Archive
16 January 2019
Vulnerabilities first published on this day (UTC), newest first.
212 results · Feed
-
Unscored —
An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration helpurl settings allowed…
-
Unscored —CVE-2019-6263 Public exploit
An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration Text Filter settings all…
-
Critical 9.8
Numpy Deserialization of Untrusted Data
An issue was discovered in NumPy before 1.16.3. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue be…
-
Unscored —
An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack-based buffer over-rea…
-
Unscored —
An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can write one byte out of bounds in ntpd via …
-
Unscored —
An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read b…
-
Unscored —
An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd…
-
Unscored —
Serendipity 2.0.4 has XSS via the serendipity_admin.php serendipity[body] parameter.
-
Unscored —
Zenbership v107 has CSRF via admin/cp-functions/event-add.php.
-
Unscored —CVE-2019-6440 Public exploit
Zemana AntiMalware before 3.0.658 Beta mishandles update logic.
-
Unscored —
ABB Relion 630 devices 1.1 before 1.1.0.C0, 1.2 before 1.2.0.B3, and 1.3 before 1.3.0.A6 allow remote attackers to caus…
-
Unscored —
examples/benchmark/tls_bench.c in a benchmark tool in wolfSSL through 3.15.7 has a heap-based buffer overflow.