CVEs published May 3, 2019
59 CVEs were published on May 3, 2019: 1 critical, 20 high.
- Published
- 59
- Critical
- 1
- High
- 20
- Medium
- 25
- Low
- 0
- Unrated
- 13
- Now in CISA KEV
- 0
- Fix available
- 42
Most affected products
- F5 BIG-IP
- 9
- Cisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- 7
- Cisco Adaptive Security Appliance (ASA) Software
- 6
- Cisco NX-OS Software for Nexus 9000 Series Fabric Switches…
- 6
- Cisco Application Policy Infrastructure Controller
- 5
- Cisco Firepower Threat Defense Software
- 5
- Atlassian Jira
- 2
- Cisco Web Security Appliance
- 2
- Red Hat wildfly
- 2
- Cisco Email Security Appliance
- 1
Critical 1
High 20
- CVE-2019-6158An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being written to a log file in Lenovo XClarity Administrator
- CVE-2019-1859Cisco Small Business Switches Secure Shell Certificate Authentication Bypass VulnerabilityCisco Small Business 200 Series Smart Switches
- CVE-2019-1817Cisco Web Security Appliance Malformed Request Denial of Service VulnerabilityCisco Web Security Appliance
- CVE-2019-1807Cisco Umbrella Dashboard Session Management VulnerabilityCisco Umbrella
- CVE-2019-1724Cisco Small Business RV320 and RV325 Routers Session Hijacking VulnerabilityCisco Small Business RV Series Router Firmware
- CVE-2019-1803Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Root Privilege Escalation VulnerabilityCisco NX-OS Software for Nexus 9000 Series Fabric Switches…
- CVE-2019-1713Cisco Adaptive Security Appliance Software Cross-Site Request Forgery VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2019-1706Cisco Adaptive Security Appliance Software IPsec Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2019-1708Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software MOBIKE Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2019-1703Cisco Firepower Threat Defense Software Packet Processing Denial of Service VulnerabilityCisco Firepower Threat Defense Software
- CVE-2019-1704Cisco Firepower Threat Defense Software SMB Protocol Preprocessor Detection Engine Denial of Service VulnerabilitiesCisco Firepower Threat Defense Software
- CVE-2019-1694Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software TCP Timer Handling Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2019-1696Cisco Firepower Threat Defense Software SMB Protocol Preprocessor Detection Engine Denial of Service VulnerabilitiesCisco Firepower Threat Defense Software
- CVE-2019-1693Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2019-1635Cisco IP Phone 7800 Series and 8800 Series Session Initiation Protocol XML Denial of Service VulnerabilityCisco Wireless IP Phone 8821 and 8821-EX · Cisco IP Phone 7…
- CVE-2019-1682Cisco Application Policy Infrastructure Controller Privilege Escalation VulnerabilityCisco Application Policy Infrastructure Controller
- CVE-2019-1590Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Insecure Fabric Authentication VulnerabilityCisco NX-OS Software for Nexus 9000 Series Fabric Switches…
- CVE-2019-1592Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Privilege Escalation VulnerabilityCisco NX-OS Software for Nexus 9000 Series Fabric Switches…
- CVE-2018-15462Cisco Firepower Threat Defense Software TCP Ingress Handler Denial of Service VulnerabilityCisco Firepower Threat Defense Software
- CVE-2018-15388Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
Medium, low and unrated 38
- CVE-2018-20580The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java code via a crafted req
- CVE-2019-6619On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, the Traffic Management Microkernel (TMM) may restart when a virtual server haF5 BIG-IP
- CVE-2019-6618On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, users with the Resource Administrator role caF5 BIG-IP
- CVE-2019-11037Out of bounds memory write in PHP Imagick extensionPHP Group PHP Imagick extension
- CVE-2019-11036Heap over-read in PHP EXIF extensionPHP Group PHP
- CVE-2019-3400The labels gadget in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to inject arbitrary HTMAtlassian Jira
- CVE-2018-20824The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site Atlassian Jira
- CVE-2019-3894It was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem in versions from 11 to 16 stores a SecurityIdentity to run thRed Hat wildfly
- CVE-2019-3805A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminateRed Hat wildfly
- CVE-2019-6617On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, a user with the Resource Administrator role iF5 BIG-IP
- CVE-2019-6616On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, administrative users with TMSH access can oveF5 BIG-IP
- CVE-2019-6614On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, internal methods used to prevent arbitrary file overwrites in Appliance Mode F5 BIG-IP
- CVE-2019-6615On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, Administrator and Resource Administrator roleF5 BIG-IP
- CVE-2019-6613On BIG-IP 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, SNMP may expose sensitive configuration objects over insecure F5 BIG-IP
- CVE-2019-6612On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, DNS query TCP connections that are aborted beF5 BIG-IP
- CVE-2019-6611When BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8 are processing certain rare data sequences oF5 BIG-IP
- CVE-2019-1856Cisco Prime Collaboration Assurance Cross-Site Scripting VulnerabilityCisco Prime Collaboration Assurance
- CVE-2019-1857Cisco HyperFlex HX-Series Web-Based Management Interface Cross-Site Request Forgery VulnerabilityCisco HyperFlex HX-Series
- CVE-2019-1838Cisco Application Policy Infrastructure Controller Web-Based Management Interface Cross-Site Scripting VulnerabilityCisco Application Policy Infrastructure Controller
- CVE-2019-1844Cisco Email Security Appliance Filter Bypass VulnerabilityCisco Email Security Appliance
- CVE-2019-1852Cisco Prime Network Registrar Cross-Site Scripting VulnerabilityCisco Prime Network Registrar
- CVE-2019-1854Cisco Expressway Series Directory Traversal VulnerabilityCisco Expressway
- CVE-2019-1836Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Symbolic Link Path Traversal VulnerabilityCisco NX-OS Software for Nexus 9000 Series Fabric Switches…
- CVE-2019-1816Cisco Web Security Appliance Privilege Escalation VulnerabilityCisco Web Security Appliance
- CVE-2019-1715Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys VulnerabilityCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2019-1714Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software VPN SAML Authentication Bypass VulnerabilityCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2019-1705Cisco Adaptive Security Appliance Software VPN Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2019-1709Cisco Firepower Threat Defense Software Command Injection VulnerabilityCisco Firepower Threat Defense Software
- CVE-2019-1701Cisco Adaptive Security Appliance and Firepower Threat Defense Software WebVPN Cross-Site Scripting VulnerabilitiesCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2019-1699Cisco Firepower Threat Defense Software Command Injection VulnerabilityCisco Firepower Threat Defense (FTD) Software
- CVE-2019-1697Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Lightweight Directory Access Protocol Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2019-1695Cisco Adaptive Security Appliance and Firepower Threat Defense Software Layer 2 Filtering Bypass VulnerabilityCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2019-1687Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software TCP Proxy Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2019-1692Cisco Application Policy Infrastructure Controller Web-Based Management Interface Usage Information Disclosure VulnerabilityCisco Application Policy Infrastructure Controller
- CVE-2019-1589Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Unmeasured Boot VulnerabilityCisco NX-OS Software for Nexus 9000 Series Fabric Switches…
- CVE-2019-1586Cisco Application Policy Infrastructure Controller Recoverable Encryption Key VulnerabilityCisco Application Policy Infrastructure Controller
- CVE-2019-1587Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Filter Query Information Disclosure VulnerabilityCisco Application Policy Infrastructure Controller
- CVE-2019-11690gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in