CVEs published June 21, 2019
25 CVEs were published on June 21, 2019: 0 critical, 1 high.
- Published
- 25
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 24
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- Apache Geode · org.apache.geode:geode-core
- 1
- Apache Tomcat · org.apache.tomcat.embed:tomcat-embed-core
- 1
- Cisco IOS XE Software
- 1
- Dial Reference Source Code Repo
- 1
- github.com/prasmussen/glot-code-runner
- 1
- openstack-magnum
- 1
High 1
Medium, low and unrated 24
- CVE-2019-10028Denial of Service (DOS) in Dial Reference Source Code Used before June 18th, 2019.Dial Reference Source Code Repo
- CVE-2019-10718BlogEngine.NET 3.3.7.0 and earlier allows XML External Entity Blind Injection, related to pingback.axd and BlogEngine.Core/Web/HttpHandlers/
- CVE-2019-11392BlogEngine.NET 3.3.7 and earlier allows XXE via an apml file to syndication.axd.
- CVE-2019-10720BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution via the theme cookie to the File Manager.
- CVE-2019-10719BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution because file creation is mishandled, related to /api
- CVE-2019-10072The fix for CVE-2019-0199 was incomplete and did not address HTTP/2 connection window exhaustion on write in Apache Tomcat versions 9.0.0.M1Apache Tomcat · org.apache.tomcat.embed:tomcat-embed-core
- CVE-2019-11011Akamai CloudTest before 58.30 allows remote code execution.
- CVE-2019-12572A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client 1.0.2 (build 02363) for Windows could allow an authentica
- CVE-2019-10270An arbitrary password reset issue was discovered in the Ultimate Member plugin 2.39 for WordPress.
- CVE-2017-15694When an Apache Geode server versions 1.0.0 to 1.8.0 is operating in secure mode, a user with write permissions for specific data regions canApache Geode · org.apache.geode:geode-core
- CVE-2019-12836The Bobronix JEditor editor before 3.0.6 for Jira allows an attacker to add a URL/Link (to an existing issue) that can cause forgery of a re
- CVE-2018-15665An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.2.x through 1.4.0.
- CVE-2018-15729An issue was discovered in STOPzilla AntiMalware 6.5.2.59.
- CVE-2018-15730An issue was discovered in STOPzilla AntiMalware 6.5.2.59.
- CVE-2018-15731An issue was discovered in STOPzilla AntiMalware 6.5.2.59.
- CVE-2018-15732An issue was discovered in STOPzilla AntiMalware 6.5.2.59.
- CVE-2018-15733An issue was discovered in STOPzilla AntiMalware 6.5.2.59.
- CVE-2018-15734An issue was discovered in STOPzilla AntiMalware 6.5.2.59.
- CVE-2018-15735An issue was discovered in STOPzilla AntiMalware 6.5.2.59.
- CVE-2018-15736An issue was discovered in STOPzilla AntiMalware 6.5.2.59.
- CVE-2018-15737An issue was discovered in STOPzilla AntiMalware 6.5.2.59.
- CVE-2016-7404OpenStack Magnum passes OpenStack credentials into the Heat templates creating its instances.openstack-magnum
- CVE-2018-15747The default configuration of glot-www through 2018-05-19 allows remote attackers to execute arbitrary code because glot-code-runner supportsgithub.com/prasmussen/glot-code-runner
- CVE-2018-15868SQL injection vulnerability in ChronoScan version 1.5.4.3 and earlier allows an unauthenticated attacker to execute arbitrary SQL commands v