Archive
June 2019
Vulnerabilities first published in this month (UTC), newest first.
1,303 results · Feed
-
Medium 4.4
IBM PureApplication System 2.2.3.0 through 2.2.5.3 stores potentially sensitive information in log files that could be …
-
Medium 6.3
IBM PureApplication System 2.2.3.0 through 2.2.5.3 is vulnerable to SQL injection. A remote attacker could send special…
-
High 8.8
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.
-
Medium 5.5
A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow servic…
-
Medium 5.4
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow cross-site request forgery.
-
High 8.8
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.
-
Medium 6.5
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP.
-
High 7.3
PlaintextPasswordEncoder authenticates encoded passwords that are null
Spring Security, versions 4.2.x up to 4.2.12, and older unsupported versions support plain text passwords using PlaintextPasswordEncoder. If an application using an affected version of Spring Security is leveraging PlaintextPasswordEncoder and a user has a nu…
-
Unscored —
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. …
-
Unscored —
A vulnerability was found in the Sonic Robo Blast 2 (SRB2) plugin (EP_Versions 9 to 11 inclusive) distributed with Doom…
-
Unscored —
FeHelper through 2019-06-19 allows arbitrary code execution during a JSON format operation, as demonstrated by the {"a"…
-
Unscored —
PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element.
-
Unscored —
Nessus versions 8.4.0 and earlier were found to contain a reflected XSS vulnerability due to improper validation of use…
-
Unscored —
Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure …
-
Unscored —CVE-2019-6329 Public exploit
HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of …
-
Unscored —
HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of …
-
Medium 5.1
IBM Security Access Manager 9.0.1 through 9.0.6 does not invalidate session tokens in a timely manner. The lack of prop…
-
Medium 6.8
IBM Security Access Manager 9.0.1 through 9.0.6 could allow a remote attacker to conduct phishing attacks, using an ope…
-
Medium 4.3
IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 reveals sensitive information from a stack trace that could be used in …
-
Medium 5.9
IBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic algorithms that could allow an …
-
Medium 5.3
IBM API Connect 5.0.0.0 through 5.0.8.6 could allow an unauthorized user to obtain sensitive information about the syst…
-
Medium 6.1
IBM Security Access Manager 9.0.1 through 9.0.6 is vulnerable to cross-site scripting. This vulnerability allows users …
-
Medium 5.4
IBM Security Access Manager 9.0.1 through 9.0.6 does not prove that a user's identity is correct which can lead to the …
-
Medium 4.3
IBM API Connect 5.0.0.0 through 5.0.8.6 is vulnerable to cross-site request forgery which could allow an attacker to ex…
-
Medium 5.3
IBM API Connect 2018.1 through 2018.4.1.5 could allow an attacker to obtain sensitive information from a specially craf…
-
Medium 5.3
IBM API Connect 2018.1 through 2018.4.1.5 could disclose sensitive information to an unauthorized user that could aid i…
-
Medium 5.9
IBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic algorithms that could allow an …
-
Low 3.7
IBM Security Access Manager 9.0.1 through 9.0.6 does not validate, or incorrectly validates, a certificate which could …
-
High 7.5
IBM Security Access Manager 9.0.1 through 9.0.6 is affected by a security vulnerability that could allow authenticated …
-
High 7.7
IBM Security Access Manager 9.0.1 through 9.0.6 could reveal highly sensitive in specialized conditions to a local user…
-
Unscored —
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php Subject.
-
Unscored —
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action.
-
Unscored —
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header.
-
Unscored —
LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function.
-
Unscored —
LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in functions.internal.build.inc.php via the parameter p_…
-
Unscored —
arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processe…
-
Unscored —CVE-2019-12949 Public exploit
In pfSense 2.4.4-p2 and 2.4.4-p3, if it is possible to trick an authenticated administrator into clicking on a button o…
-
Unscored —
In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in FoFiType1C::convertToType0 in fofi/FoFiType1C.cc w…
-
Unscored —
In Xpdf 4.01.01, a buffer over-read could be triggered in FoFiType1C::convertToType1 in fofi/FoFiType1C.cc when the ind…
-
Unscored —
An issue was discovered in Mongoose before 6.15. The parse_mqtt() function in mg_mqtt.c has a critical heap-based buffe…