CVEs published in June 2019
1,318 vulnerabilities, 192 critical, 9 exploited.
- tenable nessus, tenable, inc. tenable nessus +1 moreNessus versions 8.4.0 and earlier were found to contain a reflected XSS vulnerability due to...6.1 Medium
- amd secure encrypted virtualization firmware, opensuse leap +1 moreSecure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor...5.3 Medium
- hp support assistantHP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows...7.8 High
- hp support assistantHP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows...7.8 High
- ibm api connectIBM API Connect 5.0.0.0 through 5.0.8.6 could allow an unauthorized user to obtain sensitive...5.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 reveals sensitive information from a stack trace...4.3 Medium
- ibm security access managerIBM Security Access Manager 9.0.1 through 9.0.6 does not prove that a user's identity is correct...5.4 Medium
- ibm security access managerIBM Security Access Manager 9.0.1 through 9.0.6 is vulnerable to cross-site scripting. This...6.1 Medium
- ibm security access managerIBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic...5.9 Medium
- ibm security access managerIBM Security Access Manager 9.0.1 through 9.0.6 could allow a remote attacker to conduct phishing...6.8 Medium
- ibm security access managerIBM Security Access Manager 9.0.1 through 9.0.6 does not invalidate session tokens in a timely...5.1 Medium
- ibm security access managerIBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic...5.9 Medium
- ibm security access managerIBM Security Access Manager 9.0.1 through 9.0.6 does not validate, or incorrectly validates, a...3.7 Low
- ibm security access managerIBM Security Access Manager 9.0.1 through 9.0.6 could reveal highly sensitive in specialized...7.7 High
- ibm security access managerIBM Security Access Manager 9.0.1 through 9.0.6 is affected by a security vulnerability that...7.5 High
- ibm api connectIBM API Connect 2018.1 through 2018.4.1.5 could disclose sensitive information to an unauthorized...5.3 Medium
- ibm api connectIBM API Connect 2018.1 through 2018.4.1.5 could allow an attacker to obtain sensitive information...5.3 Medium
- ibm api connectIBM API Connect 5.0.0.0 through 5.0.8.6 is vulnerable to cross-site request forgery which could...4.3 Medium
- livezillaLiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php Subject.6.1 Medium
- livezillaLiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action.6.1 Medium
- livezillaLiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language...6.1 Medium
- livezillaLiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function.8.8 High
- livezillaLiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in functions.internal.build.inc...9.8 Critical
policykit-desktop-privilegesUbuntupolicykit-desktop-privileges updateNo score- netgate pfsenseIn pfSense 2.4.4-p2 and 2.4.4-p3, if it is possible to trick an authenticated administrator into...6.1 Medium
GraphicsMagickSUSESecurity update for GraphicsMagickNo scorepython3.4Debianpython3.4 - regression updateNo score- rdesktopRDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilities in its code,...7.5 High
- glyphandcog xpdfreaderIn Xpdf 4.01.01, a heap-based buffer over-read could be triggered in FoFiType1C::convertToType0...5.5 Medium
- fedoraproject fedora, glyphandcog xpdfreader +1 moreIn Xpdf 4.01.01, a buffer over-read could be triggered in FoFiType1C::convertToType1 in fofi...7.8 High
- cesanta mongooseAn issue was discovered in Mongoose before 6.15. The parse_mqtt() function in mg_mqtt.c has a...9.8 Critical
- polycom better together over ethernet connector, unified communications software +1 moreVVX products using UCS software version 5.9.2 and earlier with Better Together over Ethernet...6.5 Medium
- makerbot replicator 5th generation firmwareThe MakerBot Replicator 5G printer runs an Apache HTTP Server with directory indexing enabled....7.5 High
- miniorange saml sp single sign onIn the miniOrange SAML SP Single Sign On plugin before 4.8.73 for WordPress, the SAML Login...6.1 Medium
- abb pb610 panel builder 600 firmwareThe ABB IDAL FTP server is vulnerable to a buffer overflow when a long string is sent by an...5.7 Medium
- bcnquark quarking password managerBCN Quark Quarking Password Manager 3.1.84 suffers from a clickjacking vulnerability caused by...4.3 Medium
- asus hivivo, vivobaby +1 moreThe ASUS HiVivo aspplication before 5.6.27 for ASUS Watch has Missing SSL Certificate Validation.9.1 Critical
- quadbase espressreport esStored XSS within Quadbase EspressReport ES (ERES) v7.0 update 7 allows remote attackers to...5.4 Medium
- ultimatemember ultimate memberAn issue was discovered in the Ultimate Member plugin 2.39 for WordPress. It allows unauthorized...4.3 Medium
- quadbase espressreport enterprise serverCSRF within the admin panel in Quadbase EspressReport ES (ERES) v7.0 update 7 allows remote...8.8 High
- digitaldruid hoteldruidHoteldruid before v2.3.1 allows remote authenticated users to cause a denial of service (invoice...6.5 Medium
- abb board support package un31, cp620-web firmware, cp620 firmware +5 more +7 moreThe ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its...8.3 High
- abb pb610 panel builder 600 firmwareThe ABB IDAL FTP server mishandles format strings in a username during the authentication process...8.8 High
- abb pb610 panel builder 600 firmwareThe ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is sent in a...8.8 High
- citrix appdnaCitrix AppDNA before 7 1906.1.0.472 has Incorrect Access Control.9.8 Critical
- hostingcontroller hc10The HC.Server service in Hosting Controller HC10 10.14 allows an Invalid Pointer Write DoS.7.5 High
- netiq self service password reset, micro focus netiq self service password reset. +1 moreAn information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all...7.5 High
- micro focus netiq self service password reset., microfocus netiq self service password reset +1 moreA potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions...6.1 Medium
- phoenixcontact automationworx software suiteAn issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86,...8.8 High
- phoenixcontact automationworx software suiteAn issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86,...8.8 High
- Show moreLoading…