CVEs published in June 2019
1,318 vulnerabilities, 192 critical, 9 exploited.
- teamwireGrouptime Teamwire Desktop Client 1.5.1 prior to 1.9.0 on Windows allows code injection via a...8.1 High
- teamwireThe admin interface of the Grouptime Teamwire Client 1.5.1 prior to 1.9.0 on-premises messenger...6.1 Medium
- odooIncorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo...5.3 Medium
- odooIncorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo...6.5 Medium
- odooIncorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and...9.8 Critical
- odooThe module-description renderer in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and...4.9 Medium
- odooImproper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and...6.5 Medium
- seeddmsA stored XSS vulnerability was found in SeedDMS 5.1.11 due to poorly escaping the search result...6.1 Medium
- loytec lgate-902 firmwareLOYTEC LGATE-902 6.3.2 devices allow Arbitrary file deletion.9.1 Critical
- loytec lgate-902 firmwareLOYTEC LGATE-902 6.3.2 devices allow Directory Traversal.7.5 High
- loytec lgate-902 firmwareLOYTEC LGATE-902 6.3.2 devices allow XSS.6.1 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin Console could allow a remote...5.3 Medium
- lexmark 6500 firmware, cx310 firmware, cx410 firmware +29 more +31 moreVarious Lexmark devices have a Buffer Overflow (issue 1 of 2).9.8 Critical
- lexmark cx421 firmware, cx522 firmware, cx62x firmware +31 more +33 moreVarious Lexmark devices have a Buffer Overflow (issue 2 of 2).9.8 Critical
- actiontec web6000q firmwareOn Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with...9.8 Critical
- google chromeUse after free in Blink in Google Chrome prior to 75.0.3770.90 allowed a remote attacker to...6.5 Medium
- icon loopchainIn Loopchain through 2.2.1.3, an attacker can escalate privileges from a low-privilege shell by...8.8 High
- istioIstio before 1.2.2 mishandles certain access tokens, leading to "Epoch 0 terminated with an error...7.5 High
- flightcrew project flightcrewAn issue was discovered in FlightCrew v0.9.2 and earlier. A NULL pointer dereference occurs in...5.5 Medium
- gnome glibThe keyfile settings backend in GNOME GLib (aka glib2.0) before 2.59.1 creates directories using...7.5 High
- [unknown] cloudforms, redhat cloudforms management engine +1 moreA stored cross-site scripting (XSS) vulnerability was found in the PDF export component of...6.5 Medium
- mcafee enterprise security manager, mcafee, llc mcafee enterprise security manager (esm) +1 moreDirectory Traversal vulnerability could lead to elevated privileges8.5 High
- mcafee enterprise security manager, mcafee, llc mcafee enterprise security manager (esm) +1 moreCommand Injection could allow authenticated users to execute arbitrary code8.0 High
- mcafee enterprise security manager, mcafee, llc mcafee enterprise security manager (esm) +1 moreCommand Injection could allow authenticated users to execute arbitrary code8.0 High
- mcafee enterprise security manager, mcafee, llc mcafee enterprise security manager (esm) +1 moreApplication protections bypass vulnerability could allow unauthenticated user to impersonate system users8.3 High
- google angularjs, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreAngularJS XSS via SCE resource URL sanitization bypass7.6 High
- google angularjsAngularJS improper sanitization in SVG '<image>' element4.8 Medium
- angularjs, angularjs angular.js, netapp active iq unified manager +2 moreAngularJS improper sanitization in '<source>' element4.8 Medium
- angularjs, angularjs angular.js, netapp active iq unified manager +2 moreAngularJS improper sanitization in 'srcset' attribute4.8 Medium
- angular, google angularjs, angularjs angular.js +2 moreCross-Site Scripting via JSONP7.5 High
- angular, angularjs, fedoraproject fedora +2 moreCross-Site Scripting via JSONP5.3 Medium
- angular, angularjs, fedoraproject fedora +2 moreCross-Site Scripting via JSONP5.3 Medium
- angular, angularjs, fedoraproject fedora +2 moreCross-Site Scripting via JSONP5.3 Medium
- angular, angularjs +1 moreCross-Site Scripting via JSONP4.2 Medium
- angularjsCross-Site Scripting via JSONP5.4 Medium
- angularjs, red hat angular:, redhat decision manager +1 more +3 moreCross-Site Scripting via JSONP7.1 High
- angularjsCross-Site Scripting via JSONP7.5 High
mobile-icon-resizernpmArbitrary Code Injection in mobile-icon-resizer6.5 Medium- actiontec web6000q firmwareThe Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 allows login with root level...9.8 Critical
- mcafee enterprise security manager, mcafee, llc mcafee enterprise security manager (esm) +1 morePrivilege escalation could allow authenticated user to gain access to a core system7.5 High
- actiontec web6000q firmwareAn issue was discovered in the Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22...8.8 High
- abb cp620-web firmware, cp620 firmware, cp630-web firmware +13 more +15 moreThe ABB HMI components implement hidden administrative accounts that are used during the...8.8 High
- abb pb610 panel builder 600 firmwareThe ABB IDAL HTTP server CGI interface contains a URL that allows an unauthenticated attacker to...8.8 High
- abb pb610 panel builder 600 firmwareIn the ABB IDAL FTP server, an authenticated attacker can traverse to arbitrary directories on...7.3 High
- abb pb610 panel builder 600 firmwareThe ABB IDAL HTTP server mishandles format strings in a username or cookie during the...8.8 High
- zyxel uag2100 firmware, uag4100 firmware, uag5100 firmware +6 more +8 moreA reflective Cross-site scripting (XSS) vulnerability in the free_time_failed.cgi CGI program in...6.1 Medium
- zyxel uag2100 firmware, uag4100 firmware, uag5100 firmware +11 more +13 moreMissing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices...9.1 Critical
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow a remote attacker...6.5 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1...5.4 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site...5.4 Medium
- Show moreLoading…