CVEs published May 20, 2019
30 CVEs were published on May 20, 2019: 0 critical, 0 high.
- Published
- 30
- Critical
- 0
- High
- 0
- Medium
- 3
- Low
- 1
- Unrated
- 26
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Apache Software Foundation Apache JSPWiki · org.apache.j… +1
- 3
- IBM BigFix Platform
- 3
- IBM Storwize V7000 Unified
- 1
Medium, low and unrated 30
- CVE-2019-11816Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to es
- CVE-2019-10078A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to sessApache Software Foundation Apache JSPWiki · org.apache.j… +1
- CVE-2019-10077A carefully crafted InterWiki link could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijaApache Software Foundation Apache JSPWiki · org.apache.j… +1
- CVE-2019-10076A carefully crafted malicious attachment could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to sessioApache Software Foundation Apache JSPWiki · org.apache.j… +1
- CVE-2019-12241The Carts Guru plugin 1.4.5 for WordPress allows Insecure Deserialization via a cartsguru-source cookie to classes/wc-cartsguru-event-handle
- CVE-2019-12240The Virim plugin 0.4 for WordPress allows Insecure Deserialization via s_values, t_values, or c_values in graph.php.
- CVE-2019-12239The WP Booking System plugin 1.5.1 for WordPress has no CSRF protection, which allows attackers to reach certain SQL injection issues that r
- CVE-2019-8352By default, BMC PATROL Agent through 11.3.01 uses a static encryption key for encrypting/decrypting user credentials sent over the network t
- CVE-2019-4293IBM Storwize V7000 Unified (2073) 1.6 configuration may allow an attacker to reveal the server version in default installation, which could IBM Storwize V7000 Unified
- CVE-2019-4058IBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into exposing interface elements and information normaIBM BigFix Platform
- CVE-2019-4011IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting.IBM BigFix Platform
- CVE-2018-2005IBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that could be read by a local attacker with elevaIBM BigFix Platform
- CVE-2019-12222An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9.
- CVE-2019-12221An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0
- CVE-2019-12220An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0
- CVE-2019-12219An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0
- CVE-2019-12218An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0
- CVE-2019-12217An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0
- CVE-2019-12216An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0
- CVE-2019-12215A full path disclosure vulnerability was discovered in Matomo v3.9.1 where a user can trigger a particular error to discover the full path o
- CVE-2019-12214In FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG j2k_read_ppm_v3 function in j2k.c.
- CVE-2019-12213When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaust
- CVE-2019-12212When FreeImage 3.18.0 reads a special JXR file, the StreamCalcIFDSize function of JXRMeta.c repeatedly calls itself due to improper processi
- CVE-2019-12211When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the
- CVE-2018-12270In Valve Steam 1528829181 BETA, it is possible to perform a homograph / homoglyph attack to create fake URLs in the client, which may trick
- CVE-2019-12208njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in njs_function_native_call in njs/njs_function.c.
- CVE-2019-12207njs through 0.3.1, used in NGINX, has a heap-based buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c.
- CVE-2019-12206njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in nxt_utf8_encode in nxt_utf8.c.
- CVE-2019-11809An issue was discovered in Joomla! before 3.9.6.
- CVE-2019-12198In GoHttp through 2017-07-25, there is a stack-based buffer over-read via a long User-Agent header.