cve.nowby Sazabi

CVEs published June 23, 2019

3 CVEs were published on June 23, 2019: 0 critical, 2 high.

Published: 3
Critical: 0
High: 2
Medium: 0
Low: 0
Unrated: 1
Now in CISA KEV: 0
Fix available: 1

Most affected products

shopware/shopware: 1

High 2

CVE-2019-12936BlueStacks App Player 2, 3, and 4 before 4.90 allows DNS Rebinding for attacks on exposed IPC functions.High · 7.1Jun 23, 2019
CVE-2019-12935Shopware before 5.5.8 has XSS via the Query String to the backend/Login or backend/Login/load/ URI.shopware/shopwareHigh · 7.4Fix availableJun 23, 2019

Medium, low and unrated 1

CVE-2019-12937apps/gsudo.c in gsudo in ToaruOS through 1.10.9 has a buffer overflow allowing local privilege escalation to the root user via the DISPLAY eUnratedJun 23, 2019