January 2019

1,214 results · Feed

• Unscored —
  CVE-2018-19711

  Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…

  Jan 18, 2019
• Unscored —
  CVE-2018-19705

  Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…

  Jan 18, 2019
• Unscored —
  CVE-2018-19712

  Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…

  Jan 18, 2019
• Unscored —
  CVE-2018-19709

  Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…

  Jan 18, 2019
• Unscored —
  CVE-2018-19701

  Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…

  Jan 18, 2019
• Unscored —
  CVE-2018-19707

  Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…

  Jan 18, 2019
• Unscored —
  CVE-2018-19699

  Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…

  Jan 18, 2019
• Unscored —
  CVE-2018-19704

  Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…

  Jan 18, 2019
• Unscored —
  CVE-2018-19717

  Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…

  Jan 18, 2019
• Unscored —
  CVE-2018-19700

  Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…

  Jan 18, 2019
• Unscored —
  CVE-2018-19702

  Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…

  Jan 18, 2019
• Unscored —
  CVE-2018-19720

  Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…

  Jan 18, 2019
• Unscored —
  CVE-2018-19716

  Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…

  Jan 18, 2019
• Unscored —
  CVE-2018-19708

  Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…

  Jan 18, 2019
• Unscored —
  CVE-2018-19719

  Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…

  Jan 18, 2019
• Unscored —
  CVE-2018-19722

  Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlie…

  Jan 18, 2019
• Unscored —
  CVE-2018-19706

  Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…

  Jan 18, 2019
• Unscored —
  CVE-2018-19703

  Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…

  Jan 18, 2019
• Unscored —
  CVE-2018-19698

  Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…

  Jan 18, 2019
• Unscored —
  CVE-2018-19710

  Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2…

  Jan 18, 2019
• Unscored —
  CVE-2019-6487 Public exploit

  TP-Link WDR Series devices through firmware v3 (such as TL-WDR5620 V3.0) are affected by command injection (after login…

  Jan 18, 2019
• Unscored —
  CVE-2018-20735 Public exploit

  An issue was discovered in BMC PATROL Agent through 11.3.01. It was found that the PatrolCli application can allow for …

  Jan 17, 2019
• Unscored —
  CVE-2019-0646

  A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided …

  Microsoft Team
  Jan 17, 2019
• Unscored —
  CVE-2019-0624

  A spoofing vulnerability exists when a Skype for Business 2015 server does not properly sanitize a specially crafted re…

  Microsoft Skype
  Jan 17, 2019
• Unscored —
  CVE-2019-0647

  An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as…

  Microsoft Team
  Jan 17, 2019
• Unscored —
  CVE-2018-20731

  A stored cross site scripting (XSS) vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web…

  Jan 17, 2019
• Unscored —
  CVE-2018-20727

  Multiple command injection vulnerabilities in NeDi before 1.7Cp3 allow authenticated users to execute code on the serve…

  Jan 17, 2019
• Unscored —
  CVE-2018-20728

  A cross site request forgery (CSRF) vulnerability in NeDi before 1.7Cp3 allows remote attackers to escalate privileges …

  Jan 17, 2019
• Unscored —
  CVE-2018-20730

  A SQL injection vulnerability in NeDi before 1.7Cp3 allows any user to execute arbitrary SQL read commands via the quer…

  Jan 17, 2019
• Unscored —
  CVE-2018-20729

  A reflected cross site scripting (XSS) vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary …

  Jan 17, 2019
• Unscored —
  CVE-2015-9281

  Logon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout page.

  Jan 17, 2019
• Unscored —
  CVE-2018-20732

  SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserializati…

  Jan 17, 2019
• Unscored —
  CVE-2018-20733

  BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE.

  Jan 17, 2019
• Medium 6.5
  CVE-2018-18812

  TIBCO Spotfire Fails To Prevent Write Access to Spotfire Library

  The Spotfire Library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability that might theoretically fail to restrict users with read-only access from modifying files stored…

  TIBCO Software TIBCO Spotfire Analytics Platform for AWS Marketplace TIBCO Spotfire Server versions
  Jan 16, 2019
• High 8.8
  CVE-2018-18814

  TIBCO Spotfire Authentication Vulnerability

  The TIBCO Spotfire authentication component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability in the handling of the authentication that theoretically may allow an attacker to ga…

  TIBCO Software TIBCO Spotfire Analytics Platform for AWS Marketplace TIBCO Spotfire Server
  Jan 16, 2019
• High 8.8
  CVE-2018-18813

  TIBCO Spotfire Reflected and Persistent Cross-Site Scripting Vulnerabilities

  The Spotfire web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains multiple vulnerabilities that may allow persistent and reflected cross-site scripting attacks. Affected releas…

  TIBCO Software TIBCO Spotfire Analytics Platform for AWS Marketplace TIBCO Spotfire Server
  Jan 16, 2019
• High 7.7
  CVE-2018-15782

  DSA-2018-226: RSA® Authentication Manager Relative Path Traversal Vulnerability

  The Quick Setup component of RSA Authentication Manager versions prior to 8.4 is vulnerable to a relative path traversal vulnerability. A local attacker could potentially provide an administrator with a crafted license that if used during the quick setup depl…

  Dell RSA Authentication Manager
  Jan 16, 2019
• Medium 5.9
  CVE-2018-5737 EPSS 11%

  BIND 9.12's serve-stale implementation can cause an assertion failure in rbtdb.c or other undesirable behavior, even if serve-stale is not enabled.

  A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction between the serve-stale feature and NSEC aggressive negative…

  ISC BIND 9 bind Alpine
  Jan 16, 2019
• Medium 6.5
  CVE-2018-5739

  Failure to release memory may exhaust system resources

  An extension to hooks capabilities which debuted in Kea 1.4.0 introduced a memory leak for operators who are using certain hooks library facilities. In order to support multiple requests simultaneously, Kea 1.4 added a callout handle store but unfortunately t…

  ISC Kea DHCP
  Jan 16, 2019
• High 7.5
  CVE-2018-5734

  A malformed request can trigger an assertion failure in badcache.c

  While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFAIL cache feature enabled, this can trigger an assertion failure in badcache.c when the request doesn…

  ISC BIND 9
  Jan 16, 2019