Recent vulnerabilities and exploits

NA
CVE-2018-2004

There is a security vulnerability in the Report Builder shipped with Jazz Reporting Service....

NA
CVE-2018-2007

IBM API Connect has addressed the following vulnerability....

NA
CVE-2019-4047

There is a security vulnerability in the Lifecycle Query Engine (LQE) shipped with Jazz Reporting Service....

NA
CVE-2019-11518

An issue was discovered in SEMCMS 3.8. SEMCMS_Inquiry.php allows AID[] SQL Injection because the class.phpmailer.php inject_check_sql protection mechanism is incomplete....

NA
CVE-2019-11519

Libraries/Nop.Services/Localization/LocalizationService.cs in nopCommerce through 4.10 allows XXE via the "Configurations -> Languages -> Edit Language -> Import Resources -> Upload XML file" screen....

NA
CVE-2019-3900

Impact: Important Public Date: 2019-04-25 CWE: CWE-835 Bugzilla: ...

NA
CVE-2019-10912

What's new in Symfony? News in April 2019: New in 4.3: 4.3: Improved HttpCache logging 4.3: URL Helper 4.3: Sodium password encoder 4.3: Simpler access to Intl data 4.3: Workflow improvements 4.3: Better inflector 4.3: Timezone validator 4.3: Better console...

NA
CVE-2019-10913

What's new in Symfony? News in April 2019: New in 4.3: 4.3: Improved HttpCache logging 4.3: URL Helper 4.3: Sodium password encoder 4.3: Simpler access to Intl data 4.3: Workflow improvements 4.3: Better inflector 4.3: Timezone validator 4.3: Better console...

NA
CVE-2019-6468

Multiple BIND vulnerabilities disclosed (CVE-2018-5743, CVE-2019-6467, and CVE-2019-6468)...

NA
CVE-2019-5624

Rubyzip RCE affects Metasploit...