Archive
2 February 2018
Vulnerabilities first published on this day (UTC), newest first.
66 results · Feed
-
Unscored —
The editinword resource in Atlassian Confluence Server before version 6.4.0 allows remote attackers to inject arbitrary…
-
Unscored —
The /rest/review-coverage-chart/1.0/data/<repository_name>/.json resource in Atlassian Fisheye and Crucible before vers…
-
Unscored —
The usermacros resource in Atlassian Confluence Server before version 6.3.4 allows remote attackers to inject arbitrary…
-
Unscored —
Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create cer…
-
Unscored —
In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and there…
-
Unscored —
Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to cr…
-
Unscored —
Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain f…
-
Unscored —
In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzip_disk_findfirst function …
-
Unscored —
In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by loading of a misaligned …
-
Unscored —
Ipswitch MoveIt v8.1 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability, as demonstrated by human.aspx.…
-
Unscored —
view_all_bug_page.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to discover the full pat…
-
Unscored —
A buffer overflow vulnerability in the control protocol of Flexense SyncBreeze Enterprise v10.4.18 allows remote attack…
-
Unscored —
pdf_load_obj_stm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream recursively and therefore …
-
Unscored —
An issue was discovered in Icinga 2.x through 2.8.1. The daemon creates an icinga2.pid file after dropping privileges t…
-
Unscored —
A use-after-free issue was discovered in libwebm through 2018-02-02. If a Vp9HeaderParser was initialized once before, …
-
Unscored —
In GNU Binutils 2.30, there's an integer overflow in the function load_specific_debug_section() in objdump.c, which res…
-
Unscored —
Monstra CMS through 3.0.4 has XSS in the title function in plugins/box/pages/pages.plugin.php via a page title to admin…
-
Unscored —
In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling disk64_trailer local …
-
Unscored —
A double-free bug in the read_gif function in gifread.c in gifsicle 1.90 allows a remote attacker to cause a denial-of-…
-
Medium 6.1
SimpleSAMLphp Open redirection protection bypass
SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL.
-
Unscored —
In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKRgFtXp.SYS) allows local users to cause a denial of service (B…
-
Critical 9.8
SimpleSAMLphp Use of insecure connection charset (sqlauth module)
The sqlauth module in SimpleSAMLphp before 1.15.2 relies on the MySQL utf8 charset, which truncates queries upon encountering four-byte characters. There might be a scenario in which this allows remote attackers to bypass intended access restrictions.
-
Unscored —
In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSO…
-
Unscored —
In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSO…
-
High 7.5
SimpleSAMLphp SAML2 library Regular Expression Denial of Service vulnerability
The SAML2 library before 1.10.4, 2.x before 2.3.5, and 3.x before 3.1.1 in SimpleSAMLphp has a Regular Expression Denial of Service vulnerability for fraction-of-seconds data in a timestamp.
-
Unscored —
In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSO…