CVEs published in June 2019
1,318 vulnerabilities, 192 critical, 9 exploited.
- nodejs node.jsOut-of-bounds Read in stringstream6.5 Medium
- cloudera managerAn issue was discovered in Cloudera Manager 5.x through 5.15.0. One type of page in Cloudera...6.1 Medium
- ethereum ethereumjDeserialization of Untrusted Data in EthereumJ9.8 Critical
- check point endpoint security client for windows, vpn blade, checkpoint capsule docs standalone client, endpoint security clients +4 more +6 moreCheck Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83,...9.8 Critical
- check point endpoint security client for windows, anti-malware blade, checkpoint capsule docs, endpoint security clients +1 more +3 moreCheck Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before...4.4 Medium
- freepbxAn issue was discovered in FreePBX core before 3.0.122.43, 14.0.18.34, and 5.0.1beta4. By...4.8 Medium
- freepbx disaFreePBX 13 and 14 has SQL Injection in the DISA module via the hangup variable on the /admin...4.3 Medium
- seeddmsout/out.UsrMgr.php in SeedDMS before 5.1.11 allows Stored Cross-Site Scripting (XSS) via the name...5.4 Medium
- seeddmsSeedDMS before 5.1.11 allows Remote Command Execution (RCE) because of unvalidated file upload of...7.5 High
- sophos sfosSQL injection vulnerability in AccountStatus.jsp in Admin Portal of Sophos XG firewall 17.0.8 MR...8.8 High
- sophos sfosA shell escape vulnerability in /webconsole/Controller in Admin Portal of Sophos XG firewall 17.0...8.8 High
- sophos sfosA shell escape vulnerability in /webconsole/APIController in the API Configuration component of...8.1 High
- tp-link tl-wr1043nd firmwareStack-based buffer overflow in the httpd server of TP-Link WR1043nd (Firmware Version 3) allows...7.2 High
- yzmcmsYzmCMS 5.1 has XSS via the admin/system_manage/user_config_add.html title parameter.5.4 Medium
- b3log solob3log Solo 2.9.3 has XSS in the Input page under the "Publish Articles" menu with an ID of ...6.1 Medium
opennpmCommand Injection in openNo score- afian filerunFileRun 2019.05.21 allows XSS via the filename to the ?module=fileman§ion=do&page=up URI.6.1 Medium
- asus vivobaby, hivivo +1 moreThe ASUS Vivobaby application before 1.1.09 for Android has Missing SSL Certificate Validation.9.1 Critical
swagger-uinpmCross-Site Scripting in swagger-ui6.5 MediumesmnpmRegular Expression Denial of ServiceNo score- b3log symphonyIn Symphony before 3.3.0, there is XSS in the Title under Post. The ID "articleTitle" of this is...4.8 Medium
- rdkcentral rdkb ccsppandmA heap-based buffer over-read in Service_SetParamStringValue in cosa_x_cisco_com_ddns_dml.c of...8.8 High
- rdkcentral rdkb ccsppandmA heap-based buffer overflow in cosa_dhcpv4_dml.c in the RDK RDKB-20181217-1 CcspPandM module may...8.8 High
- rdkcentral rdkb ccsppandmA shell injection issue in cosa_wifi_apis.c in the RDK RDKB-20181217-1 CcspWifiAgent module...7.5 High
- rdkcentral rdkb ccsppandmIncorrect access control in actionHandlerUtility.php in the RDK RDKB-20181217-1 WebUI module...6.5 Medium
- creatiwity witycmsThe "utilisateur" menu in Creatiwity wityCMS 0.6.2 modifies the presence of XSS at two input...5.4 Medium
- creatiwity witycmsA "search for user discovery" injection issue exists in Creatiwity wityCMS 0.6.2 via the ...4.3 Medium
- mantisbtMantisBT cross-site scripting (XSS) vulnerability through crafted PATH_INFO4.7 Medium
- jspxcmsIn Jspxcms 9.0.0, a vulnerable URL routing implementation allows remote code execution after...7.2 High
boxfnoncecrates.io`boxfnonce` obsolete with release of Rust 1.35.0No score- cisco rv130w wireless-n multifunction vpn router firmware, rv110w firmware, rv130w firmware +1 more +3 moreCisco RV110W, RV130W, and RV215W Routers Information Disclosure Vulnerability5.3 Medium
- cisco security managerCisco Security Manager XML Entity Expansion Vulnerability6.5 Medium
- cisco email security appliance (esa), email security appliance +1 moreCisco Email Security Appliance GZIP Content Filter Bypass Vulnerability5.8 Medium
- cisco prime infrastructureCisco Prime Infrastructure Virtual Domain Privilege Escalation Vulnerability4.3 Medium
- cisco telepresence tc software, telepresence ce, telepresence tc +2 moreCisco TelePresence Endpoint Command Shell Injection Vulnerability7.5 High
- cisco integrated management controller, unified computing system (management software), unified computing system +2 moreCisco Integrated Management Controller CLI Command Injection Vulnerability6.4 Medium
- cisco rv130w wireless-n multifunction vpn router firmware, rv110w firmware, rv130w firmware +1 more +3 moreCisco RV110W, RV130W, and RV215W Routers Denial of Service Vulnerability5.3 Medium
- cisco rv130w wireless-n multifunction vpn router firmware, rv110w firmware, rv130w firmware +1 more +3 moreCisco RV110W, RV130W, and RV215W Routers Unauthenticated syslog File Access Vulnerability5.3 Medium
- cisco prime service catalogCisco Prime Service Catalog Cross-Site Request Forgery Vulnerability8.8 High
- cisco prime service catalogCisco Prime Service Catalog Cross-Site Scripting Vulnerability4.8 Medium
- cisco wide area application services (waas), wide area application services +1 moreCisco Wide Area Application Services Software HTTPS Proxy Authentication Bypass Vulnerability4.0 Medium
- cisco integrated management controller, unified computing system (management software), unified computing system +2 moreCisco Integrated Management Controller Information Disclosure Vulnerability5.3 Medium
- cisco integrated management controller, unified computing system (management software), unified computing system +2 moreCisco Integrated Management Controller Cross-Site Request Forgery Vulnerability4.6 Medium
- cisco rv130w wireless-n multifunction vpn router firmware, rv110w firmware, rv130w firmware +1 more +3 moreCisco RV110W, RV130W, and RV215W Routers Management Interface Denial of Service Vulnerability8.6 High
- cisco digital network architecture center (dna center), digital network architecture center +1 moreCisco DNA Center Authentication Bypass Vulnerability9.3 Critical
- cisco staros, asr 5000 series software +1 moreCisco StarOS Denial of Service Vulnerability8.6 High
- cisco integrated management controller, unified computing system (management software), unified computing system +2 moreCisco Integrated Management Controller Information Disclosure Vulnerability6.5 Medium
- cisco integrated management controller, unified computing system (management software), unified computing system +2 moreCisco Integrated Management Controller Denial of Service Vulnerability5.5 Medium
- cisco integrated management controller, unified computing system (management software), unified computing system +2 moreCisco Integrated Management Controller Arbitrary File Write Vulnerability5.3 Medium
- cisco integrated management controller, unified computing system (management software), unified computing system +2 moreCisco Integrated Management Controller Denial of Service Vulnerability5.5 Medium
- Show moreLoading…