Skip to content
OpenAdvisories

Archive

7 January 2019

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2019-5489 Public exploit

    The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe pag…

  • Critical 9.8
    CVE-2018-11788 Public exploit

    XML External Entity Reference in Apache Karaf

    Apache Karaf provides a features deployer, which allows users to "hot deploy" a features XML by dropping the file directly in the deploy folder. The features XML is parsed by XMLInputFactory class. Apache Karaf XMLInputFactory class doesn't contain any mitiga…

  • Unscored —
    CVE-2018-5410 Public exploit

    Dokan file system driver contains a stack-based buffer overflow

    Dokan, versions between 1.0.0.5000 and 1.2.0.1000, are vulnerable to a stack-based buffer overflow in the dokan1.sys driver. An attacker can create a device handle to the system driver and send arbitrary input that will trigger the vulnerability. This vulnera…