Archive

25 January 2019

Vulnerabilities first published on this day (UTC), newest first.

← December 2018 2019 / January /25 February 2019 →

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Medium 5.3

CVE-2018-16881

A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted…

The rsyslog Project rsyslog: rsyslog rsyslog Debian Ubuntu

Jan 25, 2019
Medium 4.2

CVE-2019-3819

A flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may …

The Linux Foundation Kernel linux-raspi2 linux-hwe Debian Ubuntu Azure Linux

Jan 25, 2019
Medium 6.1

CVE-2019-6804 Public exploit

Rundeck Community Edition vulnerable to Cross-site Scripting

An XSS issue was discovered on the Job Edit page in Rundeck Community Edition before 3.0.13, related to assets/javascripts/workflowStepEditorKO.js and views/execution/_wfitemEdit.gsp.

org.rundeck:rundeck Maven

Jan 25, 2019
Medium 6.1

CVE-2019-6802 Scanner template

CRLF Injection in pypiserver

CRLF Injection in pypiserver 1.2.5 and below allows attackers to set arbitrary HTTP headers and possibly conduct XSS attacks via a %0d%0a in a URI.

pypiserver PyPI

Jan 25, 2019