CVEs published in June 2019
1,318 vulnerabilities, 192 critical, 9 exploited.
- livezillaLiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service (memory consumption) in...5.9 Medium
- livezillaLiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in server.php via the p_ext_rse...9.8 Critical
- phoenixcontact automationworx software suiteAn issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86,...8.8 High
GraphicsMagickopenSUSESecurity update for GraphicsMagickNo score- analogic poste.ioThe Roundcube component of Analogic Poste.io 2.1.6 uses .htaccess to protect the logs/ folder,...4.3 Medium
- simdjson project simdjsonOut of bounds read in simd-json7.5 High
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 morearch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug...7.0 High
- qemuThe QMP guest_exec command in QEMU 4.0.0 and earlier is prone to OS command injection, which...9.8 Critical
- qemuThe QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection,...9.8 Critical
- curl, netapp oncommand insight, oncommand unified manager +9 more +11 moreA non-privileged user or program can put code and a config file in a known non-privileged path ...7.8 High
- libexpat project libexpat, canonical ubuntu linux, debian linux +9 more +11 moreIn libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of...7.5 High
- toaruos project toaruosapps/gsudo.c in gsudo in ToaruOS through 1.10.9 has a buffer overflow allowing local privilege...7.8 High
- bluestacks app playerBlueStacks App Player 2, 3, and 4 before 4.90 allows DNS Rebinding for attacks on exposed IPC...7.1 High
- shopwareShopware Cross-site Scripting Vulnerability7.4 High
- powerdns authoritative, debian pdns, opensuse backports +1 more +3 moreA Vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.9, 4.0.8...3.5 Low
- powerdns authoritative, debian pdns, opensuse leap +2 moreA vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.10, 4.0.8...3.5 Low
- netflix dial reference, dial reference source code repo (https://github.com/netflix/dial-reference) +1 moreDenial of Service (DOS) in Dial Reference Source Code Used before June 18th, 2019.7.5 High
- dotnetblogengine blogengine.netBlogEngine.NET 3.3.7.0 and earlier allows XML External Entity Blind Injection, related to...7.5 High
- dotnetblogengine blogengine.netBlogEngine.NET 3.3.7 and earlier allows XXE via an apml file to syndication.axd.7.5 High
- blogengine blogengine.netBlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution via the...8.8 High
- dotnetblogengine blogengine.netBlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution because...8.8 High
- akamai cloudtestAkamai CloudTest before 58.30 allows remote code execution.9.8 Critical
- londontrustmedia private internet accessA vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client 1.0.2 (build...7.8 High
- ultimatemember ultimate memberAn arbitrary password reset issue was discovered in the Ultimate Member plugin 2.39 for WordPress...8.8 High
- apache geodeArgument Injection in Apache Geode server6.5 Medium
- bobronix jeditorThe Bobronix JEditor editor before 3.0.6 for Jira allows an attacker to add a URL/Link (to an...8.8 High
- cloudera data science workbenchAn issue was discovered in Cloudera Data Science Workbench (CDSW) 1.2.x through 1.4.0....5.3 Medium
- stopzilla antimalwareAn issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a...5.5 Medium
- stopzilla antimalwareAn issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a...5.5 Medium
- stopzilla antimalwareAn issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a...5.5 Medium
- stopzilla antimalwareAn issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an...5.5 Medium
- stopzilla antimalwareAn issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a...5.5 Medium
- stopzilla antimalwareAn issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an...5.5 Medium
- stopzilla antimalwareAn issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an...5.5 Medium
- stopzilla antimalwareAn issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a...5.5 Medium
- stopzilla antimalwareAn issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a...5.5 Medium
- glot glot-wwwglot-code-runner RCE9.8 Critical
- libvirt, redhat enterprise linux, enterprise linux desktop +6 more +8 moreThe virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x...8.8 High
- chronoscanSQL injection vulnerability in ChronoScan version 1.5.4.3 and earlier allows an unauthenticated...9.8 Critical
wiresharkSUSESecurity update for wiresharkNo scorewiresharkSUSESecurity update for wiresharkNo score- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability8.8 High
graphicsmagickMageiaUpdated graphicsmagick packages fix security vulnerabilitiesNo score- freebsdIn FreeBSD 12.0-STABLE before r349197 and 12.0-RELEASE before 12.0-RELEASE-p6, a bug in the non...7.5 High
- fasterxml jackson-databind, debian linux, redhat enterprise linux +2 moreDeserialization of Untrusted Data in FasterXML jackson-databind5.9 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreInsufficient vetting of parameters passed with the Prompt:Open IPC message between child and...10.0 Critical
- apache tomcatImproper Locking in Apache Tomcat7.5 High
- dell supportassist for business pcs, supportassist for home pcs +1 moreDell SupportAssist for Business PCs version 2.0 and Dell SupportAssist for Home PCs version 2.2,...7.0 High
- cylan clever dog smart camera panorama dog-2w firmware, clever dog smart camera plus dog-2w-v4 firmware +1 moreOn Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the...9.8 Critical
- cylan clever dog smart camera panorama dog-2w firmware, clever dog smart camera plus dog-2w-v4 firmware +1 moreOn Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the local...5.5 Medium
- Show moreLoading…