CVEs published in June 2019
1,318 vulnerabilities, 192 critical, 9 exploited.
- fasterxml jackson-databind, debian linux +1 moreDeserialization of untrusted data in FasterXML jackson-databind5.9 Medium
- isc bind, bind 9, f5 big-ip access policy manager +15 more +17 moreA race condition when discarding malformed packets can cause BIND to exit with an assertion failure5.9 Medium
- bzip bzip2, canonical ubuntu linux, debian linux +17 more +19 moreBZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are...9.8 Critical
- samba, canonical ubuntu linux +1 moreSamba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial...6.5 Medium
- sambaSamba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to...6.5 Medium
- linux kernel, redhat enterprise linux desktop, enterprise linux server +2 more +4 moreA double-free can happen in idr_remove_all() in lib/idr.c in the Linux kernel 2.6 branch. An...7.0 High
- cloud foundry boshBosh Deployment logs leak sensitive information6.0 Medium
- advantech webaccessStack-based buffer overflow in Advantech WebAccess/SCADA 8.4.0 allows a remote, unauthenticated...9.8 Critical
- apache alluraIn Apache Allura prior to 1.11.0, a vulnerability exists for stored XSS on the user dropdown...6.1 Medium
- advantech webaccessStack-based buffer overflow in Advantech WebAccess/SCADA 8.4.0 allows a remote, unauthenticated...9.8 Critical
- linux kerneli915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0...7.8 High
- zohocorp manageengine analytics plus, manageengine browser security plus, manageengine desktop central +15 more +17 moreMultiple Zoho ManageEngine products suffer from local privilege escalation due to improper...7.8 High
- securifi almond\+firmware, almond 2015 firmware, almond firmware +2 moreAn issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL...8.8 High
- securifi almond\+firmware, almond 2015 firmware, almond firmware +2 moreAn issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL...6.5 Medium
- evernote web clipperA universal Cross-site scripting (UXSS) vulnerability in the Evernote Web Clipper extension...6.1 Medium
- securifi almond\+firmware, almond 2015 firmware, almond firmware +2 moreAn issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL...8.8 High
- securifi almond\+firmware, almond 2015 firmware, almond firmware +2 moreAn issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL...8.0 High
- securifi almond\+firmware, almond 2015 firmware, almond firmware +2 moreAn issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL...8.8 High
- securifi almond\+firmware, almond 2015 firmware, almond firmware +2 moreAn issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL...8.8 High
- securifi almond\+firmware, almond 2015 firmware, almond firmware +2 moreAn issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL...8.8 High
- securifi almond\+firmware, almond 2015 firmware, almond firmware +2 moreAn issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL...6.4 Medium
- securifi almond\+firmware, almond 2015 firmware, almond firmware +2 moreAn issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL...8.0 High
- securifi almond\+firmware, almond 2015 firmware, almond firmware +2 moreAn issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL...8.8 High
- alpinelinux abuildAlpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an...6.5 Medium
- gnu bash, redhat enterprise linux +1 moreA heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by...7.0 High
koanAlmaLinux,osadAlmaLinux,python3-koanAlmaLinux +24 more +26 morerhn-tools:1.0 bug fix updateNo scoreGw2SharpNuGetLow severity vulnerability that affects Gw2SharpNo score- tubigan welcome to our resortThe Tubigan "Welcome to our Resort" 1.0 software allows CSRF via admin/mod_users/controller.php...8.8 High
- my-netdata netdataAn issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx...6.5 Medium
- my-netdata netdataAn issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data...6.1 Medium
- my-netdata netdataAn issue was discovered in Netdata 1.10.0. Log Injection (or Log Forgery) exists via a %0a...7.5 High
- my-netdata netdata** DISPUTED ** An issue was discovered in Netdata 1.10.0. Full Path Disclosure (FPD) exists via...5.3 Medium
- cerio dt-300n firmwareCerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input...8.8 High
- ibm cloud privateIBM Cloud Private 2.1.0, 3.1.0, 3.1.1, and 3.1.2 is vulnerable to cross-site request forgery...4.3 Medium
- columbiaweather weather microserver firmwareIn firmware version MS_2.6.9900 of Columbia Weather MicroServer, a stored Cross-site scripting ...5.4 Medium
- columbiaweather weather microserver firmwareIn firmware version MS_2.6.9900 of Columbia Weather MicroServer, a readouts_rd.php directory...5.3 Medium
- columbiaweather weather microserver firmwareIn firmware version MS_2.6.9900 of Columbia Weather MicroServer, an authenticated web user can...8.8 High
- columbiaweather weather microserver firmwareIn firmware version MS_2.6.9900 of Columbia Weather MicroServer, the BACnet daemon does not...7.5 High
- columbiaweather weather microserver firmwareIn firmware version MS_2.6.9900 of Columbia Weather MicroServer, an authenticated web user can...8.8 High
- exacq enterprise system manager, exacq technologies, inc. exacqvision enterprise system manager (esm) +1 moreexacqVision Enterprise System Manager (ESM) privilege escalation6.7 Medium
- dotcmsdotCMS before 5.1.6 is vulnerable to a SQL injection that can be exploited by an attacker of the...7.2 High
- columbiaweather weather microserver firmwareIn firmware version MS_2.6.9900 of Columbia Weather MicroServer, a networkdiags.php reflected...5.4 Medium
- helpy.io helpyHelpy v2.1.0 has Stored XSS via the Ticket title.6.1 Medium
- artha project arthaArtha ~ The Open Thesaurus 1.0.3.0 has a Buffer Overflow.7.5 High
- urbackupIn UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and...7.5 High
- i-doitAn XSS issue was discovered in i-doit Open 1.12 via the src/tools/php/qr/qr.php url parameter.6.1 Medium
- open-xchange appsuiteOX App Suite 7.10.1 and earlier allows Information Exposure.7.5 High
- phoenixcontact axc f 2152 firmware, axc f 2152 starterkit firmware +1 moreAn issue was discovered on Phoenix Contact AXC F 2152 (No.2404267) before 2019.0 LTS and AXC F...6.8 Medium
- craftcms craft cmsCraft CMS XSS Vulnerability6.1 Medium
vimDebianvim - regression updateNo score- Show moreLoading…