CVEs published April 20, 2019
11 CVEs were published on April 20, 2019: 0 critical, 0 high.
- Published
- 11
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 11
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 11
- CVE-2019-11371BWA (aka Burrow-Wheeler Aligner) 0.7.17 r1198 has a Buffer Overflow via a long prefix that is mishandled in bns_fasta2bntseq and bns_dump at
- CVE-2019-11378An issue was discovered in ProjectSend r1053.
- CVE-2019-11377wcms/wex/finder/action.php in WCMS v0.3.2 has a Arbitrary File Upload Vulnerability via developer/finder because .php is a valid extension a
- CVE-2019-11376SOY CMS v3.0.2 allows remote attackers to execute arbitrary PHP code via a <?php substring in the second text box.
- CVE-2019-11375Msvod v10 has a CSRF vulnerability to change user information via the admin/member/edit.html URI.
- CVE-2019-1137474CMS v5.0.1 has a CSRF vulnerability to add a new admin user via the index.php?m=Admin&c=admin&a=add URI.
- CVE-2019-11373An out-of-bounds read in File__Analyze::Get_L8 in File__Analyze_Buffer.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash.
- CVE-2019-11372An out-of-bounds read in MediaInfoLib::File__Tags_Helper::Synched_Test in Tag/File__Tags.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 le
- CVE-2019-11366An issue was discovered in atftpd in atftp 0.7.1.
- CVE-2019-11365An issue was discovered in atftpd in atftp 0.7.1.
- CVE-2019-11362app/controllers/frontend/PostController.php in ROCBOSS V2.2.1 has SQL injection via the Post:doReward score paramter, as demonstrated by the