CVEs

408,092 total · page 5785 of 8,162

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-7771	Adobe Inc. Acrobat	Hig	0.49	7.5	0.04	May 22, 2019	Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…
CVE-2019-7770	Adobe Inc. Acrobat	Hig	0.49	7.5	0.04	May 22, 2019	Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…
CVE-2019-7769	Adobe Inc. Acrobat	Hig	0.49	7.5	0.04	May 22, 2019	Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…
CVE-2019-7768	Adobe Inc. Acrobat	Cri	0.64	9.8	0.05	May 22, 2019	Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…
CVE-2019-7767	Adobe Inc. Acrobat	Cri	0.64	9.8	0.07	May 22, 2019	Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…
CVE-2019-7766	Adobe Inc. Acrobat	Cri	0.64	9.8	0.07	May 22, 2019	Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…
CVE-2019-7765	Adobe Inc. Acrobat	Cri	0.64	9.8	0.07	May 22, 2019	Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…
CVE-2019-7764	Adobe Inc. Acrobat	Cri	0.64	9.8	0.07	May 22, 2019	Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could…
CVE-2019-7763	Adobe Inc. Acrobat	Cri	0.64	9.8	0.07	May 22, 2019	Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…
CVE-2019-7762	Adobe Inc. Acrobat	Cri	0.64	9.8	0.07	May 22, 2019	Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…
CVE-2019-7761	Adobe Inc. Acrobat	Hig	0.58	8.8	0.10	May 22, 2019	Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…
CVE-2019-7760	Adobe Inc. Acrobat	Hig	0.58	8.8	0.10	May 22, 2019	Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…
CVE-2019-7759	Adobe Inc. Acrobat	Hig	0.58	8.8	0.10	May 22, 2019	Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…
CVE-2019-7758	Adobe Inc. Acrobat	Med	0.43	6.5	0.09	May 22, 2019	Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 and earlier version, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful…
CVE-2019-7145	Adobe Inc. Acrobat	Med	0.43	6.5	0.09	May 22, 2019	Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…
CVE-2019-7144	Adobe Inc. Acrobat	Med	0.43	6.5	0.09	May 22, 2019	Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…
CVE-2019-7143	Adobe Inc. Acrobat	Hig	0.58	8.8	0.09	May 22, 2019	Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…
CVE-2019-7142	Adobe Inc. Acrobat	Hig	0.49	7.5	0.04	May 22, 2019	Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…
CVE-2019-7141	Adobe Inc. Acrobat	Med	0.43	6.5	0.09	May 22, 2019	Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…
CVE-2016-10750	Hazelcast Hazelcast	Hig	0.46	8.1	0.04	May 22, 2019	In Hazelcast before 3.11, the cluster join procedure is vulnerable to remote code execution via Java deserialization. If an attacker can reach a listening Hazelcast instance with a crafted JoinRequest, and vulnerable classes exist in the classpath, the attacker can run arbitrary…
CVE-2019-7140	Adobe Inc. Acrobat	Med	0.43	6.5	0.09	May 22, 2019	Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…
CVE-2019-9892	OTRS Otrs	Med	0.42	6.5	0.01	May 22, 2019	An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0.17, and 7.x through 7.0.6. An attacker who is logged into OTRS as an agent user with appropriate permissions may try to import carefully crafted Report Statistics XML that will…
CVE-2019-10067	OTRS Otrs	Med	0.35	5.4	0.01	May 22, 2019	An issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6 and Community Edition 5.0.x through 5.0.35 and 6.0.x through 6.0.17. An attacker who is logged into OTRS as an agent user with appropriate permissions may manipulate the URL to cause execution of…
CVE-2019-10066	OTRS Otrs	Med	0.35	5.4	0.01	May 22, 2019	An issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6, Community Edition 6.0.x through 6.0.17, and OTRSAppointmentCalendar 5.0.x through 5.0.12. An attacker who is logged into OTRS as an agent with appropriate permissions may create a carefully crafted…
CVE-2019-6513	—	Med	0.35	5.4	0.01	May 21, 2019	An issue was discovered in WSO2 API Manager 2.6.0. It is possible for a logged-in user to upload, as API documentation, any type of file by changing the extension to an allowed one.
CVE-2019-12270	Opentext Brava! Enterprise	Hig	0.48	7.4	0.02	May 21, 2019	OpenText Brava! Enterprise and Brava! Server 7.5 through 16.4 configure excessive permissions by default on Windows. During installation, a displaylistcache file share is created on the Windows server with full read and write permissions for the Everyone group at both the NTFS…
CVE-2019-12269	Enigmail Enigmail	Hig	0.49	7.5	0.01	May 21, 2019	Enigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can cause the product to display a "correctly signed" message indication, but display different unauthenticated text.
CVE-2019-12252	Zohocorp Manageengine Servicedesk Plus	Med	0.46	6.5	0.08	May 21, 2019	In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can view an arbitrary post by appending its number to the SDNotify.do?notifyModule=Solution&mode=E-Mail&notifyTo=SOLFORWARD&id= substring.
CVE-2019-12190	Centos Web Panel Centos Web Panel	Med	0.36	5.4	0.05	May 21, 2019	XSS was discovered in CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.747 via the testacc/fileManager2.php fm_current_dir or filename parameter.
CVE-2019-12189	Zohocorp Manageengine Servicedesk Plus	Med	0.43	6.1	0.06	May 21, 2019	An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN.do search field.
CVE-2019-12253	My Little Forum Mylittleforum	Med	0.42	6.5	0.01	May 21, 2019	my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting.
CVE-2019-12251	Ucms Ucms	Hig	0.57	8.8	0.01	May 21, 2019	sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadmin_ceditpost cvalue parameter.
CVE-2019-12250	Identityserver Identityserver4	Med	0.40	6.1	0.01	May 21, 2019	IdentityServer IdentityServer4 through 2.4 has stored XSS via the httpContext to the host/Extensions/RequestLoggerMiddleware.cs LogForErrorContext method, which can be triggered by viewing a log. NOTE: the software maintainer disputes that this is a vulnerability because the…
CVE-2019-10320	Jenkins Project Credentials	Med	0.21	4.3	0.01	May 21, 2019	Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and obtain the certificate content of files containing a PKCS#12 certificate.
CVE-2019-10319	Jenkins Project PAM Authentication Plugin	Med	0.28	4.3	0.01	May 21, 2019	A missing permission check in Jenkins PAM Authentication Plugin 1.5 and earlier, except 1.4.1 in PamSecurityRealm.DescriptorImpl#doTest allowed users with Overall/Read permission to obtain limited information about the file /etc/shadow and the user Jenkins is running as.
CVE-2019-11816	Opnsense Opnsense	Hig	0.47	7.2	0.03	May 20, 2019	Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via a specially crafted request.
CVE-2019-10078	Apache JSPWiki	Med	0.40	6.1	0.05	May 20, 2019	A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking. Initial reporting indicated ReferredPagesPlugin, but further analysis showed that multiple plugins were vulnerable.
CVE-2019-10077	Apache JSPWiki	Med	0.40	6.1	0.05	May 20, 2019	A carefully crafted InterWiki link could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking.
CVE-2019-10076	Apache JSPWiki	Med	0.33	6.1	0.05	May 20, 2019	A carefully crafted malicious attachment could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking.
CVE-2019-12241	WordPress Carts Guru	Cri	0.64	9.8	0.02	May 20, 2019	The Carts Guru plugin 1.4.5 for WordPress allows Insecure Deserialization via a cartsguru-source cookie to classes/wc-cartsguru-event-handler.php.
CVE-2019-12240	WordPress Virim	Cri	0.64	9.8	0.02	May 20, 2019	The Virim plugin 0.4 for WordPress allows Insecure Deserialization via s_values, t_values, or c_values in graph.php.
CVE-2019-12239	WordPress Wp Booking System	Hig	0.47	7.2	0.01	May 20, 2019	The WP Booking System plugin 1.5.1 for WordPress has no CSRF protection, which allows attackers to reach certain SQL injection issues that require administrative access.
CVE-2019-8352	BMC Software Patrol Agent	Cri	0.67	9.8	0.06	May 20, 2019	By default, BMC PATROL Agent through 11.3.01 uses a static encryption key for encrypting/decrypting user credentials sent over the network to managed PATROL Agent services. If an attacker were able to capture this network traffic, they could decrypt these credentials and use…
CVE-2019-4293	IBM Storwize Unified V7000	Med	0.35	5.3	0.02	May 20, 2019	IBM Storwize V7000 Unified (2073) 1.6 configuration may allow an attacker to reveal the server version in default installation, which could be used in further attacks against the system. IBM X-Force ID: 160699.
CVE-2019-4058	IBM Bigfix Platform	Med	0.42	6.5	0.01	May 20, 2019	IBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into exposing interface elements and information normally restricted to administrators. IBM X-Force ID: 156570.
CVE-2019-4011	IBM Bigfix Platform	Med	0.35	5.4	0.01	May 20, 2019	IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force…
CVE-2018-2005	IBM Bigfix Platform	Low	0.21	3.3	0.00	May 20, 2019	IBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that could be read by a local attacker with elevated permissions. IBM X-Force ID: 155007
CVE-2019-12222	Sdl Simple Directmedia Layer	Med	0.42	6.5	0.02	May 20, 2019	An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9. There is an out-of-bounds read in the function SDL_InvalidateMap at video/SDL_pixels.c.
CVE-2019-12221	Sdl Simple Directmedia Layer	Med	0.42	6.5	0.02	May 20, 2019	An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a SEGV in the SDL function SDL_free_REAL at stdlib/SDL_malloc.c.
CVE-2019-12220	Sdl Simple Directmedia Layer	Med	0.42	6.5	0.02	May 20, 2019	An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an out-of-bounds read in the SDL function SDL_FreePalette_REAL at video/SDL_pixels.c.

CVE-2019-7771HigMay 22, 2019
Adobe Inc.
Acrobat
risk 0.49cvss 7.5epss 0.04
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…
CVE-2019-7770HigMay 22, 2019
Adobe Inc.
Acrobat
risk 0.49cvss 7.5epss 0.04
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…
CVE-2019-7769HigMay 22, 2019
Adobe Inc.
Acrobat
risk 0.49cvss 7.5epss 0.04
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…
CVE-2019-7768CriMay 22, 2019
Adobe Inc.
Acrobat
risk 0.64cvss 9.8epss 0.05
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…
CVE-2019-7767CriMay 22, 2019
Adobe Inc.
Acrobat
risk 0.64cvss 9.8epss 0.07
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…
CVE-2019-7766CriMay 22, 2019
Adobe Inc.
Acrobat
risk 0.64cvss 9.8epss 0.07
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…
CVE-2019-7765CriMay 22, 2019
Adobe Inc.
Acrobat
risk 0.64cvss 9.8epss 0.07
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…
CVE-2019-7764CriMay 22, 2019
Adobe Inc.
Acrobat
risk 0.64cvss 9.8epss 0.07
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could…
CVE-2019-7763CriMay 22, 2019
Adobe Inc.
Acrobat
risk 0.64cvss 9.8epss 0.07
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…
CVE-2019-7762CriMay 22, 2019
Adobe Inc.
Acrobat
risk 0.64cvss 9.8epss 0.07
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…
CVE-2019-7761HigMay 22, 2019
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.10
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…
CVE-2019-7760HigMay 22, 2019
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.10
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…
CVE-2019-7759HigMay 22, 2019
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.10
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to…
CVE-2019-7758MedMay 22, 2019
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.09
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 and earlier version, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful…
CVE-2019-7145MedMay 22, 2019
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.09
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…
CVE-2019-7144MedMay 22, 2019
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.09
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…
CVE-2019-7143HigMay 22, 2019
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.09
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…
CVE-2019-7142HigMay 22, 2019
Adobe Inc.
Acrobat
risk 0.49cvss 7.5epss 0.04
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…
CVE-2019-7141MedMay 22, 2019
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.09
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…
CVE-2016-10750HigMay 22, 2019
Hazelcast
Hazelcast
risk 0.46cvss 8.1epss 0.04
In Hazelcast before 3.11, the cluster join procedure is vulnerable to remote code execution via Java deserialization. If an attacker can reach a listening Hazelcast instance with a crafted JoinRequest, and vulnerable classes exist in the classpath, the attacker can run arbitrary…
CVE-2019-7140MedMay 22, 2019
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.09
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could…
CVE-2019-9892MedMay 22, 2019
OTRS
Otrs
risk 0.42cvss 6.5epss 0.01
An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0.17, and 7.x through 7.0.6. An attacker who is logged into OTRS as an agent user with appropriate permissions may try to import carefully crafted Report Statistics XML that will…
CVE-2019-10067MedMay 22, 2019
OTRS
Otrs
risk 0.35cvss 5.4epss 0.01
An issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6 and Community Edition 5.0.x through 5.0.35 and 6.0.x through 6.0.17. An attacker who is logged into OTRS as an agent user with appropriate permissions may manipulate the URL to cause execution of…
CVE-2019-10066MedMay 22, 2019
OTRS
Otrs
risk 0.35cvss 5.4epss 0.01
An issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6, Community Edition 6.0.x through 6.0.17, and OTRSAppointmentCalendar 5.0.x through 5.0.12. An attacker who is logged into OTRS as an agent with appropriate permissions may create a carefully crafted…
CVE-2019-6513MedMay 21, 2019
risk 0.35cvss 5.4epss 0.01
An issue was discovered in WSO2 API Manager 2.6.0. It is possible for a logged-in user to upload, as API documentation, any type of file by changing the extension to an allowed one.
CVE-2019-12270HigMay 21, 2019
Opentext
Brava! Enterprise
risk 0.48cvss 7.4epss 0.02
OpenText Brava! Enterprise and Brava! Server 7.5 through 16.4 configure excessive permissions by default on Windows. During installation, a displaylistcache file share is created on the Windows server with full read and write permissions for the Everyone group at both the NTFS…
CVE-2019-12269HigMay 21, 2019
Enigmail
Enigmail
risk 0.49cvss 7.5epss 0.01
Enigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can cause the product to display a "correctly signed" message indication, but display different unauthenticated text.
CVE-2019-12252MedMay 21, 2019
Zohocorp
Manageengine Servicedesk Plus
risk 0.46cvss 6.5epss 0.08
In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can view an arbitrary post by appending its number to the SDNotify.do?notifyModule=Solution&mode=E-Mail&notifyTo=SOLFORWARD&id= substring.
CVE-2019-12190MedMay 21, 2019
Centos Web Panel
Centos Web Panel
risk 0.36cvss 5.4epss 0.05
XSS was discovered in CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.747 via the testacc/fileManager2.php fm_current_dir or filename parameter.
CVE-2019-12189MedMay 21, 2019
Zohocorp
Manageengine Servicedesk Plus
risk 0.43cvss 6.1epss 0.06
An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN.do search field.
CVE-2019-12253MedMay 21, 2019
My Little Forum
Mylittleforum
risk 0.42cvss 6.5epss 0.01
my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting.
CVE-2019-12251HigMay 21, 2019
Ucms
Ucms
risk 0.57cvss 8.8epss 0.01
sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadmin_ceditpost cvalue parameter.
CVE-2019-12250MedMay 21, 2019
Identityserver
Identityserver4
risk 0.40cvss 6.1epss 0.01
IdentityServer IdentityServer4 through 2.4 has stored XSS via the httpContext to the host/Extensions/RequestLoggerMiddleware.cs LogForErrorContext method, which can be triggered by viewing a log. NOTE: the software maintainer disputes that this is a vulnerability because the…
CVE-2019-10320MedMay 21, 2019
Jenkins Project
Credentials
risk 0.21cvss 4.3epss 0.01
Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and obtain the certificate content of files containing a PKCS#12 certificate.
CVE-2019-10319MedMay 21, 2019
Jenkins Project
PAM Authentication Plugin
risk 0.28cvss 4.3epss 0.01
A missing permission check in Jenkins PAM Authentication Plugin 1.5 and earlier, except 1.4.1 in PamSecurityRealm.DescriptorImpl#doTest allowed users with Overall/Read permission to obtain limited information about the file /etc/shadow and the user Jenkins is running as.
CVE-2019-11816HigMay 20, 2019
Opnsense
Opnsense
risk 0.47cvss 7.2epss 0.03
Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via a specially crafted request.
CVE-2019-10078MedMay 20, 2019
Apache
JSPWiki
risk 0.40cvss 6.1epss 0.05
A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking. Initial reporting indicated ReferredPagesPlugin, but further analysis showed that multiple plugins were vulnerable.
CVE-2019-10077MedMay 20, 2019
Apache
JSPWiki
risk 0.40cvss 6.1epss 0.05
A carefully crafted InterWiki link could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking.
CVE-2019-10076MedMay 20, 2019
Apache
JSPWiki
risk 0.33cvss 6.1epss 0.05
A carefully crafted malicious attachment could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking.
CVE-2019-12241CriMay 20, 2019
WordPress
Carts Guru
risk 0.64cvss 9.8epss 0.02
The Carts Guru plugin 1.4.5 for WordPress allows Insecure Deserialization via a cartsguru-source cookie to classes/wc-cartsguru-event-handler.php.
CVE-2019-12240CriMay 20, 2019
WordPress
Virim
risk 0.64cvss 9.8epss 0.02
The Virim plugin 0.4 for WordPress allows Insecure Deserialization via s_values, t_values, or c_values in graph.php.
CVE-2019-12239HigMay 20, 2019
WordPress
Wp Booking System
risk 0.47cvss 7.2epss 0.01
The WP Booking System plugin 1.5.1 for WordPress has no CSRF protection, which allows attackers to reach certain SQL injection issues that require administrative access.
CVE-2019-8352CriMay 20, 2019
BMC Software
Patrol Agent
risk 0.67cvss 9.8epss 0.06
By default, BMC PATROL Agent through 11.3.01 uses a static encryption key for encrypting/decrypting user credentials sent over the network to managed PATROL Agent services. If an attacker were able to capture this network traffic, they could decrypt these credentials and use…
CVE-2019-4293MedMay 20, 2019
IBM
Storwize Unified V7000
risk 0.35cvss 5.3epss 0.02
IBM Storwize V7000 Unified (2073) 1.6 configuration may allow an attacker to reveal the server version in default installation, which could be used in further attacks against the system. IBM X-Force ID: 160699.
CVE-2019-4058MedMay 20, 2019
IBM
Bigfix Platform
risk 0.42cvss 6.5epss 0.01
IBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into exposing interface elements and information normally restricted to administrators. IBM X-Force ID: 156570.
CVE-2019-4011MedMay 20, 2019
IBM
Bigfix Platform
risk 0.35cvss 5.4epss 0.01
IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force…
CVE-2018-2005LowMay 20, 2019
IBM
Bigfix Platform
risk 0.21cvss 3.3epss 0.00
IBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that could be read by a local attacker with elevated permissions. IBM X-Force ID: 155007
CVE-2019-12222MedMay 20, 2019
Sdl
Simple Directmedia Layer
risk 0.42cvss 6.5epss 0.02
An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9. There is an out-of-bounds read in the function SDL_InvalidateMap at video/SDL_pixels.c.
CVE-2019-12221MedMay 20, 2019
Sdl
Simple Directmedia Layer
risk 0.42cvss 6.5epss 0.02
An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a SEGV in the SDL function SDL_free_REAL at stdlib/SDL_malloc.c.
CVE-2019-12220MedMay 20, 2019
Sdl
Simple Directmedia Layer
risk 0.42cvss 6.5epss 0.02
An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an out-of-bounds read in the SDL function SDL_FreePalette_REAL at video/SDL_pixels.c.