CVEs published in June 2019
9 tracked CVEs from 4 vendors had their first vendor advisory published in June 2019: 2 critical, 3 high, 2 in CISA KEV. Newest first.
2 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2019-12949Medium
In pfSense 2.4.4-p2 and 2.4.4-p3, if it is possible to trick an authenticated administrator into clicking on a button on a…
pfSense · 1 advisory - Added
CVE-2019-10072Unrated
The fix for CVE-2019-0199 was incomplete and did not address HTTP/2 connection window exhaustion on write in Apache Tomcat versions 9.0.0.M1 to 9.0.19 and 8.5.0 to 8.5.40
Apache · 1 advisory - Added
CVE-2019-1069HighCISA KEV
Microsoft Task Scheduler Privilege Escalation Vulnerability
MS Server · 1 advisory - Added
CVE-2010-5330CriticalCISA KEV
Ubiquiti AirOS Command Injection Vulnerability
Ubiquiti · 1 advisory - Added
CVE-2018-5264Medium
Ubiquiti UniFi 52 devices, when Hotspot mode is used
Ubiquiti · 1 advisory - Added
CVE-2018-5265High
Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin credentials
Ubiquiti · 1 advisory - Added
CVE-2019-12727High
On Ubiquiti airCam 3.1.4 devices, a Denial of Service vulnerability exists in the RTSP Service provided by the ubnt-streamer…
Ubiquiti · 1 advisory - Added
CVE-2019-12585Critical
Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an Arbitrary Command Execution issue in…
pfSense · 1 advisory - Added
CVE-2019-12584Medium
Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an XSS issue in apcupsd_status.php
pfSense · 1 advisory