CVEs published April 12, 2019
25 CVEs were published on April 12, 2019: 1 critical, 0 high.
- Published
- 25
- Critical
- 1
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 23
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Mozilla Firefox
- 6
- intelliants/subrion
- 1
- Moxa IKS, EDS
- 1
- NVIDIA Jetson Tegra TX2
- 1
- NVIDIA Jetson TX2
- 1
- Palo Alto Networks Expedition Migration Tool
- 1
- Red Hat candlepin
- 1
- XEROX AltaLink B8045/B8055/B8065/B8075/B8090 · XEROX Alt… +4
- 1
- Zephyr getaddrinfo
- 1
Critical 1
Medium, low and unrated 24
- CVE-2017-18366Subrion CMS 4.1.5 has CSRF in blog/delete/.intelliants/subrion
- CVE-2019-3891It was discovered that a world-readable log file belonging to Candlepin component of Red Hat Satellite 6.4 leaked the credentials of the CanRed Hat candlepin
- CVE-2019-6526Moxa IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A seMoxa IKS, EDS
- CVE-2017-7777Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function.Mozilla Firefox
- CVE-2017-7776Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.Mozilla Firefox
- CVE-2017-7774Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.Mozilla Firefox
- CVE-2017-7773Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.Mozilla Firefox
- CVE-2017-7771Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.Mozilla Firefox
- CVE-2019-11222gf_bin128_parse in utils/os_divers.c in GPAC 0.7.1 has a buffer overflow issue for the crypt feature when encountering a crafted_drm_file.xm
- CVE-2019-11221GPAC 0.7.1 has a buffer overflow issue in gf_import_message() in media_import.c.
- CVE-2018-16259There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-settings large_feed_limit.
- CVE-2018-16258There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-import custom_type.
- CVE-2018-16257There are multiple XSS vulnerabilities in WP All Import plugin 3.4.9 for WordPress via action=template.
- CVE-2017-7772Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.Mozilla Firefox
- CVE-2018-16256There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via Add Filtering Options(Add Rule).
- CVE-2018-16255There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=evaluate.
- CVE-2018-16254There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=options.
- CVE-2018-13137The Events Manager plugin 5.9.4 for WordPress has XSS via the dbem_event_reapproved_email_body parameter to the wp-admin/edit.php?post_type=
- CVE-2019-1574Cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition Migration tool 1.1.12 and earlier may allow an authenticated attacPalo Alto Networks Expedition Migration Tool
- CVE-2018-6269NVIDIA Jetson TX2 contains a vulnerability in the kernel driver where input/output control (IOCTL) handling for user mode requests could creNVIDIA Jetson Tegra TX2
- CVE-2018-6239NVIDIA Jetson TX2 contains a vulnerability by means of speculative execution where local and unprivileged code may access the contents of caNVIDIA Jetson TX2
- CVE-2017-14199A buffer overflow has been found in the Zephyr Project's getaddrinfo() implementation in 1.9.0 and 1.10.0.Zephyr getaddrinfo
- CVE-2019-11213In Pulse Secure Pulse Desktop Client and Network Connect, an attacker could access session tokens to replay and spoof sessions, and as a res
- CVE-2019-11196An authentication bypass vulnerability in all versions of ValuePLUS Integrated University Management System (IUMS) allows unauthenticated, r