CVEs published June 17, 2019
70 CVEs were published on June 17, 2019: 1 critical, 2 high.
- Published
- 70
- Critical
- 1
- High
- 2
- Medium
- 6
- Low
- 0
- Unrated
- 61
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- HP Color LaserJet Pro M280-M281 Multifunction Printer serie…
- 5
- IBM Cognos Controller
- 5
- rubygems-update
- 5
- Talos KCodes
- 2
- IBM InfoSphere Information Server
- 1
- IBM Tivoli Netcool/Impact
- 1
Critical 1
High 2
- CVE-2019-4103IBM Tivoli Netcool/Impact 7.1.0 allows for remote execution of command by low privileged User.IBM Tivoli Netcool/Impact
- CVE-2018-1845IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML datIBM InfoSphere Information Server
Medium, low and unrated 67
- CVE-2019-12865In radare2 through 3.5.1, cmd_mount in libr/core/cmd_mount.c has a double free for the ms command.
- CVE-2017-10720Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the desktop applic
- CVE-2017-10722Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the desktop applic
- CVE-2017-10724Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker connec
- CVE-2017-10723Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker connec
- CVE-2017-10718Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that any malicious user
- CVE-2017-10719Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the device has def
- CVE-2017-10721Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the device has Tel
- CVE-2019-5017An exploitable information disclosure vulnerability exists in the KCodes NetUSB.ko kernel module that enables the ReadySHARE Printer functioTalos KCodes
- CVE-2017-9392An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
- CVE-2017-9391An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
- CVE-2018-18958OPNsense 18.7.x before 18.7.7 has Incorrect Access Control.
- CVE-2018-19146Concrete5 8.4.3 has XSS because config/concrete.php allows uploads (by administrators) of SVG files that may contain HTML data with a SCRIPT
- CVE-2017-9382An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
- CVE-2018-19444A use after free in the TextBox field Validate action in IReader_ContentProvider can occur for specially crafted PDF files in Foxit Reader S
- CVE-2018-19445A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API
- CVE-2017-9383An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
- CVE-2018-19446A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.cre
- CVE-2017-9385An issue was discovered on Vera Veralite 1.7.481 devices.
- CVE-2018-19447A stack-based buffer overflow can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing the URI string
- CVE-2018-19448In Foxit Reader SDK (ActiveX) Professional 5.4.0.1031, an uninitialized object in IReader_ContentProvider::GetDocEventHandler occurs when em
- CVE-2017-9386An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
- CVE-2018-19449A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.exp
- CVE-2017-9389An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
- CVE-2018-19450A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when parsing a launch action.
- CVE-2017-9387An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
- CVE-2017-9390An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
- CVE-2019-7158OX App Suite 7.10.0 and earlier has Incorrect Access Control.
- CVE-2019-8321An issue was discovered in RubyGems 2.6 and later through 3.0.2.rubygems-update
- CVE-2019-8322An issue was discovered in RubyGems 2.6 and later through 3.0.2.rubygems-update
- CVE-2019-8323An issue was discovered in RubyGems 2.6 and later through 3.0.2.rubygems-update
- CVE-2019-8325An issue was discovered in RubyGems 2.6 and later through 3.0.2.rubygems-update
- CVE-2019-8324An issue was discovered in RubyGems 2.6 and later through 3.0.2.rubygems-update
- CVE-2019-7315Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera devices through 3.x are vulnerable to directory traversal via the web interfac
- CVE-2019-7579An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices.
- CVE-2019-11410app/backup/index.php in the Backup Module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validatio
- CVE-2019-11409app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of
- CVE-2019-11408XSS in app/operator_panel/index_inc.php in the Operator Panel module in FusionPBX 4.4.3 allows remote unauthenticated attackers to inject ar
- CVE-2019-10997An issue was discovered on Phoenix Contact AXC F 2152 (No.2404267) before 2019.0 LTS and AXC F 2152 STARTERKIT (No.1046568) before 2019.0 LT
- CVE-2019-11407app/operator_panel/index_inc.php in the Operator Panel module in FusionPBX 4.4.3 suffers from an information disclosure vulnerability due to
- CVE-2019-12801out/out.GroupMgr.php in SeedDMS 5.1.11 has Stored XSS by making a new group with a JavaScript payload as the "GROUP" Name.
- CVE-2017-9381An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
- CVE-2017-9384An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
- CVE-2019-12476An authentication bypass vulnerability in the password reset functionality in Zoho ManageEngine ADSelfService Plus before 5.0.6 allows an at
- CVE-2017-9388An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
- CVE-2019-12549WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded private keys for the SSH daemon.
- CVE-2019-12550WAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain hardcoded users and passwords that can be used to l
- CVE-2019-12789An issue was discovered on Actiontec T2200H T2200H-31.128L.08 devices, as distributed by Telus.
- CVE-2019-6327HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v.HP Color LaserJet Pro M280-M281 Multifunction Printer serie…
- CVE-2019-6326HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v.HP Color LaserJet Pro M280-M281 Multifunction Printer serie…
- CVE-2019-6325HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v.HP Color LaserJet Pro M280-M281 Multifunction Printer serie…
- CVE-2019-6324HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v.HP Color LaserJet Pro M280-M281 Multifunction Printer serie…
- CVE-2019-6323HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v.HP Color LaserJet Pro M280-M281 Multifunction Printer serie…
- CVE-2019-12181A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.
- CVE-2019-4177IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 allows web pages to be stored locally which can be read by another user on IBM Cognos Controller
- CVE-2019-4176IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 could allow a remote attacker to bypass security restrictions, caused by anIBM Cognos Controller
- CVE-2019-4174IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 allows web pages to be stored locally which can be read by another user on IBM Cognos Controller
- CVE-2019-4173IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 could allow a remote attacker to obtain sensitive information, caused by a IBM Cognos Controller
- CVE-2019-4136IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 is vulnerable to cross-site scripting.IBM Cognos Controller
- CVE-2018-10239A privilege escalation vulnerability in the "support access" feature on Infoblox NIOS 6.8 through 8.4.1 could allow a locally authenticated
- CVE-2018-20468An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.
- CVE-2018-20469An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.
- CVE-2018-20470An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.
- CVE-2018-20472An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.
- CVE-2019-12248An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.7, Community Edition 6.0.x through 6.0.19, and Community Edit
- CVE-2019-12497An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8, Community Edition 6.0.x through 6.0.19, and Community Edit
- CVE-2019-12868app/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator because the PHP file_exists function is used w