CVEs published June 28, 2019
29 CVEs were published on June 28, 2019: 0 critical, 1 high.
- Published
- 29
- Critical
- 0
- High
- 1
- Medium
- 2
- Low
- 0
- Unrated
- 26
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- WebAccess/SCADA
- 6
- IBM WebSphere Application Server
- 1
- KubeVirt containerized-data-importer
- 1
- Medtronic MiniMed 508 pump · Medtronic MiniMed Paradigm… +9
- 1
High 1
Medium, low and unrated 28
- CVE-2019-13032An issue was discovered in FlightCrew v0.9.2 and earlier.
- CVE-2019-13031LemonLDAP::NG before 1.9.20 has an XML External Entity (XXE) issue when submitting a notification to the notification server.
- CVE-2019-13028An incorrect implementation of a local web server in eID client (Windows version before 3.1.2, Linux version before 3.0.3) allows remote att
- CVE-2019-10993In WebAccess/SCADA Versions 8.3.5 and prior, multiple untrusted pointer dereference vulnerabilities may allow a remote attacker to execute aWebAccess/SCADA
- CVE-2019-10987In WebAccess/SCADA Versions 8.3.5 and prior, multiple out-of-bounds write vulnerabilities are caused by a lack of proper validation of the lWebAccess/SCADA
- CVE-2019-10983In WebAccess/SCADA Versions 8.3.5 and prior, an out-of-bounds read vulnerability is caused by a lack of proper validation of user-supplied dWebAccess/SCADA
- CVE-2019-10989In WebAccess/SCADA Versions 8.3.5 and prior, multiple heap-based buffer overflow vulnerabilities are caused by a lack of proper validation oWebAccess/SCADA
- CVE-2019-10991In WebAccess/SCADA, Versions 8.3.5 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validationWebAccess/SCADA
- CVE-2019-10985In WebAccess/SCADA, Versions 8.3.5 and prior, a path traversal vulnerability is caused by a lack of proper validation of a user-supplied patWebAccess/SCADA
- CVE-2019-10175A flaw was found in the containerized-data-importer in virt-cdi-cloner, version 1.4, where the host-assisted cloning feature does not determKubeVirt containerized-data-importer
- CVE-2018-17170Grouptime Teamwire Desktop Client 1.5.1 prior to 1.9.0 on Windows allows code injection via a template, leading to remote code execution.
- CVE-2018-17560The admin interface of the Grouptime Teamwire Client 1.5.1 prior to 1.9.0 on-premises messenger server allows stored XSS.
- CVE-2018-14867Incorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo Enterprise 9.0 and 10.0 allows remote attack
- CVE-2018-14868Incorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo Enterprise 9.0 allows authenticated users to chang
- CVE-2018-14885Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote
- CVE-2018-14886The module-description renderer in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier does not disable RST's local file in
- CVE-2018-14887Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier
- CVE-2019-12932A stored XSS vulnerability was found in SeedDMS 5.1.11 due to poorly escaping the search result in the autocomplete search form placed in th
- CVE-2018-14916LOYTEC LGATE-902 6.3.2 devices allow Arbitrary file deletion.
- CVE-2018-14918LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal.
- CVE-2018-14919LOYTEC LGATE-902 6.3.2 devices allow XSS.
- CVE-2019-4269IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin Console could allow a remote attacker to obtain sensitive information when a sIBM WebSphere Application Server
- CVE-2018-15519Various Lexmark devices have a Buffer Overflow (issue 1 of 2).
- CVE-2018-15520Various Lexmark devices have a Buffer Overflow (issue 2 of 2).
- CVE-2018-15555On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with the user "root" and password "admin" by us
- CVE-2019-13012The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_with_parents (kfsb->d
- CVE-2019-12997In Loopchain through 2.2.1.3, an attacker can escalate privileges from a low-privilege shell by changing the environment (aka injection in t
- CVE-2019-12995Istio before 1.2.2 mishandles certain access tokens, leading to "Epoch 0 terminated with an error" in Envoy.