Archive
May 2019
Vulnerabilities first published in this month (UTC), newest first.
1,337 results · Feed
-
Unscored —
Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an out-of-b…
-
Unscored —
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation …
-
Unscored —
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation …
-
Unscored —
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation …
-
Unscored —
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation …
-
Unscored —
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation …
-
Unscored —
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation …
-
Unscored —
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation …
-
Unscored —
Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to informat…
-
Unscored —
Adobe XD versions 16.0 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary…
-
Unscored —
Adobe Dreamweaver versions 19.0 and earlier have an insecure protocol implementation vulnerability. Successful exploita…
-
Unscored —
Adobe XD versions 16.0 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary…
-
Unscored —CVE-2019-7107 EPSS 29%
Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability. Successful exploitation cou…
-
Unscored —
Adobe Bridge CC versions 9.0.2 have a heap overflow vulnerability. Successful exploitation could lead to remote code ex…
-
Unscored —
Adobe Bridge CC versions 9.0.2 have an out-of-bounds write vulnerability. Successful exploitation could lead to remote …
-
Unscored —
Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to informat…
-
Unscored —
An issue was discovered in ZOHO ManageEngine OpManager 12.2. An authenticated user can upload any file they want to sha…
-
Unscored —
Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to informat…
-
Unscored —
Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to informat…
-
Unscored —
Adobe Bridge CC versions 9.0.2 have an use after free vulnerability. Successful exploitation could lead to information …
-
Unscored —
In Zoho ManageEngine Application Manager prior to 14.6 Build 14660, the 'haid' parameter of the '/auditLogAction.do' mo…
-
Unscored —
In Zoho ManageEngine Application Manager 13.1 Build 13100, an authenticated user, with administrative privileges, has t…
-
Unscored —
Adobe Bridge CC versions 9.0.2 have a memory corruption vulnerability. Successful exploitation could lead to informatio…
-
Unscored —
In Zoho ManageEngine Application Manager 13.1 Build 13100, the administrative user has the ability to upload files/bina…
-
Unscored —
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
-
Unscored —
The Percona Server 5.6.44-85.0-1 packages for Debian and Ubuntu suffered an issue where the server would reset the root…
-
Unscored —
Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF.
-
Unscored —
Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
-
Unscored —
Artifex Ghostscript 9.22 is affected by: Obtain Information. The impact is: obtain sensitive information. The component…
-
Unscored —
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions.
-
Unscored —
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
-
Unscored —
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Information Exposure.
-
Unscored —
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing.
-
Unscored —
Open-Xchange GmbH OX App Suite 7.8.3 is affected by: Incorrect Access Control.
-
Unscored —
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS).
-
Critical 9.8
Improper Authentication in Buildbot
Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a user. If an attacker has a token allowing them to read the user details of a victim, they can login as the victim.
-
Unscored —CVE-2019-12272 Public exploit
In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and admin/status/realtime/wireless_s…
-
High 7.4
IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local non privileged user to execute c…
-
Medium 6.2
IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local attacker to cause a denial of se…
-
Unscored —
In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable to a symlink-exchange…