CVEs published May 28, 2019
21 CVEs were published on May 28, 2019: 0 critical, 2 high.
- Published
- 21
- Critical
- 0
- High
- 2
- Medium
- 0
- Low
- 0
- Unrated
- 19
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- CA Technologies, A Broadcom Company CA Strong Authenticatio…
- 2
- curl
- 2
- Emerson Ovation OCR400 Controller
- 2
- Apache Camel · org.apache.camel:camel-core +1
- 1
- Apache Software Foundation Apache Roller
- 1
- Apache Tomcat · org.apache.tomcat.embed:tomcat-embed-core +2
- 1
- Fortinet FortiAnalyzer · Fortinet FortiManager
- 1
- Fortinet FortiClientWindows
- 1
- Revive Adserver
- 1
High 2
- CVE-2019-5589A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitableFortinet FortiClientWindows
- CVE-2019-5436A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.curl
Medium, low and unrated 19
- CVE-2019-10967In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server iEmerson Ovation OCR400 Controller
- CVE-2019-10965In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a heap-based buffer overflow vulnerability in the embedded third-party FTP server inEmerson Ovation OCR400 Controller
- CVE-2019-0221The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escapiApache Tomcat · org.apache.tomcat.embed:tomcat-embed-core +2
- CVE-2018-20008iBall Baton iB-WRB302N20122017 devices have improper access control over the UART interface, allowing physical attackers to discover Wi-Fi c
- CVE-2019-5435An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.curl
- CVE-2019-5440Use of cryptographically weak PRNG in the password recovery token generation of Revive Adserver < v4.2.1 causes a potential authentication bRevive Adserver
- CVE-2018-13375An Improper Neutralization of Script-Related HTML Tags in Fortinet FortiAnalyzer 5.6.0 and below and FortiManager 5.6.0 and below allows an Fortinet FortiAnalyzer · Fortinet FortiManager
- CVE-2019-7393A UI redress vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.CA Technologies, A Broadcom Company CA Strong Authenticatio…
- CVE-2019-7394A privilege escalation vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8CA Technologies, A Broadcom Company CA Strong Authenticatio…
- CVE-2019-0188Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSOApache Camel · org.apache.camel:camel-core +1
- CVE-2018-17198Server-side Request Forgery (SSRF) and File Enumeration vulnerability in Apache Roller 5.2.1, 5.2.0 and earlier unsupported versions relies Apache Software Foundation Apache Roller
- CVE-2019-12395In Webbukkit Dynmap 3.0-beta-3 or below, due to a missing login check in servlet/MapStorageHandler.java, an attacker can see a map image wit
- CVE-2019-12383Tor Browser before 8.0.1 has an information exposure vulnerability.
- CVE-2019-12382An issue was discovered in drm_load_edid_firmware in drivers/gpu/drm/drm_edid_load.c in the Linux kernel through 5.1.5.
- CVE-2019-12381An issue was discovered in ip_ra_control in net/ipv4/ip_sockglue.c in the Linux kernel through 5.1.5.
- CVE-2019-12380**DISPUTED** An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5.
- CVE-2019-12379An issue was discovered in con_insert_unipair in drivers/tty/vt/consolemap.c in the Linux kernel through 5.1.5.
- CVE-2019-12378An issue was discovered in ip6_ra_control in net/ipv6/ipv6_sockglue.c in the Linux kernel through 5.1.5.
- CVE-2019-12372Petraware pTransformer ADC before 2.1.7.22827 allows SQL Injection via the User ID parameter to the login form.