Skip to content
OpenAdvisories

Archive

1 May 2019

Vulnerabilities first published on this day (UTC), newest first.

← April 2019 2019 / May /1 June 2019 →
  1. 117
  2. 226
  3. 359
  4. 4 
  5. 52
  6. 647
  7. 733
  8. 840
  9. 942
  10. 1033
  11. 11 
  12. 121
  13. 1380
  14. 1449
  15. 1572
  16. 16119
  17. 1793
  18. 18 
  19. 192
  20. 2030
  21. 2114
  22. 22166
  23. 23114
  24. 24146
  25. 25 
  26. 26 
  27. 274
  28. 2821
  29. 2951
  30. 3034
  31. 3142
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Medium 6.1
    CVE-2018-8035

    Cross-site Scripting in Apache UIMA

    This vulnerability relates to the user's browser processing of DUCC webpage input data.The javascript comprising Apache UIMA DUCC (<= 2.2.2) which runs in the user's browser does not sufficiently filter user supplied inputs, which may result in unintended exe…

    Apache Apache UIMA DUCC uimaj org.apache.uima:uima-ducc-web Ubuntu Maven
  • High 7.5
    CVE-2019-0227 Public exploit EPSS 92%

    Server Side Request Forgery in Apache Axis

    A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from so…

    Apache Apache Axis 1.4 axis org.apache.axis:axis Debian Ubuntu Maven
  • Unscored —
    CVE-2019-10952

    Rockwell Automation CompactLogix 5370 Uncontrolled Resource Consumption

    An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer overflow vulnerability. A cold restart is required for recovering CompactLogix 5370 L1, L2, and L3 Con…

    Rockwell Automation Compact GuardLogix 5370 controllers CompactLogix 5370 L1 controllers CompactLogix 5370 L3 controllers ICS / OT
  • Unscored —
    CVE-2019-10954

    Rockwell Automation CompactLogix 5370 Stack-based Buffer Overflow

    An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state (MNRF) in CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact…

    Rockwell Automation Compact GuardLogix 5370 controllers CompactLogix 5370 L1 controllers CompactLogix 5370 L3 controllers ICS / OT
  • Unscored —
    CVE-2019-6562

    In Philips Tasy EMR, Tasy EMR Versions 3.02.1744 and prior, the software incorrectly neutralizes user-controllable inpu…

    Philips Philips Tasy EMR
  • Unscored —
    CVE-2019-11641

    Anomali Agave (formerly Drupot) through 1.0.0 fails to avoid fingerprinting by including predictable data and minimal v…

  • Unscored —
    CVE-2019-11640

    An issue was discovered in GNU recutils 1.8. There is a heap-based buffer overflow in the function rec_fex_parse_str_si…

    recutils recutils Debian Ubuntu
  • Unscored —
    CVE-2019-11639

    An issue was discovered in GNU recutils 1.8. There is a stack-based buffer overflow in the function rec_type_check_enum…

    recutils recutils Debian Ubuntu
  • Unscored —
    CVE-2019-11638

    An issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function rec_field_name_equal_p…

    recutils recutils Debian Ubuntu
  • Unscored —
    CVE-2019-11637

    An issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function rec_rset_get_props at …

    recutils recutils Debian Ubuntu
  • Unscored —
    CVE-2019-11636

    Zcash 2.x allows an inexpensive approach to "fill all transactions of all blocks" and "prevent any real transaction fro…

  • Medium 5.4
    CVE-2018-1933

    IBM Planning Analytics 2.0 through 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embe…

    IBM Planning Analytics
  • Medium 5.9
    CVE-2018-1608

    IBM Rational Engineering Lifecycle Manager 6.0 through 6.0.6 uses weaker than expected cryptographic algorithms that co…

    IBM Rational Engineering Lifecycle Manager
  • Medium 5.4
    CVE-2019-4258

    IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 Standard Edition is vulnerable to cross-site scripting. This vulnerabil…

    IBM Sterling B2B Integrator
  • Unscored —
    CVE-2019-11633

    HoneyPress through 2016-09-27 can be fingerprinted by attackers because of the ingrained unique www.atxsec.com and ayyl…

  • Unscored —
    CVE-2019-11632

    In Octopus Deploy 2019.1.0 through 2019.3.1 and 2019.4.0 through 2019.4.5, an authenticated user with the VariableViewU…

  • High 8.2
    CVE-2019-11628

    An issue was discovered in QlikView Server before 11.20 SR19, 12.00 and 12.10 before 12.10 SR11, 12.20 before SR9, and …