Archive
January 2019
Vulnerabilities first published in this month (UTC), newest first.
1,214 results · Feed
-
Unscored —CVE-2019-6250 Public exploit
A pointer overflow, with code execution, was discovered in ZeroMQ libzmq (aka 0MQ) 4.2.x and 4.3.x before 4.3.1. A v2_d…
-
Unscored —CVE-2019-6249 Public exploit
An issue was discovered in HuCart v5.7.4. There is a CSRF vulnerability that can add an admin account via /adminsys/ind…
-
Medium 5.4
katello Cross-site Scripting vulnerability
A cross-site scripting (XSS) flaw was found in the katello component of Satellite. An attacker with privilege to create/edit organizations and locations is able to execute a XSS attacks against other users through the Subscriptions or the Red Hat Repositories…
-
Unscored —
Cross-site scripting vulnerability in WordPress plugin spam-byebye 2.2.1 and earlier allows remote attackers to inject …
-
Unscored —
An issue was discovered in SVG++ (aka svgpp) 1.2.3. After calling the gil::get_color function in Generic Image Library …
-
Unscored —
An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. A heap-based buffer overfl…
-
Unscored —
An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. In the function agg::cell_…
-
Unscored —
PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as dem…
-
Unscored —
Docker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory consumption) via a large integ…
-
Unscored —
An issue was discovered in UsualToolCMS 8.0. cmsadmin/a_sqlbackx.php?t=sql allows CSRF attacks that can execute SQL sta…
-
Unscored —
Frog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI).
-
Medium 4.5
Concourse includes token in CLI authentication callback
Pivotal Concourse, all versions prior to 4.2.2, puts the user access token in a url during the login flow. A remote attacker who gains access to a user's browser history could obtain the access token and use it to authenticate as the user.
-
High 7.5
An allocation of memory without limits, that could result in the stack clashing with another memory region, was discove…
-
High 7.4
An allocation of memory without limits, that could result in the stack clashing with another memory region, was discove…
-
Medium 4.3
An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon …
-
Unscored —
In iOS before 11.4.1, watchOS before 4.3.2, tvOS before 11.4.1, Safari before 11.1.1, macOS High Sierra before 10.13.6,…
-
Unscored —
In SwiftNIO before 1.8.0, a buffer overflow was addressed with improved size validation.
-
Unscored —
In iOS before 11.2.5, macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 E…
-
Unscored —
In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved bounds checking.
-
Unscored —
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes bef…
-
Unscored —
In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows befo…
-
Unscored —
In iCloud for Windows before 7.3, Safari before 11.0.3, iTunes before 12.7.3 for Windows, and iOS before 11.2.5, multip…
-
Unscored —
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes bef…
-
Unscored —
In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation.
-
Unscored —
In macOS High Sierra before 10.13.5, an input validation issue existed in the kernel. This issue was addressed with imp…
-
Unscored —
In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, an out-o…
-
Unscored —
In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictio…
-
Unscored —
In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictio…
-
Unscored —
In iOS before 11.4, iCloud for Windows before 7.5, watchOS before 4.3.1, iTunes before 12.7.5 for Windows, and macOS Hi…
-
Unscored —
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes bef…
-
Unscored —
In macOS High Sierra before 10.13.4, there was an issue with the handling of smartcard PINs. This issue was addressed w…
-
Unscored —
In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions on CUPS.
-
Unscored —CVE-2018-4330 Public exploit
In iOS before 11.4, a memory corruption issue exists and was addressed with improved memory handling.
-
Unscored —
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes bef…
-
Unscored —
In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows befo…
-
Unscored —
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes bef…
-
Unscored —
In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved size validation.
-
Unscored —
In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an arra…
-
Unscored —
In macOS High Sierra before 10.13.5, a privacy issue in the handling of Open Directory records was addressed with impro…
-
Unscored —
In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions.