Archive
8 January 2019
Vulnerabilities first published on this day (UTC), newest first.
71 results · Feed
-
Unscored —
In Wireshark 2.6.0 to 2.6.5, the 6LoWPAN dissector could crash. This was addressed in epan/dissectors/packet-6lowpan.c …
-
Unscored —
qibosoft through V7 allows remote attackers to read arbitrary files via the member/index.php main parameter, as demonst…
-
Unscored —
In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the P_MUL dissector could crash. This was addressed in epan/dissectors…
-
Unscored —
In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by ch…
-
Unscored —
In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash. This was ad…
-
Unscored —
In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash. This was addressed in epan/dissector…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations…
-
Unscored —
An information disclosure vulnerability exists when Microsoft Outlook improperly handles certain types of messages, aka…
-
Unscored —CVE-2019-0538 EPSS 20%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-0578 EPSS 14%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Wo…
-
Unscored —
An elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle specific authentication …
-
Unscored —CVE-2019-0581 EPSS 14%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft …
-
High 7.5
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —CVE-2019-0555 Public exploit
An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escap…
-
Unscored —CVE-2019-0577 EPSS 17%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, a…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Unscored —CVE-2019-0576 EPSS 17%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations…
-
Unscored —CVE-2019-0586 EPSS 15%
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle …
-
Unscored —
An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors …
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…
-
Unscored —CVE-2019-0583 EPSS 16%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-0546 EPSS 16%
A remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly handles specific combina…
-
Unscored —CVE-2019-0575 EPSS 14%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-0582 EPSS 12%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…
-
Unscored —
An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, a…
-
Unscored —CVE-2019-0580 EPSS 17%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object, aka "Microsoft Edge Elevati…
-
Unscored —CVE-2019-0579 EPSS 17%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-0552 Public exploit
An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability."…
-
Unscored —CVE-2019-0547 EPSS 71%
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP respo…
-
Unscored —CVE-2019-0584 EPSS 14%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input fro…
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…