Archive
14 January 2019
Vulnerabilities first published on this day (UTC), newest first.
14 results · Feed
-
Medium 4.4
It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. When…
-
Unscored —
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthese_scope in prelexer.hpp.
-
Unscored —
The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a…
-
Unscored —
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skip_over_scopes in prelexer.hpp when called …
-
Unscored —
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp.
-
Medium 6.8
go.etcd.io/etcd Authentication Bypass
etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control (RBAC) is used and client-cert-auth is enabled. If an etcd client server TLS certificate contains a Common Name (CN) wh…
-
Unscored —
XSS exists in JPress v1.0.4 via Markdown input, or Markdown input with the code input option.
-
Critical 9.0
IBM Security Identity Manager 6.0.0 allows the attacker to upload or transfer files of dangerous types that can be auto…
-
Medium 5.9
IBM Security Identity Manager 6.0.0 does not require that users should have strong passwords by default, which makes it…
-
Medium 6.1
IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb…
-
Unscored —
An issue was discovered in idreamsoft iCMS V7.0.13. There is SQL Injection via the app/article/article.admincp.php _dat…
-
Unscored —
A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93.…
-
Unscored —
WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirec…
-
High 7.7
elFinder Server Side Request Forgery (SSRF)
A Server Side Request Forgery (SSRF) vulnerability in elFinder before 2.1.46 could allow a malicious user to access the content of internal network resources. This occurs in get_remote_contents() in php/elFinder.class.php.