# CVEs published 2019-05-01

17 CVEs were published on May 1, 2019: 0 critical, 1 high. Days are UTC.

- [CVE-2018-8035](https://cve.now/CVE-2018-8035.md): This vulnerability relates to the user's browser processing of DUCC webpage input data.The javascript comprising Apache UIMA DUCC (\<= 2.2.2) (no CVSS, Apache UIMA DUCC · org.apache.uima:uima-ducc-web)
- [CVE-2019-0227](https://cve.now/CVE-2019-0227.md): A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. (no CVSS, Apache Axis · org.apache.axis:axis +1)
- [CVE-2019-10952](https://cve.now/CVE-2019-10952.md): Rockwell Automation CompactLogix 5370 Uncontrolled Resource Consumption (no CVSS, Rockwell Automation CompactLogix 5370 L1 controllers · R… +3)
- [CVE-2019-10954](https://cve.now/CVE-2019-10954.md): Rockwell Automation CompactLogix 5370 Stack-based Buffer Overflow (no CVSS, Rockwell Automation CompactLogix 5370 L1 controllers · R… +3)
- [CVE-2019-6562](https://cve.now/CVE-2019-6562.md): In Philips Tasy EMR, Tasy EMR Versions 3.02.1744 and prior, the software incorrectly neutralizes user-controllable input before it is placed (no CVSS, Philips Tasy EMR)
- [CVE-2019-11641](https://cve.now/CVE-2019-11641.md): Anomali Agave (formerly Drupot) through 1.0.0 fails to avoid fingerprinting by including predictable data and minimal variation in size with (no CVSS)
- [CVE-2019-11640](https://cve.now/CVE-2019-11640.md): An issue was discovered in GNU recutils 1.8. (no CVSS)
- [CVE-2019-11639](https://cve.now/CVE-2019-11639.md): An issue was discovered in GNU recutils 1.8. (no CVSS)
- [CVE-2019-11638](https://cve.now/CVE-2019-11638.md): An issue was discovered in GNU recutils 1.8. (no CVSS)
- [CVE-2019-11637](https://cve.now/CVE-2019-11637.md): An issue was discovered in GNU recutils 1.8. (no CVSS)
- [CVE-2019-11636](https://cve.now/CVE-2019-11636.md): Zcash 2.x allows an inexpensive approach to "fill all transactions of all blocks" and "prevent any real transaction from occurring" via a "S (no CVSS)
- [CVE-2019-4258](https://cve.now/CVE-2019-4258.md): IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 Standard Edition is vulnerable to cross-site scripting. (CVSS 5.4, IBM Sterling B2B Integrator)
- [CVE-2018-1933](https://cve.now/CVE-2018-1933.md): IBM Planning Analytics 2.0 through 2.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Planning Analytics)
- [CVE-2018-1608](https://cve.now/CVE-2018-1608.md): IBM Rational Engineering Lifecycle Manager 6.0 through 6.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker (CVSS 5.9, IBM Rational Engineering Lifecycle Manager)
- [CVE-2019-11633](https://cve.now/CVE-2019-11633.md): HoneyPress through 2016-09-27 can be fingerprinted by attackers because of the ingrained unique www.atxsec.com and ayylmao.wpengine.com host (no CVSS)
- [CVE-2019-11632](https://cve.now/CVE-2019-11632.md): In Octopus Deploy 2019.1.0 through 2019.3.1 and 2019.4.0 through 2019.4.5, an authenticated user with the VariableViewUnscoped or VariableEd (no CVSS)
- [CVE-2019-11628](https://cve.now/CVE-2019-11628.md): An issue was discovered in QlikView Server before 11.20 SR19, 12.00 and 12.10 before 12.10 SR11, 12.20 before SR9, and 12.30 before SR2; and (CVSS 8.2)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-05-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.