Skip to content
OpenAdvisories

Archive

16 January 2019

Vulnerabilities first published on this day (UTC), newest first.

← December 2018 2019 / January /16 February 2019 →
  1. 14
  2. 229
  3. 358
  4. 410
  5. 5 
  6. 6 
  7. 78
  8. 871
  9. 9196
  10. 1048
  11. 1158
  12. 124
  13. 139
  14. 1414
  15. 1560
  16. 16212
  17. 1712
  18. 18123
  19. 193
  20. 20 
  21. 214
  22. 2227
  23. 2330
  24. 24107
  25. 2513
  26. 263
  27. 272
  28. 2828
  29. 2934
  30. 3018
  31. 3129
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 7.5
    CVE-2018-5740 Public exploit EPSS 60%

    A flaw in the "deny-answer-aliases" feature can cause an assertion failure in named

    "deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine
  • High 7.5
    CVE-2017-3143 Public exploit EPSS 18%

    An error in TSIG authentication can permit unauthorized dynamic updates

    An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an unauthorized dynamic update. Affects BI…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine
  • High 7.2
    CVE-2017-3141 Public exploit

    Windows service and uninstall paths are not quoted when BIND is installed

    The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege escalation if the host file system permissions allow this. Affects BIND 9.2.6-P2->9.2.9, 9.3.2-P1->9.3.6, 9.4.0->9.8.8, 9.9.0->9.9.10, 9.10.0->9.10.…

    ISC BIND 9 bind Alpine
  • Unscored —
    CVE-2019-2525 Public exploit

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…

    Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  • Unscored —
    CVE-2019-2413 Public exploit

    Vulnerability in the Oracle Reports Developer component of Oracle Fusion Middleware (subcomponent: Valid Session). The …

  • Unscored —
    CVE-2019-6447 Public exploit EPSS 64%

    The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary f…

  • Unscored —
    CVE-2019-6263 Public exploit

    An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration Text Filter settings all…

  • Critical 9.8
    CVE-2019-6446 Public exploit EPSS 27%

    Numpy Deserialization of Untrusted Data

    An issue was discovered in NumPy before 1.16.3. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue be…

    numpy PyPI
  • Unscored —
    CVE-2019-6443 Public exploit Scanner template EPSS 67%

    An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack-based buffer over-rea…

    ntpsec ntpsec ntpsec Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-6442 Public exploit EPSS 14%

    An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can write one byte out of bounds in ntpd via …

    ntpsec ntpsec ntpsec Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-6444 Public exploit EPSS 46%

    An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read b…

    ntpsec ntpsec ntpsec Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-6445 Public exploit EPSS 15%

    An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd…

    ntpsec ntpsec ntpsec Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-6440 Public exploit

    Zemana AntiMalware before 3.0.658 Beta mishandles update logic.