CVEs published April 21, 2019
26 CVEs were published on April 21, 2019: 0 critical, 2 high.
- Published
- 26
- Critical
- 0
- High
- 2
- Medium
- 0
- Low
- 0
- Unrated
- 24
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- io.arrow-kt:arrow-ank-gradle
- 1
- org.openapitools:openapi-generator
- 1
- sscms
- 1
High 2
- CVE-2019-11405OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and buildorg.openapitools:openapi-generator
- CVE-2019-11404arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts (for compiling and building the published JARs) over HTTP instead of HTTPS.io.arrow-kt:arrow-ank-gradle
Medium, low and unrated 24
- CVE-2019-11428I, Librarian 4.10 has XSS via the export.php export_files parameter.
- CVE-2019-11427An XSS issue was discovered in app/search/search.app.php in idreamsoft iCMS 7.0.14 via the public/api.php?app=search q parameter.
- CVE-2019-11426An XSS issue was discovered in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14 via the admincp.php?app=config tab paramete
- CVE-2019-11418apply.cgi on the TRENDnet TEW-632BRP 1.010B32 router has a buffer overflow via long strings to the SOAPACTION:HNAP1 interface.
- CVE-2019-11417system.cgi on TRENDnet TV-IP110WN cameras has a buffer overflow caused by an inadequate source-length check before a strcpy operation in the
- CVE-2018-20818A buffer overflow vulnerability was discovered in the OpenPLC controller, in the OpenPLC_v2 and OpenPLC_v3 versions.
- CVE-2019-11416A CSRF issue was discovered on Intelbras IWR 3000N 1.5.0 devices, leading to complete control of the router, as demonstrated by v1/system/us
- CVE-2019-11415An issue was discovered on Intelbras IWR 3000N 1.5.0 devices.
- CVE-2019-11414An issue was discovered on Intelbras IWR 3000N 1.5.0 devices.
- CVE-2019-11413An issue was discovered in Artifex MuJS 1.0.5.
- CVE-2019-11412An issue was discovered in Artifex MuJS 1.0.5.
- CVE-2019-11411An issue was discovered in Artifex MuJS 1.0.5.
- CVE-2019-11235FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that the received group e
- CVE-2019-11234FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a similar issue to CVE-2
- CVE-2019-11403In Gradle Enterprise before 2018.5.2, Build Cache Nodes would reflect the configured password back when viewing the HTML page source of the
- CVE-2019-11402In Gradle Enterprise before 2018.5.3, Build Cache Nodes did not store the credentials at rest in an encrypted format.
- CVE-2019-11401A issue was discovered in SiteServer CMS 6.9.0.sscms
- CVE-2019-11395A buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long string, as demonstrated by SMTP RCPT TO,
- CVE-2019-11393An issue was discovered in /admin/users/update in M/Monit before 3.7.3.
- CVE-2019-11391An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0.
- CVE-2019-11390An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0.
- CVE-2019-11389An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0.
- CVE-2019-11388An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0.
- CVE-2019-11387An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0.