CVEs published May 21, 2019
14 CVEs were published on May 21, 2019: 0 critical, 0 high.
- Published
- 14
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 14
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Jenkins project Jenkins Credentials Plugin · org.jenkins-ci…
- 1
- Jenkins project Jenkins PAM Authentication Plugin
- 1
Medium, low and unrated 14
- CVE-2019-10066An issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6, Community Edition 6.0.x through 6.0.17, and OTRSAppointmentC
- CVE-2019-9892An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0.17, and 7.x through 7.0.6.
- CVE-2019-10067An issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6 and Community Edition 5.0.x through 5.0.35 and 6.0.x through
- CVE-2019-6513An issue was discovered in WSO2 API Manager 2.6.0.
- CVE-2019-12270OpenText Brava! Enterprise and Brava! Server 7.5 through 16.4 configure excessive permissions by default on Windows.
- CVE-2019-12269Enigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can cause the product to display a "correctly s
- CVE-2019-12189An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3.
- CVE-2019-12190XSS was discovered in CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.747 via the testacc/fileManager2.php fm_current_dir or fi
- CVE-2019-12252In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can view an arbitrary post by appending its num
- CVE-2019-12253my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting.
- CVE-2019-12251sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadmin_ceditpost cvalue parameter.
- CVE-2019-12250IdentityServer IdentityServer4 through 2.4 has stored XSS via the httpContext to the host/Extensions/RequestLoggerMiddleware.cs LogForErrorC
- CVE-2019-10319A missing permission check in Jenkins PAM Authentication Plugin 1.5 and earlier, except 1.4.1 in PamSecurityRealm.DescriptorImpl#doTest alloJenkins project Jenkins PAM Authentication Plugin
- CVE-2019-10320Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of fileJenkins project Jenkins Credentials Plugin · org.jenkins-ci…