Archive
January 2019
Vulnerabilities first published in this month (UTC), newest first.
1,214 results · Feed
-
Unscored —
Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: Partner Dash board).…
-
Unscored —
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…
-
Unscored —
Vulnerability in the Oracle Mobile Field Service component of Oracle E-Business Suite (subcomponent: Administration). S…
-
Unscored —
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…
-
Unscored —
Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products (subcomponent: Mana…
-
Unscored —
Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality App…
-
Unscored —
Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: SQL Extensions). S…
-
Unscored —
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…
-
Unscored —
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). The supported version that is affe…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: PS). Supported versions that are aff…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported v…
-
Unscored —
An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_aggregate_reg_new in rec-aggregate.c in libr…
-
Unscored —
An issue was discovered in cairo 1.16.0. There is an infinite loop in the function _arc_error_normalized in the file ca…
-
Unscored —
An issue was discovered in GNU Recutils 1.8. There is a double-free problem in the function rec_mset_elem_destroy() in …
-
Unscored —
An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_fex_size() in the …
-
Unscored —
An issue was discovered in cairo 1.16.0. There is an assertion problem in the function _cairo_arc_in_direction in the f…
-
Unscored —
An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_buf_new in rec-buf.c when called from rec_pa…
-
Unscored —
An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_field_set_name() i…
-
Unscored —
An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_extract_type in rec-utils.c in librec.a.
-
Unscored —
MailEnable before 8.60 allows Privilege Escalation because admin accounts could be created as a consequence of %0A mish…
-
Unscored —
MailEnable before 8.60 allows Stored XSS via malformed use of "<img/src" with no ">" character in the body of an e-mail…
-
Unscored —
SmarterTools SmarterMail before 13.3.5535 was vulnerable to stored XSS by bypassing the anti-XSS mechanisms. It was pos…
-
Unscored —
MailEnable before 8.60 allows Directory Traversal for reading the messages of other users, uploading files, and deletin…
-
Unscored —
MailEnable before 8.60 allows XXE via an XML document in the request.aspx Options parameter.
-
Unscored —
A cross-site scripting (XSS) vulnerability exists in graph_templates.php in Cacti before 1.2.0 due to lack of escaping …
-
Unscored —
A cross-site scripting (XSS) vulnerability exists in host.php (via tree.php) in Cacti before 1.2.0 due to lack of escap…
-
Unscored —
A cross-site scripting (XSS) vulnerability exists in color_templates.php in Cacti before 1.2.0 due to lack of escaping …
-
Unscored —
A cross-site scripting (XSS) vulnerability exists in pollers.php in Cacti before 1.2.0 due to lack of escaping of unint…
-
Unscored —
URI_FUNC() in UriParse.c in uriparser before 0.9.1 has an out-of-bounds read (in uriParse*Ex* functions) for an incompl…
-
Unscored —
The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary f…
-
Unscored —
An issue was discovered in Joomla! before 3.9.2. Inadequate escaping in com_contact leads to a stored XSS vulnerability.
-
Unscored —
An issue was discovered in Joomla! before 3.9.2. Inadequate escaping in mod_banners leads to a stored XSS vulnerability.
-
Unscored —
An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration helpurl settings allowed…
-
Unscored —CVE-2019-6263 Public exploit
An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration Text Filter settings all…
-
Critical 9.8
Numpy Deserialization of Untrusted Data
An issue was discovered in NumPy before 1.16.3. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue be…
-
Unscored —
An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack-based buffer over-rea…
-
Unscored —
An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can write one byte out of bounds in ntpd via …
-
Unscored —
An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read b…
-
Unscored —
An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd…