CVEs published May 1, 2019
17 CVEs were published on May 1, 2019: 0 critical, 1 high.
- Published
- 17
- Critical
- 0
- High
- 1
- Medium
- 3
- Low
- 0
- Unrated
- 13
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Rockwell Automation CompactLogix 5370 L1 controllers · R… +3
- 2
- Apache Axis · org.apache.axis:axis +1
- 1
- Apache UIMA DUCC · org.apache.uima:uima-ducc-web
- 1
- IBM Planning Analytics
- 1
- IBM Rational Engineering Lifecycle Manager
- 1
- IBM Sterling B2B Integrator
- 1
- Philips Tasy EMR
- 1
High 1
Medium, low and unrated 16
- CVE-2018-8035This vulnerability relates to the user's browser processing of DUCC webpage input data.The javascript comprising Apache UIMA DUCC (<= 2.2.2)Apache UIMA DUCC · org.apache.uima:uima-ducc-web
- CVE-2019-0227A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006.Apache Axis · org.apache.axis:axis +1
- CVE-2019-10952Rockwell Automation CompactLogix 5370 Uncontrolled Resource ConsumptionRockwell Automation CompactLogix 5370 L1 controllers · R… +3
- CVE-2019-10954Rockwell Automation CompactLogix 5370 Stack-based Buffer OverflowRockwell Automation CompactLogix 5370 L1 controllers · R… +3
- CVE-2019-6562In Philips Tasy EMR, Tasy EMR Versions 3.02.1744 and prior, the software incorrectly neutralizes user-controllable input before it is placedPhilips Tasy EMR
- CVE-2019-11641Anomali Agave (formerly Drupot) through 1.0.0 fails to avoid fingerprinting by including predictable data and minimal variation in size with
- CVE-2019-11640An issue was discovered in GNU recutils 1.8.
- CVE-2019-11639An issue was discovered in GNU recutils 1.8.
- CVE-2019-11638An issue was discovered in GNU recutils 1.8.
- CVE-2019-11637An issue was discovered in GNU recutils 1.8.
- CVE-2019-11636Zcash 2.x allows an inexpensive approach to "fill all transactions of all blocks" and "prevent any real transaction from occurring" via a "S
- CVE-2019-4258IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 Standard Edition is vulnerable to cross-site scripting.IBM Sterling B2B Integrator
- CVE-2018-1933IBM Planning Analytics 2.0 through 2.0.6 is vulnerable to cross-site scripting.IBM Planning Analytics
- CVE-2018-1608IBM Rational Engineering Lifecycle Manager 6.0 through 6.0.6 uses weaker than expected cryptographic algorithms that could allow an attackerIBM Rational Engineering Lifecycle Manager
- CVE-2019-11633HoneyPress through 2016-09-27 can be fingerprinted by attackers because of the ingrained unique www.atxsec.com and ayylmao.wpengine.com host
- CVE-2019-11632In Octopus Deploy 2019.1.0 through 2019.3.1 and 2019.4.0 through 2019.4.5, an authenticated user with the VariableViewUnscoped or VariableEd