CVEs published in June 2019
1,318 vulnerabilities, 192 critical, 9 exploited.
- solarwinds serv-u ftp server, serv-u mft server +1 moreA privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.8.8 High
- ibm cognos controllerIBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 allows web pages to be stored...4.0 Medium
- ibm cognos controllerIBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 could allow a remote attacker to...5.3 Medium
- ibm cognos controllerIBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 allows web pages to be stored...4.0 Medium
- ibm cognos controllerIBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 could allow a remote attacker to...6.5 Medium
- ibm cognos controllerIBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 is vulnerable to cross-site...5.4 Medium
- ibm tivoli netcool/impact, tivoli netcool\/impact +1 moreIBM Tivoli Netcool/Impact 7.1.0 allows for remote execution of command by low privileged User....8.0 High
- ibm infosphere information server, infosphere governance catalog, infosphere information server business glossary +2 more +4 moreIBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity...7.1 High
- infoblox niosA privilege escalation vulnerability in the "support access" feature on Infoblox NIOS 6.8 through...6.7 Medium
- sahipro sahi proAn issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A web reports module has ...8.8 High
- sahipro sahi proAn issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A parameter in the web reports...9.8 Critical
- sahipro sahi proAn issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A directory traversal ...7.5 High
- sahipro sahi proAn issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. The logs web interface is...5.4 Medium
- misp-project mispapp/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator...7.2 High
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +18 more +20 moreJonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This...5.3 Medium
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +21 more +23 moreSACK can cause extensive memory use via fragmented resend queue5.3 Medium
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +21 more +23 moreInteger overflow in TCP_SKB_CB(skb)->tcp_gso_segs7.5 High
- twistedImproper Certificate Validation in Twisted7.4 High
- count per day project per dayThe "Count per Day" plugin before 3.2.6 for WordPress allows XSS via the wp-admin/?page...6.1 Medium
- webminIn Webmin through 1.910, any user authorized to the "Package Updates" module can execute...8.8 High
- orangehrmIn OrangeHRM 4.3.1 and before, there is an input validation error within admin...8.8 High
- leanify project leanifyformats/xml.cpp in Leanify 0.4.3 allows for a controlled out-of-bounds write in xml_memory_writer...9.8 Critical
- mybbIn MyBB before 1.8.21, an attacker can abuse a default behavior of MySQL on many systems (that...7.2 High
- mybbIn MyBB before 1.8.21, an attacker can exploit a parsing flaw in the Private Message / Post...8.7 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreIncorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreExcessive data validation in URL parser in Google Chrome prior to 75.0.3770.80 allowed a remote...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions API in Google Chrome prior to 75.0.3770.80 allowed...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreResource size information leakage in Blink in Google Chrome prior to 75.0.3770.80 allowed a...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in ANGLE in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora, opensuse backports +1 more +3 moreObject lifecycle issue in SwiftShader in Google Chrome prior to 75.0.3770.80 allowed a remote...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreIncorrect dialog box scoping in browser in Google Chrome on Android prior to 75.0.3770.80 allowed...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in XMLHttpRequest in Google Chrome prior to 75.0.3770.80 allowed...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreObject lifecycle issue in V8 in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in CORS in Google Chrome prior to 75.0.3770.80 allowed a remote...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in download manager in Google Chrome prior to 75.0.3770.80 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreObject lifecycle issue in ServiceWorker in Google Chrome prior to 75.0.3770.80 allowed a remote...8.8 High
- radare radare2radare2 through 3.5.1 mishandles the RParse API, which allows remote attackers to cause a denial...7.5 High
- ncurses project ncursesBuffer overflow and format vulnerabilities in ncurses9.8 Critical
- ncurses project ncursesMishandling of format strings in ncurses7.5 High
- pancurses project pancursesFormat string vulnerabilities in pancurses7.5 High
firefoxUbuntufirefox regressionNo score- ea originAn issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of...8.8 High
- miniblog project miniblogmadskristensen MiniBlog through 2018-05-18 allows remote attackers to execute arbitrary ASPX code...7.2 High
- sap netweaver process integration, sap se netweaver process integration(sap xiesr), netweaver process integration(sap xitool) +2 moreSAP NetWeaver Process Integration, versions: SAP_XIESR: 7.20, SAP_XITOOL: 7.10 to 7.11, 7.30, 7...4.8 Medium
- sap businessobjects, sap se businessobjects business intelligence platform (administration console) +1 moreSAP BusinessObjects Business Intelligence Platform (Administration Console), versions 4.2, 4.3,...6.1 Medium
- facebook whatsapp business for android, whatsapp business for ios, whatsapp for android +4 more +6 moreAn out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers....9.8 Critical
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreWhen receiving calls using WhatsApp for Android, a missing size check when parsing a sender...9.8 Critical
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreWhen receiving calls using WhatsApp on Android, a stack allocation failed to properly account for...9.8 Critical
- facebook whatsapp business for ios, whatsapp for ios, whatsapp +1 more +3 moreWhen receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided...9.8 Critical
- Show moreLoading…