Total
408970 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2019-16153 | 1 Fortinet | 1 Fortisiem | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials. | |||||
| CVE-2019-16152 | 1 Fortinet | 1 Forticlient | 2026-06-17 | 6.8 MEDIUM | 6.5 MEDIUM |
| A Denial of service (DoS) vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to cause FortiClient processes running under root privilege crashes via sending specially crafted IPC client requests to the fctsched process due the nanomsg not been correctly validated. | |||||
| CVE-2019-16151 | 1 Fortinet | 1 Fortios | 2026-06-17 | N/A | 4.7 MEDIUM |
| An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS 6.4.1 and below, 6.2.9 and below may allow a remote unauthenticated attacker to either redirect users to malicious websites via a crafted "Host" header or to execute JavaScript code in the victim's browser context. This happens when the FortiGate has web filtering and category override enabled/configured. | |||||
| CVE-2019-16150 | 1 Fortinet | 1 Forticlient | 2026-06-17 | 5.0 MEDIUM | 5.5 MEDIUM |
| Use of a hard-coded cryptographic key to encrypt security sensitive data in local storage and configuration in FortiClient for Windows prior to 6.4.0 may allow an attacker with access to the local storage or the configuration backup file to decrypt the sensitive data via knowledge of the hard-coded key. | |||||
| CVE-2019-16149 | 1 Fortinet | 1 Forticlientems | 2026-06-17 | N/A | 5.5 MEDIUM |
| An Improper Neutralization of Input During Web Page Generation in FortiClientEMS version 6.2.0 may allow a remote attacker to execute unauthorized code by injecting malicious payload in the user profile of a FortiClient instance being managed by the vulnerable system. | |||||
| CVE-2019-16148 | 1 Sakailms | 1 Sakai | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| Sakai through 12.6 allows XSS via a chat user name. | |||||
| CVE-2019-16147 | 1 Liferay | 1 Liferay Portal | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journal_article/page.jsp in journal/journal-taglib. | |||||
| CVE-2019-16146 | 1 Getgophish | 1 Gophish | 2026-06-17 | 3.5 LOW | 4.8 MEDIUM |
| Gophish through 0.8.0 allows XSS via a username. | |||||
| CVE-2019-16145 | 1 Padrinorb | 1 Padrino-contrib | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption. | |||||
| CVE-2019-16144 | 1 Generator-rs Project | 1 Generator-rs | 2026-06-17 | 7.8 HIGH | 7.5 HIGH |
| An issue was discovered in the generator crate before 0.6.18 for Rust. Uninitialized memory is used by Scope, done, and yield_ during API calls. | |||||
| CVE-2019-16143 | 1 Blake2 | 1 Blake2-rust | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| An issue was discovered in the blake2 crate before 0.8.1 for Rust. The BLAKE2b and BLAKE2s algorithms, when used with HMAC, produce incorrect results because the block sizes are half of the required sizes. | |||||
| CVE-2019-16142 | 1 Renderdocs-rs Project | 1 Renderdocs-rs | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| An issue was discovered in the renderdoc crate before 0.5.0 for Rust. Multiple exposed methods take self by immutable reference, which is incompatible with a multi-threaded application. | |||||
| CVE-2019-16141 | 1 Once Cell Project | 1 Once Cell | 2026-06-17 | 5.0 MEDIUM | 7.5 HIGH |
| An issue was discovered in the once_cell crate before 1.0.1 for Rust. There is a panic during initialization of Lazy. | |||||
| CVE-2019-16140 | 1 Isahc Project | 1 Isahc | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| An issue was discovered in the chttp crate before 0.1.3 for Rust. There is a use-after-free during buffer conversion. | |||||
| CVE-2019-16139 | 1 Compact Arena Project | 1 Compact Arena | 2026-06-17 | 9.0 HIGH | 9.8 CRITICAL |
| An issue was discovered in the compact_arena crate before 0.4.0 for Rust. Generativity is mishandled, leading to an out-of-bounds write or read. | |||||
| CVE-2019-16138 | 1 Image-rs | 1 Image | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::set_len is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution. | |||||
| CVE-2019-16137 | 1 Spin-rs Project | 1 Spin-rs | 2026-06-17 | 7.8 HIGH | 7.5 HIGH |
| An issue was discovered in the spin crate before 0.5.2 for Rust, when RwLock is used. Because memory ordering is mishandled, two writers can acquire the lock at the same time, violating mutual exclusion. | |||||
| CVE-2019-16133 | 1 Weaver | 1 Eteams Oa | 2026-06-17 | 4.0 MEDIUM | 6.5 MEDIUM |
| An issue was discovered in eteams OA v4.0.34. Because the session is not strictly checked, the account names and passwords of all employees in the company can be obtained by an ordinary account. Specifically, the attacker sends a jsessionid value for URIs under app/profile/summary/. | |||||
| CVE-2019-16132 | 1 Phpok | 1 Oklite | 2026-06-17 | 5.5 MEDIUM | 6.5 MEDIUM |
| An issue was discovered in OKLite v1.2.25. framework/admin/tpl_control.php allows remote attackers to delete arbitrary files via a title directory-traversal pathname followed by a crafted substring. | |||||
| CVE-2019-16131 | 1 Phpok | 1 Oklite | 2026-06-17 | 6.5 MEDIUM | 8.8 HIGH |
| framework/admin/modulec_control.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability because a .php file from a ZIP archive can be written to /data/cache/. | |||||