CVEs

408,092 total · page 5781 of 8,162

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2016-9969	Libwebp libwebp	Hig	0.49	7.5	0.01	May 23, 2019	In libwebp 0.5.1, there is a double free bug in libwebpmux.
CVE-2016-8901	B2evolution B2evolution	Cri	0.57	9.8	0.02	May 23, 2019	b2evolution 6.7.6 suffer from an Object Injection vulnerability in /htsrv/call_plugin.php.
CVE-2019-7125	Adobe Inc. Acrobat	Hig	0.58	8.8	0.14	May 23, 2019	Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7113	Adobe Inc. Acrobat	Cri	0.64	9.8	0.06	May 23, 2019	Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7112	Adobe Inc. Acrobat	Cri	0.64	9.8	0.05	May 23, 2019	Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7108	Adobe Inc. Flash Player Desktop Runtime	Hig	0.49	7.5	0.03	May 23, 2019	Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVE-2019-7103	Adobe Inc. Shockwave Player	Cri	0.64	9.8	0.05	May 23, 2019	Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7102	Adobe Inc. Shockwave Player	Cri	0.64	9.8	0.04	May 23, 2019	Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7101	Adobe Inc. Shockwave Player	Cri	0.64	9.8	0.04	May 23, 2019	Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7100	Adobe Inc. Shockwave Player	Cri	0.64	9.8	0.05	May 23, 2019	Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7099	Adobe Inc. Shockwave Player	Cri	0.64	9.8	0.05	May 23, 2019	Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7098	Adobe Inc. Shockwave Player	Cri	0.64	9.8	0.05	May 23, 2019	Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7096	Adobe Inc. Flash Player Desktop Runtime	Cri	0.64	9.8	0.06	May 23, 2019	Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7088	Adobe Inc. Acrobat	Cri	0.64	9.8	0.06	May 23, 2019	Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7138	Adobe Inc. Bridge	Med	0.43	6.5	0.04	May 23, 2019	Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2019-7137	Adobe Inc. Bridge	Med	0.43	6.5	0.05	May 23, 2019	Adobe Bridge CC versions 9.0.2 have a memory corruption vulnerability. Successful exploitation could lead to information disclosure.
CVE-2019-7136	Adobe Inc. Bridge	Med	0.43	6.5	0.04	May 23, 2019	Adobe Bridge CC versions 9.0.2 have an use after free vulnerability. Successful exploitation could lead to information disclosure.
CVE-2019-7135	Adobe Inc. Bridge	Med	0.43	6.5	0.04	May 23, 2019	Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2019-7134	Adobe Inc. Bridge	Med	0.43	6.5	0.04	May 23, 2019	Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2019-7133	Adobe Inc. Bridge	Med	0.43	6.5	0.04	May 23, 2019	Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2019-7132	Adobe Inc. Bridge	Hig	0.58	8.8	0.06	May 23, 2019	Adobe Bridge CC versions 9.0.2 have an out-of-bounds write vulnerability. Successful exploitation could lead to remote code execution.
CVE-2019-7130	Adobe Inc. Bridge	Cri	0.64	9.8	0.06	May 23, 2019	Adobe Bridge CC versions 9.0.2 have a heap overflow vulnerability. Successful exploitation could lead to remote code execution.
CVE-2019-7107	Adobe Inc. Indesign	Cri	0.66	9.8	0.29	May 23, 2019	Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability. Successful exploitation could lead to arbitrary code execution. Fixed in versions 13.1.1 and 14.0.2.
CVE-2019-7106	Adobe Inc. XD	Cri	0.64	9.8	0.06	May 23, 2019	Adobe XD versions 16.0 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7105	Adobe Inc. XD	Cri	0.64	9.8	0.06	May 23, 2019	Adobe XD versions 16.0 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7104	Adobe Inc. Shockwave Player	Cri	0.64	9.8	0.05	May 23, 2019	Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7097	Adobe Inc. Dreamweaver	Hig	0.49	7.5	0.04	May 23, 2019	Adobe Dreamweaver versions 19.0 and earlier have an insecure protocol implementation vulnerability. Successful exploitation could lead to sensitive data disclosure if smb request is subject to a relay attack.
CVE-2019-12301	Percona Percona Server	Cri	0.64	9.8	0.02	May 23, 2019	The Percona Server 5.6.44-85.0-1 packages for Debian and Ubuntu suffered an issue where the server would reset the root password to a blank value upon an upgrade. This was fixed in 5.6.44-85.0-2.
CVE-2017-13668	OX Software GmbH OX App Suite	Med	0.35	5.4	0.01	May 23, 2019	OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
CVE-2017-11740	Zoho ManageEngine Application Control Plus	Hig	0.57	8.8	0.03	May 23, 2019	In Zoho ManageEngine Application Manager 13.1 Build 13100, the administrative user has the ability to upload files/binaries that can be executed upon the occurrence of an alarm. An attacker can abuse this functionality by uploading a malicious script that can be executed on the…
CVE-2017-11739	Zoho ManageEngine Application Control Plus	Med	0.40	6.1	0.03	May 23, 2019	In Zoho ManageEngine Application Manager 13.1 Build 13100, an authenticated user, with administrative privileges, has the ability to add a widget on any dashboard. This widget can be a "Utility Widget" with a "Custom HTML or Text" field. Once this widget is created, it will be…
CVE-2017-11738	Zoho ManageEngine ITOM	Hig	0.53	8.1	0.04	May 23, 2019	In Zoho ManageEngine Application Manager prior to 14.6 Build 14660, the 'haid' parameter of the '/auditLogAction.do' module is vulnerable to a Time-based Blind SQL Injection attack.
CVE-2017-11561	Zohocorp Manageengine Opmanager	Med	0.42	6.5	0.02	May 23, 2019	An issue was discovered in ZOHO ManageEngine OpManager 12.2. An authenticated user can upload any file they want to share in the "Group Chat" or "Alarm" section. This functionality can be abused by a malicious user by uploading a web shell.
CVE-2019-12300	Buildbot Buildbot	Cri	0.64	9.8	0.02	May 23, 2019	Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a user. If an attacker has a token allowing them to read the user details of a victim, they can login as the victim.
CVE-2019-12272	Openwrt Luci	Cri	0.64	9.8	0.07	May 23, 2019	In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and admin/status/realtime/wireless_status of the web application are affected by a command injection vulnerability.
CVE-2017-5213	Open-Xchange Ox App Suite	Med	0.40	6.1	0.01	May 23, 2019	Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS).
CVE-2017-5212	Open-Xchange Ox App Suite	Cri	0.64	9.8	0.01	May 23, 2019	Open-Xchange GmbH OX App Suite 7.8.3 is affected by: Incorrect Access Control.
CVE-2017-5211	Open-Xchange Ox App Suite	Hig	0.49	7.5	0.01	May 23, 2019	Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing.
CVE-2017-5210	Open-Xchange Ox App Suite	Cri	0.64	9.8	0.01	May 23, 2019	Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Information Exposure.
CVE-2017-17061	OX Software GmbH OX App Suite	Med	0.35	5.4	0.01	May 23, 2019	OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
CVE-2017-17060	OX Software GmbH OX App Suite	Cri	0.64	9.8	0.01	May 23, 2019	OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions.
CVE-2017-15652	Artifex Ghostscript	Med	0.36	5.5	0.01	May 23, 2019	Artifex Ghostscript 9.22 is affected by: Obtain Information. The impact is: obtain sensitive information. The component is: affected source code file, affected function, affected executable, affected libga (imagemagick used that). The attack vector is: Someone must open a…
CVE-2017-15030	Open-Xchange Ox App Suite	Med	0.40	6.1	0.01	May 23, 2019	Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
CVE-2017-15029	Open-Xchange Ox App Suite	Med	0.28	4.3	0.01	May 23, 2019	Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF.
CVE-2019-9949	Westerndigital Mirror Gen2	Hig	0.57	8.8	0.03	May 23, 2019	Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution (as root, starting from a low-privilege user session) vulnerability. The cgi-bin/webfile_mgr.cgi file allows…
CVE-2019-4078	IBM Websphere Mq	Hig	0.51	7.8	0.00	May 23, 2019	IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local non privileged user to execute code as an administrator due to incorrect permissions set on MQ installation directories. IBM X-Force ID: 157190.
CVE-2019-4039	IBM Websphere Mq	Med	0.36	5.5	0.00	May 23, 2019	IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local attacker to cause a denial of service within the error log reporting system. IBM X-Force ID: 156163.
CVE-2019-12298	Leanify Leanify	Med	0.36	5.5	0.01	May 23, 2019	Leanify 0.4.3 allows remote attackers to trigger an out-of-bounds write (1024 bytes) via a modified input file.
CVE-2019-12297	Motorola CX2	Cri	0.64	9.8	0.02	May 23, 2019	An issue was discovered in scopd on Motorola routers CX2 1.01 and M2 1.01. There is a Use of an Externally Controlled Format String, reachable via TCP port 8010 or UDP port 8080.
CVE-2019-12042	Pandasecurity Panda Antivirus	Cri	0.64	9.8	0.04	May 23, 2019	Insecure permissions of the section object Global\PandaDevicesAgentSharedMemory and the event Global\PandaDevicesAgentSharedMemoryChange in Panda products before 18.07.03 allow attackers to queue an event (as an encrypted JSON string) to the system service AgentSvc.exe, which…

CVE-2016-9969HigMay 23, 2019
Libwebp
libwebp
risk 0.49cvss 7.5epss 0.01
In libwebp 0.5.1, there is a double free bug in libwebpmux.
CVE-2016-8901CriMay 23, 2019
B2evolution
B2evolution
risk 0.57cvss 9.8epss 0.02
b2evolution 6.7.6 suffer from an Object Injection vulnerability in /htsrv/call_plugin.php.
CVE-2019-7125HigMay 23, 2019
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.14
Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7113CriMay 23, 2019
Adobe Inc.
Acrobat
risk 0.64cvss 9.8epss 0.06
Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7112CriMay 23, 2019
Adobe Inc.
Acrobat
risk 0.64cvss 9.8epss 0.05
Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7108HigMay 23, 2019
Adobe Inc.
Flash Player Desktop Runtime
risk 0.49cvss 7.5epss 0.03
Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVE-2019-7103CriMay 23, 2019
Adobe Inc.
Shockwave Player
risk 0.64cvss 9.8epss 0.05
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7102CriMay 23, 2019
Adobe Inc.
Shockwave Player
risk 0.64cvss 9.8epss 0.04
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7101CriMay 23, 2019
Adobe Inc.
Shockwave Player
risk 0.64cvss 9.8epss 0.04
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7100CriMay 23, 2019
Adobe Inc.
Shockwave Player
risk 0.64cvss 9.8epss 0.05
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7099CriMay 23, 2019
Adobe Inc.
Shockwave Player
risk 0.64cvss 9.8epss 0.05
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7098CriMay 23, 2019
Adobe Inc.
Shockwave Player
risk 0.64cvss 9.8epss 0.05
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7096CriMay 23, 2019
Adobe Inc.
Flash Player Desktop Runtime
risk 0.64cvss 9.8epss 0.06
Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7088CriMay 23, 2019
Adobe Inc.
Acrobat
risk 0.64cvss 9.8epss 0.06
Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2019-7138MedMay 23, 2019
Adobe Inc.
Bridge
risk 0.43cvss 6.5epss 0.04
Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2019-7137MedMay 23, 2019
Adobe Inc.
Bridge
risk 0.43cvss 6.5epss 0.05
Adobe Bridge CC versions 9.0.2 have a memory corruption vulnerability. Successful exploitation could lead to information disclosure.
CVE-2019-7136MedMay 23, 2019
Adobe Inc.
Bridge
risk 0.43cvss 6.5epss 0.04
Adobe Bridge CC versions 9.0.2 have an use after free vulnerability. Successful exploitation could lead to information disclosure.
CVE-2019-7135MedMay 23, 2019
Adobe Inc.
Bridge
risk 0.43cvss 6.5epss 0.04
Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2019-7134MedMay 23, 2019
Adobe Inc.
Bridge
risk 0.43cvss 6.5epss 0.04
Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2019-7133MedMay 23, 2019
Adobe Inc.
Bridge
risk 0.43cvss 6.5epss 0.04
Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2019-7132HigMay 23, 2019
Adobe Inc.
Bridge
risk 0.58cvss 8.8epss 0.06
Adobe Bridge CC versions 9.0.2 have an out-of-bounds write vulnerability. Successful exploitation could lead to remote code execution.
CVE-2019-7130CriMay 23, 2019
Adobe Inc.
Bridge
risk 0.64cvss 9.8epss 0.06
Adobe Bridge CC versions 9.0.2 have a heap overflow vulnerability. Successful exploitation could lead to remote code execution.
CVE-2019-7107CriMay 23, 2019
Adobe Inc.
Indesign
risk 0.66cvss 9.8epss 0.29
Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability. Successful exploitation could lead to arbitrary code execution. Fixed in versions 13.1.1 and 14.0.2.
CVE-2019-7106CriMay 23, 2019
Adobe Inc.
XD
risk 0.64cvss 9.8epss 0.06
Adobe XD versions 16.0 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7105CriMay 23, 2019
Adobe Inc.
XD
risk 0.64cvss 9.8epss 0.06
Adobe XD versions 16.0 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7104CriMay 23, 2019
Adobe Inc.
Shockwave Player
risk 0.64cvss 9.8epss 0.05
Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7097HigMay 23, 2019
Adobe Inc.
Dreamweaver
risk 0.49cvss 7.5epss 0.04
Adobe Dreamweaver versions 19.0 and earlier have an insecure protocol implementation vulnerability. Successful exploitation could lead to sensitive data disclosure if smb request is subject to a relay attack.
CVE-2019-12301CriMay 23, 2019
Percona
Percona Server
risk 0.64cvss 9.8epss 0.02
The Percona Server 5.6.44-85.0-1 packages for Debian and Ubuntu suffered an issue where the server would reset the root password to a blank value upon an upgrade. This was fixed in 5.6.44-85.0-2.
CVE-2017-13668MedMay 23, 2019
OX Software GmbH
OX App Suite
risk 0.35cvss 5.4epss 0.01
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
CVE-2017-11740HigMay 23, 2019
Zoho
ManageEngine Application Control Plus
risk 0.57cvss 8.8epss 0.03
In Zoho ManageEngine Application Manager 13.1 Build 13100, the administrative user has the ability to upload files/binaries that can be executed upon the occurrence of an alarm. An attacker can abuse this functionality by uploading a malicious script that can be executed on the…
CVE-2017-11739MedMay 23, 2019
Zoho
ManageEngine Application Control Plus
risk 0.40cvss 6.1epss 0.03
In Zoho ManageEngine Application Manager 13.1 Build 13100, an authenticated user, with administrative privileges, has the ability to add a widget on any dashboard. This widget can be a "Utility Widget" with a "Custom HTML or Text" field. Once this widget is created, it will be…
CVE-2017-11738HigMay 23, 2019
Zoho
ManageEngine ITOM
risk 0.53cvss 8.1epss 0.04
In Zoho ManageEngine Application Manager prior to 14.6 Build 14660, the 'haid' parameter of the '/auditLogAction.do' module is vulnerable to a Time-based Blind SQL Injection attack.
CVE-2017-11561MedMay 23, 2019
Zohocorp
Manageengine Opmanager
risk 0.42cvss 6.5epss 0.02
An issue was discovered in ZOHO ManageEngine OpManager 12.2. An authenticated user can upload any file they want to share in the "Group Chat" or "Alarm" section. This functionality can be abused by a malicious user by uploading a web shell.
CVE-2019-12300CriMay 23, 2019
Buildbot
Buildbot
risk 0.64cvss 9.8epss 0.02
Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a user. If an attacker has a token allowing them to read the user details of a victim, they can login as the victim.
CVE-2019-12272CriMay 23, 2019
Openwrt
Luci
risk 0.64cvss 9.8epss 0.07
In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and admin/status/realtime/wireless_status of the web application are affected by a command injection vulnerability.
CVE-2017-5213MedMay 23, 2019
Open-Xchange
Ox App Suite
risk 0.40cvss 6.1epss 0.01
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS).
CVE-2017-5212CriMay 23, 2019
Open-Xchange
Ox App Suite
risk 0.64cvss 9.8epss 0.01
Open-Xchange GmbH OX App Suite 7.8.3 is affected by: Incorrect Access Control.
CVE-2017-5211HigMay 23, 2019
Open-Xchange
Ox App Suite
risk 0.49cvss 7.5epss 0.01
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing.
CVE-2017-5210CriMay 23, 2019
Open-Xchange
Ox App Suite
risk 0.64cvss 9.8epss 0.01
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Information Exposure.
CVE-2017-17061MedMay 23, 2019
OX Software GmbH
OX App Suite
risk 0.35cvss 5.4epss 0.01
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
CVE-2017-17060CriMay 23, 2019
OX Software GmbH
OX App Suite
risk 0.64cvss 9.8epss 0.01
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions.
CVE-2017-15652MedMay 23, 2019
Artifex
Ghostscript
risk 0.36cvss 5.5epss 0.01
Artifex Ghostscript 9.22 is affected by: Obtain Information. The impact is: obtain sensitive information. The component is: affected source code file, affected function, affected executable, affected libga (imagemagick used that). The attack vector is: Someone must open a…
CVE-2017-15030MedMay 23, 2019
Open-Xchange
Ox App Suite
risk 0.40cvss 6.1epss 0.01
Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
CVE-2017-15029MedMay 23, 2019
Open-Xchange
Ox App Suite
risk 0.28cvss 4.3epss 0.01
Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF.
CVE-2019-9949HigMay 23, 2019
Westerndigital
Mirror Gen2
risk 0.57cvss 8.8epss 0.03
Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution (as root, starting from a low-privilege user session) vulnerability. The cgi-bin/webfile_mgr.cgi file allows…
CVE-2019-4078HigMay 23, 2019
IBM
Websphere Mq
risk 0.51cvss 7.8epss 0.00
IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local non privileged user to execute code as an administrator due to incorrect permissions set on MQ installation directories. IBM X-Force ID: 157190.
CVE-2019-4039MedMay 23, 2019
IBM
Websphere Mq
risk 0.36cvss 5.5epss 0.00
IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local attacker to cause a denial of service within the error log reporting system. IBM X-Force ID: 156163.
CVE-2019-12298MedMay 23, 2019
Leanify
Leanify
risk 0.36cvss 5.5epss 0.01
Leanify 0.4.3 allows remote attackers to trigger an out-of-bounds write (1024 bytes) via a modified input file.
CVE-2019-12297CriMay 23, 2019
Motorola
CX2
risk 0.64cvss 9.8epss 0.02
An issue was discovered in scopd on Motorola routers CX2 1.01 and M2 1.01. There is a Use of an Externally Controlled Format String, reachable via TCP port 8010 or UDP port 8080.
CVE-2019-12042CriMay 23, 2019
Pandasecurity
Panda Antivirus
risk 0.64cvss 9.8epss 0.04
Insecure permissions of the section object Global\PandaDevicesAgentSharedMemory and the event Global\PandaDevicesAgentSharedMemoryChange in Panda products before 18.07.03 allow attackers to queue an event (as an encrypted JSON string) to the system service AgentSvc.exe, which…