Security Vulnerabilities - CVEs Published In May 2019
Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability. Successful exploitation could lead to arbitrary code execution. Fixed in versions 13.1.1 and 14.0.2.
CVSS Score
9.8
EPSS Score
0.064
Published
2019-05-23
Adobe Bridge CC versions 9.0.2 have a heap overflow vulnerability. Successful exploitation could lead to remote code execution.
CVSS Score
9.8
EPSS Score
0.123
Published
2019-05-23
In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and admin/status/realtime/wireless_status of the web application are affected by a command injection vulnerability.
CVSS Score
9.8
EPSS Score
0.377
Published
2019-05-23
Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a user. If an attacker has a token allowing them to read the user details of a victim, they can login as the victim.
CVSS Score
9.8
EPSS Score
0.004
Published
2019-05-23
Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF.
CVSS Score
4.3
EPSS Score
0.002
Published
2019-05-23
Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
CVSS Score
6.1
EPSS Score
0.004
Published
2019-05-23
Artifex Ghostscript 9.22 is affected by: Obtain Information. The impact is: obtain sensitive information. The component is: affected source code file, affected function, affected executable, affected libga (imagemagick used that). The attack vector is: Someone must open a postscript file though ghostscript. Because of imagemagick also use libga, so it was affected as well.
CVSS Score
5.5
EPSS Score
0.003
Published
2019-05-23
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions.
CVSS Score
9.8
EPSS Score
0.005
Published
2019-05-23
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
CVSS Score
5.4
EPSS Score
0.003
Published
2019-05-23
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Information Exposure.
CVSS Score
9.8
EPSS Score
0.005
Published
2019-05-23