Archive
29 January 2019
Vulnerabilities first published on this day (UTC), newest first.
34 results · Feed
-
Unscored —
Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authenticatio…
-
Unscored —
OX App Suite 7.8.4 and earlier allows Information Exposure.
-
Unscored —
OX App Suite 7.8.4 and earlier allows Directory Traversal.
-
Unscored —
OX App Suite 7.8.4 and earlier allows Server-Side Request Forgery.
-
Unscored —
TitanHQ SpamTitan before 7.01 has Improper input validation. This allows internal attackers to bypass the anti-spam fil…
-
Unscored —
ARM Trusted Firmware-A allows information disclosure.
-
Unscored —
PrinceXML, versions 10 and below, is vulnerable to XXE due to the lack of protection against external entities. If an a…
-
Unscored —CVE-2018-19782 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in GET requests in FreshRSS 1.11.1 allow remote attackers to inject…
-
Medium 4.8
Croogo vulnerable to XSS in title field
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/taxonomy/vocabularies.
-
Medium 4.8
Croogo vulnerable to Cross-site Scripting in title field
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/file-manager/attachments/edit/4.
-
Unscored —
A stored-self XSS exists in ATutor through v2.2.4, allowing an attacker to execute HTML or JavaScript code in a vulnera…
-
Medium 4.8
Croogo vulnerable to XSS in Blog field
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Blog field to /admin/nodes/nodes/add/blog.
-
Medium 4.8
Croogo vulnerable to XSS in title field
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/blocks/blocks/edit/8.
-
Medium 4.8
Croogo vulnerable to XSS in title field
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/menus/menus/edit/3.
-
Low 3.7
An issue has been found in PowerDNS Recursor versions 4.1.x before 4.1.9 where records in the answer section of respons…
-
Medium 5.4
An issue has been found in PowerDNS Recursor versions after 4.1.3 before 4.1.9 where Lua hooks are not properly applied…
-
Unscored —
Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8…
-
Medium 5.9
A flaw was found in the Linux kernel's handle_rx() function in the [vhost_net] driver. A malicious virtual guest, under…
-
Medium 5.3
IBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18, 7.5.2.0 through 7.5.2.18, and 7.6.0.0 through…
-
Medium 4.9
IBM API Connect 5.0.0.0 through 5.0.8.4 is impacted by sensitive information disclosure via a REST API that could allow…
-
Medium 5.3
IBM QRadar SIEM 7.2 and 7.3 fails to adequately filter user-controlled input data for syntax that has control-plane imp…
-
Unscored —
In 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user access management and c…
-
Unscored —
idreamsoft iCMS 7.0.13 allows admincp.php?app=files ../ Directory Traversal via the udir parameter to files.admincp.php…
-
Unscored —
In libdoc through 2019-01-28, calcFileBlockOffset in ole.c allows division by zero.
-
Unscored —
Various resources in Atlassian Crowd before version 2.10.1 allow remote attackers with administration rights to learn t…
-
Unscored —
In elfutils 0.175, there is a buffer over-read in the ebl_object_note function in eblobjnote.c in libebl. Remote attack…
-
Unscored —
An attempted excessive memory allocation was discovered in the function read_long_names in elf_begin.c in libelf in elf…
-
Unscored —
A NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in wasm/wasm.cpp in Binaryen 1.38.22. A cr…
-
Unscored —
A NULL pointer dereference was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when …
-
Unscored —
A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (wh…
-
Unscored —
The main function in tools/wasm2js.cpp in Binaryen 1.38.22 has a heap-based buffer overflow because Emscripten is misus…
-
Unscored —
An issue was discovered in elfutils 0.175. A segmentation fault can occur in the function elf64_xlatetom in libelf/elf3…
-
Unscored —
A heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils …
-
Unscored —
A buffer over-read exists in the function crc64ib in crc64.c in nasmlib in Netwide Assembler (NASM) 2.14rc16. A crafted…