CVEs published in May 2019
7 tracked CVEs from 4 vendors had their first vendor advisory published in May 2019: 5 high. Newest first.
- Added
CVE-2019-12347Medium
In pfSense 2.4.4-p3, a stored XSS vulnerability occurs when attackers inject a payload into the Name or Description field
pfSense · 1 advisory - Added
CVE-2020-9290High
Fortinet · 3 advisories - Added
CVE-2020-9287High
Fortinet · 3 advisories - Added
CVE-2019-5589High
Fortinet · 3 advisories - Added
CVE-2019-0221Unrated
The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escaping and is, therefore, vulnerable to XSS
Apache · 1 advisory - Added
CVE-2019-11816High
Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3
pfSense · 1 advisory - Added
CVE-2019-7181High
Buffer Overflow vulnerability in myQNAPcloud Connect 1.3.3.0925 and earlier could allow remote attackers to crash the program
QNAP · 1 advisory