CVEs

408,117 total · page 5777 of 8,163

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-10967	Emerson Ovation OCR400 Controller	Hig	0.57	8.8	0.04	May 28, 2019	In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long file name from the LIST command to the FTP service, which may cause the service to overwrite buffers,…
CVE-2019-10965	Emerson Ovation OCR400 Controller	Hig	0.57	8.8	0.04	May 28, 2019	In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a heap-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long command to the FTP service, which may cause memory corruption that halts the controller or leads to…
CVE-2019-0221	Apache Tomcat	Med	0.40	6.1	0.59	May 28, 2019	The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escaping and is, therefore, vulnerable to XSS. SSI is disabled by default. The printenv command is intended for debugging and is unlikely to be…
CVE-2018-20008	Iball Baton iB-WRB302N20122017	Med	0.44	6.8	0.00	May 28, 2019	iBall Baton iB-WRB302N20122017 devices have improper access control over the UART interface, allowing physical attackers to discover Wi-Fi credentials (plain text) and the web-console password (base64) via the debugging console.
CVE-2019-7394	Ca Risk Authentication	Hig	0.57	8.8	0.03	May 28, 2019	A privilege escalation vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 3.1.x allows an authenticated attacker to gain additional privileges in…
CVE-2019-7393	Ca Risk Authentication	Med	0.28	4.3	0.02	May 28, 2019	A UI redress vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 3.1.x may allow a remote attacker to gain sensitive information in some cases.
CVE-2019-5440	Revive Adserver Adserver	Hig	0.53	8.1	0.02	May 28, 2019	Use of cryptographically weak PRNG in the password recovery token generation of Revive Adserver < v4.2.1 causes a potential authentication bypass attack if an attacker exploits the password recovery functionality. In lib/OA/Dal/PasswordRecovery.php, the function…
CVE-2019-5436	Curl Libcurl	Hig	0.48	7.8	0.50	May 28, 2019	A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
CVE-2019-5435	Curl Curl	Low	0.18	3.7	0.06	May 28, 2019	An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.
CVE-2019-0188	Apache Camel	Hig	0.43	7.5	0.10	May 28, 2019	Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed.
CVE-2018-13375	Fortinet Fortianalyzer	Med	0.40	6.1	0.01	May 28, 2019	An Improper Neutralization of Script-Related HTML Tags in Fortinet FortiAnalyzer 5.6.0 and below and FortiManager 5.6.0 and below allows an attacker to send DHCP request containing malicious scripts in the HOSTNAME parameter. The malicious script code is executed while viewing…
CVE-2018-17198	Apache Roller	Cri	0.64	9.8	0.04	May 28, 2019	Server-side Request Forgery (SSRF) and File Enumeration vulnerability in Apache Roller 5.2.1, 5.2.0 and earlier unsupported versions relies on Java SAX Parser to implement its XML-RPC interface and by default that parser supports external entities in XML DOCTYPE, which opens…
CVE-2019-12395	Webbukkit Dynmap	Med	0.35	5.3	0.02	May 28, 2019	In Webbukkit Dynmap 3.0-beta-3 or below, due to a missing login check in servlet/MapStorageHandler.java, an attacker can see a map image without login even if victim enables login-required in setting.
CVE-2019-12383	Torproject Tor Browser	Med	0.28	4.3	0.02	May 28, 2019	Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting.
CVE-2019-12382	Linux Kernel	Med	0.36	5.5	0.00	May 28, 2019	An issue was discovered in drm_load_edid_firmware in drivers/gpu/drm/drm_edid_load.c in the Linux kernel through 5.1.5. There is an unchecked kstrdup of fwstr, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: The…
CVE-2019-12381	Linux Kernel	Med	0.36	5.5	0.00	May 28, 2019	An issue was discovered in ip_ra_control in net/ipv4/ip_sockglue.c in the Linux kernel through 5.1.5. There is an unchecked kmalloc of new_ra, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: this is disputed because…
CVE-2019-12380	Linux Kernel	Med	0.36	5.5	0.00	May 28, 2019	DISPUTED An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. phys_efi_set_virtual_address_map in arch/x86/platform/efi/efi.c and efi_call_phys_prolog in arch/x86/platform/efi/efi_64.c mishandle memory allocation failures. NOTE: This id is disputed…
CVE-2019-12379	Linux Kernel	Med	0.36	5.5	0.00	May 28, 2019	An issue was discovered in con_insert_unipair in drivers/tty/vt/consolemap.c in the Linux kernel through 5.1.5. There is a memory leak in a certain case of an ENOMEM outcome of kmalloc. NOTE: This id is disputed as not being an issue
CVE-2019-12378	Linux Kernel	Med	0.36	5.5	0.00	May 28, 2019	An issue was discovered in ip6_ra_control in net/ipv6/ipv6_sockglue.c in the Linux kernel through 5.1.5. There is an unchecked kmalloc of new_ra, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: This has been disputed…
CVE-2019-12372	Petraware Ptransformer Adc	Hig	0.54	7.8	0.01	May 28, 2019	Petraware pTransformer ADC before 2.1.7.22827 allows SQL Injection via the User ID parameter to the login form.
CVE-2019-12362	Phome Empirecms	Med	0.40	6.1	0.01	May 27, 2019	EmpireCMS 7.5.0 has XSS via the HTTP Referer header to e/member/doaction.php.
CVE-2019-12361	Phome Empirecms	Med	0.40	6.1	0.00	May 27, 2019	EmpireCMS 7.5.0 has XSS via the from parameter to e/member/doaction.php, as demonstrated by a CSRF payload that changes the dynamic page template. The attacker can choose to resend the e/template/member/regsend.php registered activation mail page.
CVE-2019-12360	Xpdf Xpdf	Hig	0.46	7.1	0.01	May 27, 2019	A stack-based buffer over-read exists in FoFiTrueType::dumpString in fofi/FoFiTrueType.cc in Xpdf 4.01.01. It can, for example, be triggered by sending crafted TrueType data in a PDF document to the pdftops tool. It might allow an attacker to cause Denial of Service or leak…
CVE-2019-12345	WordPress Hostel	Med	0.40	6.1	0.01	May 27, 2019	XSS exists in the Kiboko Hostel plugin before 1.1.4 for WordPress.
CVE-2019-7095	Adobe Inc. Digital Editions	Cri	0.64	9.8	0.09	May 24, 2019	Adobe Digital Editions versions 4.5.10.185749 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7094	Adobe Inc. Photoshop	Cri	0.64	9.8	0.06	May 24, 2019	Adobe Photoshop CC 19.1.7 and earlier, and 20.0.2 and earlier have a heap corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7093	Adobe Inc. Creative Cloud	Hig	0.51	7.8	0.03	May 24, 2019	Creative Cloud Desktop Application (installer) versions 4.7.0.400 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.
CVE-2019-7092	Adobe Inc. Coldfusion	Med	0.40	6.1	0.02	May 24, 2019	ColdFusion versions Update 1 and earlier, Update 7 and earlier, and Update 15 and earlier have a cross site scripting vulnerability. Successful exploitation could lead to information disclosure .
CVE-2019-7091	Adobe Inc. Coldfusion	Cri	0.66	9.8	0.26	May 24, 2019	ColdFusion versions Update 1 and earlier, Update 7 and earlier, and Update 15 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7090	Google Flash Player for Google Chrome	Med	0.43	6.5	0.05	May 24, 2019	Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Player for Microsoft Edge and Internet Explorer 11 versions 32.0.0.114 and earlier have an out-of-bounds read vulnerability. Successful…
CVE-2019-7089	Adobe Inc. Acrobat	Hig	0.52	7.5	0.45	May 24, 2019	Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a data leakage (sensitive) vulnerability. Successful exploitation could lead to information disclosure.
CVE-2019-7087	Adobe Inc. Acrobat	Cri	0.64	9.8	0.04	May 24, 2019	Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7086	Adobe Inc. Acrobat	Cri	0.64	9.8	0.04	May 24, 2019	Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7085	Adobe Inc. Acrobat	Cri	0.64	9.8	0.06	May 24, 2019	Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7084	Adobe Inc. Acrobat	Cri	0.64	9.8	0.04	May 24, 2019	Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7083	Adobe Inc. Acrobat	Cri	0.64	9.8	0.04	May 24, 2019	Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7082	Adobe Inc. Acrobat	Cri	0.64	9.8	0.04	May 24, 2019	Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7081	Adobe Inc. Acrobat	Hig	0.49	7.5	0.04	May 24, 2019	Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2019-7080	Adobe Inc. Acrobat	Cri	0.64	9.8	0.05	May 24, 2019	Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a double free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7079	Adobe Inc. Acrobat	Hig	0.57	8.8	0.04	May 24, 2019	Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7078	Adobe Inc. Acrobat	Hig	0.58	8.8	0.04	May 24, 2019	Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7077	Adobe Inc. Acrobat	Hig	0.58	8.8	0.04	May 24, 2019	Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7076	Adobe Inc. Acrobat	Cri	0.64	9.8	0.04	May 24, 2019	Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7075	Adobe Inc. Acrobat	Med	0.43	6.5	0.04	May 24, 2019	Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7074	Adobe Inc. Acrobat	Med	0.42	6.5	0.03	May 24, 2019	Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2019-7073	Adobe Inc. Acrobat	Med	0.42	6.5	0.03	May 24, 2019	Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2019-7072	Adobe Inc. Acrobat	Hig	0.58	8.8	0.05	May 24, 2019	Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7071	Adobe Inc. Acrobat	Med	0.42	6.5	0.03	May 24, 2019	Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2019-7070	Adobe Inc. Acrobat	Hig	0.58	8.8	0.05	May 24, 2019	Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7069	Adobe Inc. Acrobat	Hig	0.58	8.8	0.05	May 24, 2019	Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .

CVE-2019-10967HigMay 28, 2019
Emerson
Ovation OCR400 Controller
risk 0.57cvss 8.8epss 0.04
In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long file name from the LIST command to the FTP service, which may cause the service to overwrite buffers,…
CVE-2019-10965HigMay 28, 2019
Emerson
Ovation OCR400 Controller
risk 0.57cvss 8.8epss 0.04
In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a heap-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long command to the FTP service, which may cause memory corruption that halts the controller or leads to…
CVE-2019-0221MedMay 28, 2019
Apache
Tomcat
risk 0.40cvss 6.1epss 0.59
The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escaping and is, therefore, vulnerable to XSS. SSI is disabled by default. The printenv command is intended for debugging and is unlikely to be…
CVE-2018-20008MedMay 28, 2019
Iball
Baton iB-WRB302N20122017
risk 0.44cvss 6.8epss 0.00
iBall Baton iB-WRB302N20122017 devices have improper access control over the UART interface, allowing physical attackers to discover Wi-Fi credentials (plain text) and the web-console password (base64) via the debugging console.
CVE-2019-7394HigMay 28, 2019
Ca
Risk Authentication
risk 0.57cvss 8.8epss 0.03
A privilege escalation vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 3.1.x allows an authenticated attacker to gain additional privileges in…
CVE-2019-7393MedMay 28, 2019
Ca
Risk Authentication
risk 0.28cvss 4.3epss 0.02
A UI redress vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 3.1.x may allow a remote attacker to gain sensitive information in some cases.
CVE-2019-5440HigMay 28, 2019
Revive Adserver
Adserver
risk 0.53cvss 8.1epss 0.02
Use of cryptographically weak PRNG in the password recovery token generation of Revive Adserver < v4.2.1 causes a potential authentication bypass attack if an attacker exploits the password recovery functionality. In lib/OA/Dal/PasswordRecovery.php, the function…
CVE-2019-5436HigMay 28, 2019
Curl
Libcurl
risk 0.48cvss 7.8epss 0.50
A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
CVE-2019-5435LowMay 28, 2019
Curl
Curl
risk 0.18cvss 3.7epss 0.06
An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.
CVE-2019-0188HigMay 28, 2019
Apache
Camel
risk 0.43cvss 7.5epss 0.10
Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed.
CVE-2018-13375MedMay 28, 2019
Fortinet
Fortianalyzer
risk 0.40cvss 6.1epss 0.01
An Improper Neutralization of Script-Related HTML Tags in Fortinet FortiAnalyzer 5.6.0 and below and FortiManager 5.6.0 and below allows an attacker to send DHCP request containing malicious scripts in the HOSTNAME parameter. The malicious script code is executed while viewing…
CVE-2018-17198CriMay 28, 2019
Apache
Roller
risk 0.64cvss 9.8epss 0.04
Server-side Request Forgery (SSRF) and File Enumeration vulnerability in Apache Roller 5.2.1, 5.2.0 and earlier unsupported versions relies on Java SAX Parser to implement its XML-RPC interface and by default that parser supports external entities in XML DOCTYPE, which opens…
CVE-2019-12395MedMay 28, 2019
Webbukkit
Dynmap
risk 0.35cvss 5.3epss 0.02
In Webbukkit Dynmap 3.0-beta-3 or below, due to a missing login check in servlet/MapStorageHandler.java, an attacker can see a map image without login even if victim enables login-required in setting.
CVE-2019-12383MedMay 28, 2019
Torproject
Tor Browser
risk 0.28cvss 4.3epss 0.02
Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting.
CVE-2019-12382MedMay 28, 2019
Linux
Kernel
risk 0.36cvss 5.5epss 0.00
An issue was discovered in drm_load_edid_firmware in drivers/gpu/drm/drm_edid_load.c in the Linux kernel through 5.1.5. There is an unchecked kstrdup of fwstr, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: The…
CVE-2019-12381MedMay 28, 2019
Linux
Kernel
risk 0.36cvss 5.5epss 0.00
An issue was discovered in ip_ra_control in net/ipv4/ip_sockglue.c in the Linux kernel through 5.1.5. There is an unchecked kmalloc of new_ra, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: this is disputed because…
CVE-2019-12380MedMay 28, 2019
Linux
Kernel
risk 0.36cvss 5.5epss 0.00
**DISPUTED** An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. phys_efi_set_virtual_address_map in arch/x86/platform/efi/efi.c and efi_call_phys_prolog in arch/x86/platform/efi/efi_64.c mishandle memory allocation failures. NOTE: This id is disputed…
CVE-2019-12379MedMay 28, 2019
Linux
Kernel
risk 0.36cvss 5.5epss 0.00
An issue was discovered in con_insert_unipair in drivers/tty/vt/consolemap.c in the Linux kernel through 5.1.5. There is a memory leak in a certain case of an ENOMEM outcome of kmalloc. NOTE: This id is disputed as not being an issue
CVE-2019-12378MedMay 28, 2019
Linux
Kernel
risk 0.36cvss 5.5epss 0.00
An issue was discovered in ip6_ra_control in net/ipv6/ipv6_sockglue.c in the Linux kernel through 5.1.5. There is an unchecked kmalloc of new_ra, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: This has been disputed…
CVE-2019-12372HigMay 28, 2019
Petraware
Ptransformer Adc
risk 0.54cvss 7.8epss 0.01
Petraware pTransformer ADC before 2.1.7.22827 allows SQL Injection via the User ID parameter to the login form.
CVE-2019-12362MedMay 27, 2019
Phome
Empirecms
risk 0.40cvss 6.1epss 0.01
EmpireCMS 7.5.0 has XSS via the HTTP Referer header to e/member/doaction.php.
CVE-2019-12361MedMay 27, 2019
Phome
Empirecms
risk 0.40cvss 6.1epss 0.00
EmpireCMS 7.5.0 has XSS via the from parameter to e/member/doaction.php, as demonstrated by a CSRF payload that changes the dynamic page template. The attacker can choose to resend the e/template/member/regsend.php registered activation mail page.
CVE-2019-12360HigMay 27, 2019
Xpdf
Xpdf
risk 0.46cvss 7.1epss 0.01
A stack-based buffer over-read exists in FoFiTrueType::dumpString in fofi/FoFiTrueType.cc in Xpdf 4.01.01. It can, for example, be triggered by sending crafted TrueType data in a PDF document to the pdftops tool. It might allow an attacker to cause Denial of Service or leak…
CVE-2019-12345MedMay 27, 2019
WordPress
Hostel
risk 0.40cvss 6.1epss 0.01
XSS exists in the Kiboko Hostel plugin before 1.1.4 for WordPress.
CVE-2019-7095CriMay 24, 2019
Adobe Inc.
Digital Editions
risk 0.64cvss 9.8epss 0.09
Adobe Digital Editions versions 4.5.10.185749 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7094CriMay 24, 2019
Adobe Inc.
Photoshop
risk 0.64cvss 9.8epss 0.06
Adobe Photoshop CC 19.1.7 and earlier, and 20.0.2 and earlier have a heap corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7093HigMay 24, 2019
Adobe Inc.
Creative Cloud
risk 0.51cvss 7.8epss 0.03
Creative Cloud Desktop Application (installer) versions 4.7.0.400 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.
CVE-2019-7092MedMay 24, 2019
Adobe Inc.
Coldfusion
risk 0.40cvss 6.1epss 0.02
ColdFusion versions Update 1 and earlier, Update 7 and earlier, and Update 15 and earlier have a cross site scripting vulnerability. Successful exploitation could lead to information disclosure .
CVE-2019-7091CriMay 24, 2019
Adobe Inc.
Coldfusion
risk 0.66cvss 9.8epss 0.26
ColdFusion versions Update 1 and earlier, Update 7 and earlier, and Update 15 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7090MedMay 24, 2019
Google
Flash Player for Google Chrome
risk 0.43cvss 6.5epss 0.05
Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Player for Microsoft Edge and Internet Explorer 11 versions 32.0.0.114 and earlier have an out-of-bounds read vulnerability. Successful…
CVE-2019-7089HigMay 24, 2019
Adobe Inc.
Acrobat
risk 0.52cvss 7.5epss 0.45
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a data leakage (sensitive) vulnerability. Successful exploitation could lead to information disclosure.
CVE-2019-7087CriMay 24, 2019
Adobe Inc.
Acrobat
risk 0.64cvss 9.8epss 0.04
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7086CriMay 24, 2019
Adobe Inc.
Acrobat
risk 0.64cvss 9.8epss 0.04
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7085CriMay 24, 2019
Adobe Inc.
Acrobat
risk 0.64cvss 9.8epss 0.06
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7084CriMay 24, 2019
Adobe Inc.
Acrobat
risk 0.64cvss 9.8epss 0.04
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7083CriMay 24, 2019
Adobe Inc.
Acrobat
risk 0.64cvss 9.8epss 0.04
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7082CriMay 24, 2019
Adobe Inc.
Acrobat
risk 0.64cvss 9.8epss 0.04
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7081HigMay 24, 2019
Adobe Inc.
Acrobat
risk 0.49cvss 7.5epss 0.04
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2019-7080CriMay 24, 2019
Adobe Inc.
Acrobat
risk 0.64cvss 9.8epss 0.05
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a double free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7079HigMay 24, 2019
Adobe Inc.
Acrobat
risk 0.57cvss 8.8epss 0.04
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7078HigMay 24, 2019
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.04
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7077HigMay 24, 2019
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.04
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7076CriMay 24, 2019
Adobe Inc.
Acrobat
risk 0.64cvss 9.8epss 0.04
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7075MedMay 24, 2019
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.04
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7074MedMay 24, 2019
Adobe Inc.
Acrobat
risk 0.42cvss 6.5epss 0.03
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2019-7073MedMay 24, 2019
Adobe Inc.
Acrobat
risk 0.42cvss 6.5epss 0.03
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2019-7072HigMay 24, 2019
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.05
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7071MedMay 24, 2019
Adobe Inc.
Acrobat
risk 0.42cvss 6.5epss 0.03
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2019-7070HigMay 24, 2019
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.05
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7069HigMay 24, 2019
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.05
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .