CVEs published in June 2019
1,318 vulnerabilities, 192 critical, 9 exploited.
- google androidIn ih264d_fmt_conv_420sp_to_420p of ih264d_format_conv.c, there is a possible out of bounds write...8.8 High
- google androidIn onPermissionGrantResult of GrantPermissionsActivity.java, there is a possible incorrectly...8.8 High
- google androidIn publishKeyEvent, publishMotionEvent and sendUnchainedFinishedSignal of InputTransport.cpp,...5.5 Medium
- google androidIn findAvailSpellCheckerLocked of TextServicesManagerService.java, there is a possible way to...7.8 High
- sony r5c firmware, wd65 firmware, wd75 firmware +5 more +7 moreThe Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell...8.8 High
- sony r5c firmware, wd65 firmware, wd75 firmware +5 more +7 moreThe Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal.8.1 High
- sony r5c firmware, wd65 firmware, wd75 firmware +5 more +7 moreThe Photo Sharing Plus component on Sony Bravia TV through 8.587 devices has a Buffer Overflow.6.5 Medium
- redwoodhqRedwoodHQ 2.5.5 does not require any authentication for database operations, which allows remote...9.8 Critical
- gvectors wpforo forumAn issue was discovered in the update function in the wpForo Forum plugin before 1.5.2 for...9.8 Critical
- vtech storio max firmwareVTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an...9.8 Critical
- zrlogAn issue was discovered in ZRLOG 2.0.1. There is a Stored XSS vulnerability in the nickname field...6.1 Medium
- nagios xiA cross-site scripting vulnerability exists in Nagios XI before 5.5.4 via the 'name' parameter...5.4 Medium
- nagios xiAn Insufficient Access Control vulnerability (leading to credential disclosure) in...9.8 Critical
- thephpfactory auction factorySQL Injection exists in the Auction Factory 4.5.5 component for Joomla! via the filter_order_Dir...9.8 Critical
- thephpfactory dutch auction factorySQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the...9.8 Critical
- thephpfactory micro deal factorySQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla! via the id parameter,...9.8 Critical
- ranksol nimble professionalCSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account.8.8 High
- openfind mail2000An issue was discovered in Openfind Mail2000 v6 Webmail. XSS can occur via an '<object data="data...6.1 Medium
- ranksol twilio web to fax machine systemSQL Injection exists in Twilio WEB To Fax Machine System 1.0 via the email or password parameter...9.8 Critical
- ranksol live call supportCSRF exists in server.php in Live Call Support Application 1.5 for adding an admin account.8.8 High
- eic biyanEXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information without being...7.5 High
- eic biyanEXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information (Password)...9.8 Critical
- healthnode hospital management system project hospital management systemSQL Injection exists in HealthNode Hospital Management System 1.0 via the id parameter to...9.8 Critical
- arenam amgallerySQL Injection exists in the AMGallery 1.2.3 component for Joomla! via the filter_category_id...9.8 Critical
- jimtawl project jimtawlSQL Injection exists in the Jimtawl 2.2.7 component for Joomla! via the id parameter.9.8 Critical
- e107An issue was discovered in e107 v2.1.9. There is a XSS attack on e107_admin/comment.php.4.8 Medium
- education website project websiteSQL injection exists in Scriptzee Education Website 1.0 via the college_list.html subject, city,...9.8 Critical
- bubblesoftapps bubbleupnpIn BubbleUPnP 0.9 update 30, the XML parsing engine for SSDP/UPnP functionality is vulnerable to...9.8 Critical
- flippa marketplace clone project marketplace cloneSQL injection exists in Scriptzee Flippa Marketplace Clone 1.0 via the site-search sortBy or...9.8 Critical
- micro focus fortify software security center server, microfocus fortify software security center +1 moreKM03461174 Micro Focus Fortify Software Security Center Server, CVE-2019-116495.4 Medium
- scriptzee hotel booking engineSQL injection exists in Scriptzee Hotel Booking Engine 1.0 via the hotels h_room_type parameter.9.8 Critical
- tufin securetrackAn issue was discovered in Tufin SecureTrack 18.1 with TufinOS 2.16 build 1179(Final). The Audit...9.9 Critical
- primeo project primeoThe doAirdrop function of a smart contract implementation for Primeo (PEO), an Ethereum token,...6.5 Medium
- corel paintshop pro 2019An issue was discovered in Corel PaintShop Pro 2019 21.0.0.119. An integer overflow in the jp2...8.8 High
- broadcom data loss preventionDLP 15.5 MP1 and all prior versions may be susceptible to a cross-site scripting (XSS)...4.8 Medium
- axentra hipserv/api/2.0/rest/aggregator/xml in Axentra firmware, used by NETGEAR Stora, Seagate GoFlex Home, and...9.8 Critical
- westerndigital my book live firmwareWestern Digital WD My Book Live (all versions) has a root Remote Command Execution bug via shell...9.8 Critical
- onappOnApp before 5.0.0-88, 5.5.0-93, and 6.0.0-196 allows an attacker to run arbitrary commands with...6.6 Medium
- open faculty evaluation system project faculty evaluation systemOpen Faculty Evaluation System 5.6 for PHP 5.6 allows submit_feedback.php SQL Injection, a...9.8 Critical
- ngahr resourcelinkNGA ResourceLink 20.0.2.1 allows local file inclusion.6.5 Medium
- open faculty evaluation system project faculty evaluation systemOpen Faculty Evaluation System 7 for PHP 7 allows submit_feedback.php SQL Injection, a different...9.8 Critical
- teltonika rut950 firmwareAn issue was discovered on Teltonika RTU950 R_31.04.89 devices. The application allows a user to...6.5 Medium
- tp-link tl-wr1043nd firmwareAn issue was discovered on TP-Link TL-WR1043ND V2 devices. The credentials can be easily decoded...7.5 High
- tp-link tl-wr1043nd firmwareAn issue was discovered on TP-Link TL-WR1043ND V2 devices. An attacker can send a cookie in an...9.8 Critical
- zucchetti hr portalZucchetti HR Portal through 2019-03-15 allows Directory Traversal. Unauthenticated users can...7.5 High
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.2 may display the vSnap CIFS password in the IBM Spectrum Protect...5.9 Medium
- adobe campaignIBM Campaign 9.1.2 and 10.1 could allow a remote attacker to traverse directories on the system....4.3 Medium
- ibm maximo asset management, control desk, maximo for aviation +7 more +9 moreIBM Maximo Asset Management 7.6 is vulnerable to CSV injection, which could allow a remote...5.5 Medium
- ibm maximo asset management, control desk, maximo for aviation +7 more +9 moreIBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm marketing platformIBM Marketing Platform 9.1.0, 9.1.2, 10.0, and 10.1 exposes sensitive information in the headers...4.3 Medium
- Show moreLoading…