn Bevywise MQTTRoute 1.1 build 1018-002, a connect packet combined with a malformed unsubscribe...7.5 High
- belkin crock-pot smart slow cooker with wemo firmwareThe Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the...9.8 Critical
- huawei hg255s firmwareThere is a Clickjacking vulnerability in Huawei HG255s product. An attacker may trick user to...4.3 Medium
- twisted, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreTwisted CRLF Injection6.1 Medium
- Show moreLoading…