Skip to content
OpenAdvisories

Archive

22 May 2019

Vulnerabilities first published on this day (UTC), newest first.

← April 2019 2019 / May /22 June 2019 →
  1. 117
  2. 226
  3. 359
  4. 4 
  5. 52
  6. 647
  7. 733
  8. 840
  9. 942
  10. 1033
  11. 11 
  12. 121
  13. 1380
  14. 1449
  15. 1572
  16. 16119
  17. 1793
  18. 18 
  19. 192
  20. 2030
  21. 2114
  22. 22166
  23. 23114
  24. 24146
  25. 25 
  26. 26 
  27. 274
  28. 2821
  29. 2951
  30. 3034
  31. 3142
All Critical High Medium Low Exploited only Public exploit

166 results · Feed

  • Unscored —
    CVE-2018-7803

    A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TriStation Emulator V1.…

  • Unscored —
    CVE-2018-7844 Public exploit

    A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum…

  • Unscored —
    CVE-2019-6808

    A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quan…

  • Unscored —
    CVE-2019-6807

    A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, …

  • Unscored —
    CVE-2019-6806

    A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum…

  • Unscored —
    CVE-2018-7857

    A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, …

  • Unscored —
    CVE-2018-7856

    A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, …

  • Unscored —
    CVE-2018-7855

    A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, a…

  • Unscored —
    CVE-2018-7201

    CSV Injection was discovered in ProjectSend before r1053, affecting victims who import the data into Microsoft Excel.

  • Unscored —
    CVE-2018-7854 Public exploit

    A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, a…

  • Unscored —
    CVE-2018-7853

    A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, …

  • High 7.5
    CVE-2018-7852 Public exploit

    A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, …

  • Unscored —
    CVE-2018-7845 Public exploit

    A CWE-125: Out-of-bounds Read vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, …

  • Unscored —
    CVE-2018-7850

    A CWE-807: Reliance on Untrusted Inputs in a Security Decision vulnerability exists in all versions of the Modicon M580…

  • Unscored —
    CVE-2018-7847

    A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quan…

  • Unscored —
    CVE-2018-7842 Public exploit EPSS 35%

    A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Mo…

  • Unscored —
    CVE-2018-7848 Public exploit

    A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum…

  • Unscored —
    CVE-2018-7843 Public exploit

    A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, …

  • Unscored —
    CVE-2018-7849 Public exploit

    A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum a…

  • Unscored —
    CVE-2018-7846 Public exploit EPSS 30%

    A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon…

  • Unscored —
    CVE-2018-7851

    CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware pr…

  • Unscored —
    CVE-2019-6816

    In Modicon Quantum all firmware versions, a CWE-94: Code Injection vulnerability could cause an unauthorized firmware m…

  • Unscored —
    CVE-2019-6815

    In Modicon Quantum all firmware versions, CWE-264: Permissions, Privileges, and Access Control vulnerabilities could ca…

  • Unscored —
    CVE-2018-7788

    A CWE-255 Credentials Management vulnerability exists in Modicon Quantum with firmware versions prior to V2.40. which c…

  • Unscored —
    CVE-2018-7834

    A CWE-79 Cross-Site Scripting vulnerability exists in all versions of the TSXETG100 allowing an attacker to send a spec…

  • Unscored —
    CVE-2019-6812

    A CWE-798 use of hardcoded credentials vulnerability exists in BMX-NOR-0200H with firmware versions prior to V1.7 IR 19…

  • Unscored —
    CVE-2017-5863

    Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.

  • High 7.5
    CVE-2019-6819

    A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could cause a possible Denia…

  • Unscored —
    CVE-2019-6821

    CWE-330: Use of Insufficiently Random Values vulnerability, which could cause the hijacking of the TCP connection when …

  • High 8.2
    CVE-2019-6820

    A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device…

  • Unscored —
    CVE-2019-6814 Public exploit EPSS 37%

    A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 w…

  • Unscored —
    CVE-2017-5864

    Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS).

  • Unscored —
    CVE-2018-7823

    A Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versi…

  • Unscored —
    CVE-2018-7822

    An Incorrect Default Permissions (CWE-276) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all …

  • High 7.5
    CVE-2018-7821

    An Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all vers…

  • Unscored —
    CVE-2018-7829

    An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camer…

  • Unscored —
    CVE-2018-7828

    A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanc…

  • Unscored —
    CVE-2017-5871 Scanner template

    Odoo Version <= 8.0-20160726 and Version 9 is affected by: CWE-601: Open redirection. The impact is: obtain sensitive i…

  • Unscored —
    CVE-2018-7827

    A Cross-Site Scripting (XSS) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ …

  • Unscored —
    CVE-2018-7826

    A Command Injection vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could all…