CVEs published April 5, 2019
22 CVEs were published on April 5, 2019: 0 critical, 0 high.
- Published
- 22
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 21
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Advantech WebAccess/SCADA
- 3
- bolt/bolt
- 1
- neutron
- 1
- Trend Micro Apex One, OfficeScan, Worry-Free Business Secur…
- 1
- Trend Micro InterScan Web Security Virtual Appliance
- 1
- trytond
- 1
Medium, low and unrated 22
- CVE-2019-9489A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free Business Security (versions 1Trend Micro Apex One, OfficeScan, Worry-Free Business Secur…
- CVE-2019-9490A vulnerability in Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 could allow an non-authorized user to disclose adminTrend Micro InterScan Web Security Virtual Appliance
- CVE-2019-10478An issue was discovered on Glory RBW-100 devices with firmware ISP-K05-02 7.0.0.
- CVE-2019-10479An issue was discovered on Glory RBW-100 devices with firmware ISP-K05-02 7.0.0.
- CVE-2019-6554Advantech WebAccess/SCADA, Versions 8.3.5 and prior.Advantech WebAccess/SCADA
- CVE-2019-6550Advantech WebAccess/SCADA, Versions 8.3.5 and prior.Advantech WebAccess/SCADA
- CVE-2019-6552Advantech WebAccess/SCADA, Versions 8.3.5 and prior.Advantech WebAccess/SCADA
- CVE-2019-10888A CSRF Issue that can add an admin user was discovered in UKcms v1.1.10 via admin.php/admin/role/add.html.
- CVE-2019-10887A reflected HTML injection vulnerability on Salicru SLC-20-cube3(5) devices running firmware version cs121-SNMP v4.54.82.130611 allows remot
- CVE-2019-10885An issue was discovered in Ivanti Workspace Control before 10.3.90.0.
- CVE-2019-10884Uniqkey Password Manager 1.14 contains a vulnerability because it fails to recognize the difference between domains and sub-domains.
- CVE-2018-20816An XSS combined with CSRF vulnerability discovered in SalesAgility SuiteCRM 7.x before 7.8.24 and 7.10.x before 7.10.11 leads to cookie stea
- CVE-2019-10875A URL spoofing vulnerability was found in all international versions of Xiaomi Mi browser 10.5.6-g (aka the MIUI native browser) and Mint Br
- CVE-2019-10874Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary codebolt/bolt
- CVE-2019-10879In Teeworlds 0.7.2, there is an integer overflow in CDataFileReader::Open() in engine/shared/datafile.cpp that can lead to a buffer overflow
- CVE-2019-10878In Teeworlds 0.7.2, there is a failed bounds check in CDataFileReader::GetData() and CDataFileReader::ReplaceData() and related functions in
- CVE-2019-10877In Teeworlds 0.7.2, there is an integer overflow in CMap::Load() in engine/shared/map.cpp that can lead to a buffer overflow, because multip
- CVE-2019-10876An issue was discovered in OpenStack Neutron 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3.neutron
- CVE-2019-10873An issue was discovered in Poppler 0.74.0.
- CVE-2019-10872An issue was discovered in Poppler 0.74.0.
- CVE-2019-10871An issue was discovered in Poppler 0.74.0.
- CVE-2019-10868In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6,trytond