Archive
25 January 2019
Vulnerabilities first published on this day (UTC), newest first.
13 results · Feed
-
Unscored —
An issue was discovered in Bento4 1.5.1-628. The AP4_ElstAtom class in Core/Ap4ElstAtom.cpp has an attempted excessive …
-
Unscored —
Hetronic Nova-M prior to verson r161 uses fixed codes that are reproducible by sniffing and re-transmission. This can l…
-
Unscored —
A specially crafted script could bypass the authentication of a maintenance port of Emerson DeltaV DCS Versions 11.3.1,…
-
Unscored —
Pilz PNOZmulti Configurator prior to version 10.9 allows an authenticated attacker with local access to the system cont…
-
Medium 5.3
A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted…
-
Medium 4.2
A flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may …
-
Unscored —
murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the dat…
-
Unscored —
An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. It is a buffer over-read in ps_mix_phase in…
-
Unscored —
SQL Injection was found in S-CMS version V3.0 via the alipay/alipayapi.php O_id parameter.
-
Unscored —
PostGIS 2.x before 2.3.3, as used with PostgreSQL, allows remote attackers to cause a denial of service via crafted ST_…
-
Medium 6.1CVE-2019-6804 Public exploit
Rundeck Community Edition vulnerable to Cross-site Scripting
An XSS issue was discovered on the Job Edit page in Rundeck Community Edition before 3.0.13, related to assets/javascripts/workflowStepEditorKO.js and views/execution/_wfitemEdit.gsp.
-
Unscored —
typora through 0.9.9.20.3 beta has XSS, with resultant remote command execution, via the left outline bar.
-
Medium 6.1CVE-2019-6802 Scanner template
CRLF Injection in pypiserver
CRLF Injection in pypiserver 1.2.5 and below allows attackers to set arbitrary HTTP headers and possibly conduct XSS attacks via a %0d%0a in a URI.