Archive
30 January 2019
Vulnerabilities first published on this day (UTC), newest first.
18 results · Feed
-
Unscored —CVE-2018-17189 EPSS 19%
In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the …
-
Unscored —CVE-2018-17199 EPSS 20%
In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the sess…
-
Medium 6.8CVE-2018-3956 EPSS 46%
An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Softw…
-
Unscored —CVE-2019-0190 EPSS 60%
A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request…
-
Unscored —
In libdoc through 2019-01-28, doc2text in catdoc.c has a NULL pointer dereference.
-
Unscored —
An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/..…
-
Unscored —
An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/..…
-
Unscored —
An issue was discovered in idreamsoft iCMS 7.0.13. editor/editor.admincp.php allows admincp.php?app=editor&do=fileManag…
-
Unscored —
An issue was discovered in idreamsoft iCMS 7.0.13 on Windows. editor/editor.admincp.php allows admincp.php?app=files&do…
-
Unscored —
The PAN-OS management web interface in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earli…
-
Unscored —
The PAN-OS external dynamics lists in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlie…
-
Unscored —CVE-2019-3911 Scanner template
Reflected cross-site scripting (XSS) vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 allows an…
-
Unscored —CVE-2019-3912 Scanner template
An open redirect vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 via the /__r1/ returnURL para…
-
Unscored —
Command manipulation in LabKey Server Community Edition before 18.3.0-61806.763 allows an authenticated remote attacker…
-
Unscored —
LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for…
-
Unscored —
LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-201…
-
Unscored —
LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-20…
-
Unscored —
Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior whe…