CVEs published May 23, 2019
111 CVEs were published on May 23, 2019: 0 critical, 1 high.
- Published
- 111
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 0
- Unrated
- 109
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Adobe Acrobat and Reader
- 21
- Google Chrome
- 17
- Adobe Bridge CC
- 8
- Adobe Shockwave Player
- 7
- Adobe Flash Player
- 2
- Adobe XD
- 2
- IBM MQ
- 2
- Adobe Dreamweaver
- 1
- Adobe InDesign
- 1
- Apache Software Foundation Apache ZooKeeper · org.apache.zo…
- 1
High 1
Medium, low and unrated 110
- CVE-2019-5804Incorrect command line processing in Chrome in Google Chrome prior to 73.0.3683.75 allowed a local attacker to perform domain spoofing via aGoogle Chrome
- CVE-2019-12309dotCMS before 5.1.0 has a path traversal vulnerability exploitable by an administrator to create files.
- CVE-2019-5803Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass contenGoogle Chrome
- CVE-2019-5802Incorrect handling of download origins in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spooGoogle Chrome
- CVE-2019-5801Incorrect eliding of URLs in Omnibox in Google Chrome on iOS prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via Google Chrome
- CVE-2019-5800Insufficient policy enforcement in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy Google Chrome
- CVE-2019-5799Incorrect inheritance of a new document's policy in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attackerGoogle Chrome
- CVE-2019-5798Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory Google Chrome
- CVE-2019-5796Data race in extensions guest view in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption vGoogle Chrome
- CVE-2018-19614XSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers.
- CVE-2019-5795Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory acceGoogle Chrome
- CVE-2019-5794Incorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spGoogle Chrome
- CVE-2019-5793Insufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to initiate the extensions inGoogle Chrome
- CVE-2019-10846Computrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting vulnerabilities in the login page and password reset page via t
- CVE-2019-5792Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory acceGoogle Chrome
- CVE-2019-5791Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read viGoogle Chrome
- CVE-2019-5790An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacGoogle Chrome
- CVE-2019-5789An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker whGoogle Chrome
- CVE-2019-5788An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attackeGoogle Chrome
- CVE-2019-5787Use-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruptioGoogle Chrome
- CVE-2019-10849Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.
- CVE-2019-10850Computrols CBAS 18.0.0 has Default Credentials.
- CVE-2019-10851Computrols CBAS 18.0.0 has hard-coded encryption keys.
- CVE-2019-10852Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by the index.php?m=servers&a=start
- CVE-2019-10853Computrols CBAS 18.0.0 allows Authentication Bypass.
- CVE-2019-10854Computrols CBAS 18.0.0 allows Authenticated Command Injection.
- CVE-2019-10855Computrols CBAS 18.0.0 mishandles password hashes.
- CVE-2019-10866In the Form Maker plugin before 1.13.3 for WordPress, it's possible to achieve SQL injection in the function get_labels_parameters in the fi
- CVE-2016-7550asterisk 13.10.0 is affected by: denial of service issues in asterisk.
- CVE-2016-8897Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/help/controllers/helpController.php.
- CVE-2016-8899Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expCatController.php related
- CVE-2016-8901b2evolution 6.7.6 suffer from an Object Injection vulnerability in /htsrv/call_plugin.php.
- CVE-2019-12289An issue was discovered in upgrade_firmware.cgi on VStarcam 100T (C7824WIP) CH-sys-48.53.75.119~123 and 200V (C38S) CH-sys-48.53.203.119~123
- CVE-2019-12288An issue was discovered in upgrade_htmls.cgi on VStarcam 100T (C7824WIP) KR75.8.53.20 and 200V (C38S) KR203.18.1.20 devices.
- CVE-2016-9969In libwebp 0.5.1, there is a double free bug in libwebpmux.
- CVE-2017-13667OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF.
- CVE-2019-7061Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3Adobe Acrobat and Reader
- CVE-2019-7109Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3Adobe Acrobat and Reader
- CVE-2019-7110Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3Adobe Acrobat and Reader
- CVE-2019-7114Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3Adobe Acrobat and Reader
- CVE-2019-7115Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3Adobe Acrobat and Reader
- CVE-2019-7116Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3Adobe Acrobat and Reader
- CVE-2017-11365Certain Symfony products are affected by: Incorrect Access Control.symfony/security-core · symfony/security +1
- CVE-2019-7121Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3Adobe Acrobat and Reader
- CVE-2017-11557An issue was discovered in ZOHO ManageEngine Applications Manager 12.3.
- CVE-2019-7122Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3Adobe Acrobat and Reader
- CVE-2019-7123Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3Adobe Acrobat and Reader
- CVE-2019-7127Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3Adobe Acrobat and Reader
- CVE-2019-7111Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3Adobe Acrobat and Reader
- CVE-2019-7118Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3Adobe Acrobat and Reader
- CVE-2017-11559An issue was discovered in ZOHO ManageEngine OpManager 12.2.
- CVE-2019-7119Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3Adobe Acrobat and Reader
- CVE-2019-7120Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3Adobe Acrobat and Reader
- CVE-2017-11560An issue was discovered in ZOHO ManageEngine OpManager 12.2.
- CVE-2019-7124Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3Adobe Acrobat and Reader
- CVE-2019-7117Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3Adobe Acrobat and Reader
- CVE-2019-7128Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3Adobe Acrobat and Reader
- CVE-2019-7088Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3Adobe Acrobat and Reader
- CVE-2019-7096Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an use after free vulnerability.Adobe Flash Player
- CVE-2019-7112Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3Adobe Acrobat and Reader
- CVE-2019-7113Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3Adobe Acrobat and Reader
- CVE-2019-7125Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3Adobe Acrobat and Reader
- CVE-2019-7108Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an out-of-bounds read vulnerabilAdobe Flash Player
- CVE-2019-7098Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability.Adobe Shockwave Player
- CVE-2019-7102Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability.Adobe Shockwave Player
- CVE-2019-7099Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability.Adobe Shockwave Player
- CVE-2019-7100Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability.Adobe Shockwave Player
- CVE-2019-7101Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability.Adobe Shockwave Player
- CVE-2019-7103Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability.Adobe Shockwave Player
- CVE-2019-7104Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability.Adobe Shockwave Player
- CVE-2019-7135Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability.Adobe Bridge CC
- CVE-2019-7106Adobe XD versions 16.0 and earlier have a path traversal vulnerability.Adobe XD
- CVE-2019-7097Adobe Dreamweaver versions 19.0 and earlier have an insecure protocol implementation vulnerability.Adobe Dreamweaver
- CVE-2019-7105Adobe XD versions 16.0 and earlier have a path traversal vulnerability.Adobe XD
- CVE-2019-7107Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability.Adobe InDesign
- CVE-2019-7130Adobe Bridge CC versions 9.0.2 have a heap overflow vulnerability.Adobe Bridge CC
- CVE-2019-7132Adobe Bridge CC versions 9.0.2 have an out-of-bounds write vulnerability.Adobe Bridge CC
- CVE-2019-7133Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability.Adobe Bridge CC
- CVE-2017-11561An issue was discovered in ZOHO ManageEngine OpManager 12.2.
- CVE-2019-7134Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability.Adobe Bridge CC
- CVE-2019-7138Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability.Adobe Bridge CC
- CVE-2019-7136Adobe Bridge CC versions 9.0.2 have an use after free vulnerability.Adobe Bridge CC
- CVE-2017-11738In Zoho ManageEngine Application Manager prior to 14.6 Build 14660, the 'haid' parameter of the '/auditLogAction.do' module is vulnerable to
- CVE-2017-11739In Zoho ManageEngine Application Manager 13.1 Build 13100, an authenticated user, with administrative privileges, has the ability to add a w
- CVE-2019-7137Adobe Bridge CC versions 9.0.2 have a memory corruption vulnerability.Adobe Bridge CC
- CVE-2017-11740In Zoho ManageEngine Application Manager 13.1 Build 13100, the administrative user has the ability to upload files/binaries that can be exec
- CVE-2017-13668OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
- CVE-2019-12301The Percona Server 5.6.44-85.0-1 packages for Debian and Ubuntu suffered an issue where the server would reset the root password to a blank
- CVE-2017-15029Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF.
- CVE-2017-15030Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
- CVE-2017-15652Artifex Ghostscript 9.22 is affected by: Obtain Information.
- CVE-2017-17060OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions.
- CVE-2017-17061OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
- CVE-2017-5210Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Information Exposure.
- CVE-2017-5211Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing.
- CVE-2017-5212Open-Xchange GmbH OX App Suite 7.8.3 is affected by: Incorrect Access Control.
- CVE-2017-5213Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS).
- CVE-2019-12300Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a user.buildbot
- CVE-2019-12272In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and admin/status/realtime/wireless_status of the web appl
- CVE-2019-4039IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local attacker to cause a denial of service within the erroIBM MQ
- CVE-2018-15664In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable to a symlink-exchange attack with Director
- CVE-2019-0201An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta.Apache Software Foundation Apache ZooKeeper · org.apache.zo…
- CVE-2019-12298Leanify 0.4.3 allows remote attackers to trigger an out-of-bounds write (1024 bytes) via a modified input file.
- CVE-2019-12042Insecure permissions of the section object Global\PandaDevicesAgentSharedMemory and the event Global\PandaDevicesAgentSharedMemoryChange in
- CVE-2019-10977In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior, an attacker could send crafted TCP packetsMitsubishi Electric MELSEC-Q series Ethernet module
- CVE-2019-9949Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affec
- CVE-2019-12297An issue was discovered in scopd on Motorola routers CX2 1.01 and M2 1.01.
- CVE-2019-11873wolfSSL 4.0.0 has a Buffer Overflow in DoPreSharedKeys in tls13.c when a current identity size is greater than a client identity size.
- CVE-2019-12295In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash.
- CVE-2019-12293In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights