Skip to content
OpenAdvisories

Archive

16 January 2019

Vulnerabilities first published on this day (UTC), newest first.

212 results · Feed

  • Unscored —

    An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration helpurl settings allowed…

  • Unscored —
    CVE-2019-6263 Public exploit

    An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration Text Filter settings all…

  • Critical 9.8
    CVE-2019-6446 Public exploit EPSS 27%

    Numpy Deserialization of Untrusted Data

    An issue was discovered in NumPy before 1.16.3. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue be…

  • Unscored —
    CVE-2019-6443 Public exploit Scanner template EPSS 67%

    An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack-based buffer over-rea…

  • Unscored —
    CVE-2019-6442 Public exploit EPSS 14%

    An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can write one byte out of bounds in ntpd via …

  • Unscored —
    CVE-2019-6444 Public exploit EPSS 46%

    An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read b…

  • Unscored —
    CVE-2019-6445 Public exploit EPSS 15%

    An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd…

  • Unscored —

    Serendipity 2.0.4 has XSS via the serendipity_admin.php serendipity[body] parameter.

  • Unscored —

    Zenbership v107 has CSRF via admin/cp-functions/event-add.php.

  • Unscored —
    CVE-2019-6440 Public exploit

    Zemana AntiMalware before 3.0.658 Beta mishandles update logic.

  • Unscored —

    ABB Relion 630 devices 1.1 before 1.1.0.C0, 1.2 before 1.2.0.B3, and 1.3 before 1.3.0.A6 allow remote attackers to caus…

  • Unscored —

    examples/benchmark/tls_bench.c in a benchmark tool in wolfSSL through 3.15.7 has a heap-based buffer overflow.