Skip to content
OpenAdvisories

Archive

4 January 2019

Vulnerabilities first published on this day (UTC), newest first.

← December 2018 2019 / January /4 February 2019 →
  1. 14
  2. 229
  3. 358
  4. 410
  5. 5 
  6. 6 
  7. 78
  8. 871
  9. 9196
  10. 1048
  11. 1158
  12. 124
  13. 139
  14. 1414
  15. 1560
  16. 16212
  17. 1712
  18. 18123
  19. 193
  20. 20 
  21. 214
  22. 2227
  23. 2330
  24. 24107
  25. 2513
  26. 263
  27. 272
  28. 2828
  29. 2934
  30. 3018
  31. 3129
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Unscored —
    CVE-2018-20673

    The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an inte…

    binutils binutils crash Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2018-20671

    load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that…

    binutils binutils Debian Ubuntu
  • Critical 9.8
    CVE-2019-5312

    XML External Entity Reference in weixin-java-tools

    An issue was discovered in weixin-java-tools v3.3.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for CVE-2018-20318.

    com.github.binarywang:weixin-java-common Maven
  • Medium 5.4
    CVE-2018-1657

    IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to…

    IBM Rational Publishing Engine
  • Medium 4.3
    CVE-2018-1859

    IBM API Connect 5.0.0.0 through 5.0.8.4 could allow a user authenticated as an administrator with limited rights to esc…

    IBM API Connect
  • Medium 5.3
    CVE-2018-1888

    An untrusted search path vulnerability in IBM i Access for Windows versions 7.1 and earlier on Windows can allow arbitr…

    IBM i Access for Windows Windows
  • Medium 5.4
    CVE-2018-1951

    IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to…

    IBM Rational Publishing Engine
  • Unscored —
    CVE-2019-5311

    An issue was discovered in YUNUCMS V1.1.8. app/index/controller/Show.php has an XSS vulnerability via the index.php/ind…

  • Unscored —
    CVE-2019-5310

    YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as de…

  • Unscored —
    CVE-2019-5009 Public exploit

    Vtiger CRM 7.1.0 before Hotfix2 allows uploading files with the extension "php3" in the logo upload field, if the uploa…