Archive

8 January 2019

Vulnerabilities first published on this day (UTC), newest first.

← December 2018 2019 / January /8 February 2019 →

All Critical High Medium Low Exploited only Public exploit

71 results · Feed

High 7.5

CVE-2019-0568 Public exploit EPSS 69%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Jan 8, 2019
High 8.8

CVE-2019-0541 Exploited Public exploit EPSS 53%

A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML …

Microsoft Microsoft Office Internet Explorer 11 Internet Explorer 9

Jan 8, 2019
KEV Nov 3, 2021
High 7.8

CVE-2019-0543 Exploited · Ransomware Public exploit

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft …

Jan 8, 2019
KEV Mar 15, 2022
Unscored —

CVE-2019-0573 Public exploit EPSS 20%

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations…

Microsoft Windows Server 2019 Windows Server 2016 Windows 10 Windows

Jan 8, 2019
Medium 5.4

CVE-2019-0558

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…

Microsoft Microsoft SharePoint Server Microsoft SharePoint Microsoft Business Productivity Servers

Jan 8, 2019
High 7.5

CVE-2019-0539 Public exploit EPSS 83%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Jan 8, 2019
Unscored —

CVE-2019-0551

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input fro…

Microsoft Windows Server 2019 Windows Server 2016 Windows 10 Windows

Jan 8, 2019
High 7.5

CVE-2019-0564

Denial of service in ASP.NET Core

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.

Microsoft ASP.NET Core Microsoft.NETCore.App Microsoft.AspNetCore.All NuGet

Jan 8, 2019
High 7.5

CVE-2019-0545

Exposure of Sensitive Information in System.Net.Http

An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Mi…

Microsoft .NET Core Microsoft .NET Framework Microsoft.NETCore.App NuGet

Jan 8, 2019
Unscored —

CVE-2019-0585 EPSS 22%

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…

Microsoft Microsoft Office Microsoft SharePoint Server Microsoft Office Online Server

Jan 8, 2019
Unscored —

CVE-2019-0549

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Jan 8, 2019
Unscored —

CVE-2019-0537

An information disclosure vulnerability exists when Visual Studio improperly discloses arbitrary file contents if the v…

Microsoft Microsoft Visual Studio

Jan 8, 2019
Medium 5.4

CVE-2019-0557

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…

Microsoft Microsoft SharePoint

Jan 8, 2019
Unscored —

CVE-2019-0570 Public exploit

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Wind…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Jan 8, 2019
Unscored —

CVE-2019-0548

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of…

Microsoft ASP.NET Core

Jan 8, 2019
Unscored —

CVE-2018-2499

A security weakness in SAP Financial Consolidation Cube Designer (BOBJ_EADES fixed in versions 8.0, 10.1) may allow an …

SAP SAP Financial Consolidation Cube Designer (BOBJ_EADES)

Jan 8, 2019
Unscored —

CVE-2018-2484

SAP Enterprise Financial Services (fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5…

SAP SAP Enterprise Financial Services (S4CORE) SAP Enterprise Financial Services (SAPSCORE) SAP Enterprise Financial Services (EA-FINSERV)

Jan 8, 2019
Unscored —

CVE-2019-0240

SAP Business Objects Mobile for Android (before 6.3.5) application allows an attacker to provide malicious input in the…

SAP SAP Business Objects Mobile for Android Android

Jan 8, 2019
Unscored —

CVE-2019-0246

SAP Cloud Connector, before version 2.11.3, does not perform any authentication checks for functionalities that require…

SAP SAP Cloud Connector

Jan 8, 2019
Unscored —

CVE-2019-0248

Under certain conditions SAP Gateway of ABAP Application Server (fixed in SAP_GWFND 7.5, 7.51, 7.52, 7.53; SAP_BASIS 7.…

SAP SAP Gateway of ABAP Application Server(SAP_GWFND) SAP Gateway of ABAP Application Server(SAP_BASIS)

Jan 8, 2019
Unscored —

CVE-2019-0245

SAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8.01) does not sufficien…

SAP SAP CRM WebClient UI (SAPSCORE) SAP CRM WebClient UI (WEBCUIF) SAP CRM WebClient UI (S4FND)

Jan 8, 2019
Unscored —

CVE-2019-0238

SAP Commerce (previously known as SAP Hybris Commerce), before version 6.7, does not sufficiently encode user-controlle…

SAP SAP Commerce (ex. SAP Hybris Commerce)

Jan 8, 2019
Unscored —

CVE-2019-0249

Under certain conditions SAP Landscape Management (VCM 3.0) allows an attacker to access information which would otherw…

SAP SAP Landscape Management(VCM)

Jan 8, 2019
Unscored —

CVE-2019-0241

SAP Work and Inventory Manager (Agentry_SDK , before 7.0, 7.1) allows an attacker to prevent legitimate users from acce…

SAP SAP Work and Inventory Manager (Agentry_SDK)

Jan 8, 2019
Unscored —

CVE-2019-0243

Under some circumstances, masterdata maintenance in SAP BW/4HANA (fixed in DW4CORE version 1.0 (SP08)) does not perform…

SAP SAP BW/4HANA (DW4CORE)

Jan 8, 2019
Unscored —

CVE-2019-0247

SAP Cloud Connector, before version 2.11.3, allows an attacker to inject code that can be executed by the application. …

SAP SAP Cloud Connector

Jan 8, 2019
Unscored —

CVE-2019-0244

SAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8.01) does not sufficien…

SAP SAP CRM WebClient UI (S4FND) SAP CRM WebClient UI (SAPSCORE) SAP CRM WebClient UI (WEBCUIF)

Jan 8, 2019
Medium 4.0

CVE-2018-1993

IBM Spectrum Scale (GPFS) 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 where the use of Local Read Only Cache (LROC) is…

IBM Spectrum Scale

Jan 8, 2019
Medium 5.4

CVE-2018-1918

IBM Jazz Reporting Service (JRS) 6.0.3, 6.0.4, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerabili…

IBM Jazz Reporting Service

Jan 8, 2019
Medium 4.9

CVE-2018-1932 Public exploit

IBM API Connect 5.0.0.0 through 5.0.8.4 is affected by a vulnerability in the role-based access control in the manageme…

IBM API Connect

Jan 8, 2019
Unscored —

CVE-2019-5720

includes/db/class.reflines_db.inc in FrontAccounting 2.4.6 contains a SQL Injection vulnerability in the reference fiel…

Jan 8, 2019