Archive
20 July 2018
Vulnerabilities first published on this day (UTC), newest first.
157 results · Feed
-
Medium 4.4
IBM Sterling B2B Integrator Standard Edition 5.2 through 5.2.6 could allow a local user with administrator privileges t…
-
Medium 4.3
IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote authenticated attacker to obtain sensitive informati…
-
Medium 5.4CVE-2018-1563 Public exploit
IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) is vulnerable to cross-sit…
-
Unscored —
An issue was discovered in WUZHI CMS 4.1.0. The vulnerable file is coreframe/app/order/admin/goods.php. The $keywords p…
-
Unscored —
dwg_obj_block_control_get_block_headers in dwg_api.c in GNU LibreDWG 0.5.1048 allows remote attackers to cause a denial…
-
Medium 5.1
IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) uses weaker than expected …
-
Low 2.4
IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) caches usernames and passw…
-
Medium 4.3
IBM Sterling B2B Integrator 5.2 through 5.2.6 could allow an authenticated attacker to obtain sensitive variable name i…
-
Unscored —
An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in the function DLS::Info::UpdateChunks in DLS…
-
Unscored —
An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in pData[0] access in the function store32 in …
-
Unscored —
An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the function RIFF::Chunk::Read in RIFF.cpp.
-
Unscored —
An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the "always assign the sample of the first d…
-
Unscored —
An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in the function RIFF::Chunk::Read in RIF…
-
Unscored —
An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in pData[1] access in the function store…
-
Unscored —
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_sdsp…
-
Unscored —
An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in the function DLS::Info::SaveString in DLS.c…
-
Unscored —
An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in pData[1] access in the function store…
-
Unscored —
An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in pData[0] access in the function store16 in …
-
Unscored —
An issue was discovered in libgig 4.1.0. There is an out of bounds read in gig::File::UpdateChunks in gig.cpp.
-
Unscored —
An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the "update dimension region's chunks" featu…
-
Unscored —
Codec::parse in track.cpp in Untrunc through 2018-06-07 has a NULL pointer dereference via a crafted MP4 file because o…
-
Unscored —
get_first_owned_object in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service (SEGV).
-
Unscored —
In Bento4 v1.5.1-624, AP4_File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service (infini…
-
Unscored —
trim_whitespace in lexer.l in libConfuse v3.2.1 has an out-of-bounds read.
-
Unscored —
libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to an out-of-bounds read …
-
Unscored —CVE-2018-14442 Public exploit
Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to Remote Code Execution, aka V-88f4…
-
Unscored —
camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds…
-
Unscored —
In Wireshark through 2.6.2, the create_app_running_mutex function in wsutil/file_util.c calls SetSecurityDescriptorDacl…
-
Unscored —
ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c.
-
Unscored —
espritblock eos4j, an unofficial SDK for EOS, through 2018-07-12 mishandles floating-point numbers with more than four …
-
Unscored —
An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. admin/admin/fileUploadAction_fileUpload.ac…
-
Unscored —
ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c.
-
Unscored —
MP4Integer32Property::Read in atom_avcC.cpp in MP4v2 2.1.0 allows remote attackers to cause a denial of service (heap-b…
-
Unscored —
ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c.
-
Unscored —
ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c.
-
Unscored —
An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. SQL injection exists via the admin/noticeM…
-
Unscored —
The debug handler in Symfony before v2.7.33, 2.8.x before v2.8.26, 3.x before v3.2.13, and 3.3.x before v3.3.6 has XSS …