Skip to content
OpenAdvisories

Archive

January 2019

Vulnerabilities first published in this month (UTC), newest first.

← December 2018 2019 / January February 2019 →
  1. 14
  2. 229
  3. 358
  4. 410
  5. 5 
  6. 6 
  7. 78
  8. 871
  9. 9196
  10. 1048
  11. 1158
  12. 124
  13. 139
  14. 1414
  15. 1560
  16. 16212
  17. 1712
  18. 18123
  19. 193
  20. 20 
  21. 214
  22. 2227
  23. 2330
  24. 24107
  25. 2513
  26. 263
  27. 272
  28. 2828
  29. 2934
  30. 3018
  31. 3129
All Critical High Medium Low Exploited only Public exploit

1,214 results · Feed

  • Unscored —
    CVE-2018-7900

    There is an information leak vulnerability in some Huawei HG products. An attacker may obtain information about the HG …

    Huawei some HG products Network devices
  • Unscored —
    CVE-2018-20658 Public exploit

    The server in Core FTP 2.0 build 653 on 32-bit platforms allows remote attackers to cause a denial of service (daemon c…

  • Unscored —
    CVE-2019-3572

    An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file u…

    ming Ubuntu
  • Unscored —
    CVE-2019-3573

    In libsixel v1.8.2, there is an infinite loop in the function sixel_decode_raw_impl() in the file fromsixel.c, as demon…

    libsixel libsixel Debian Ubuntu
  • Unscored —
    CVE-2019-3574

    In libsixel v1.8.2, there is a heap-based buffer over-read in the function load_jpeg() in the file loader.c, as demonst…

    libsixel libsixel Debian Ubuntu
  • Unscored —
    CVE-2018-17188

    Prior to CouchDB version 2.3.0, CouchDB allowed for runtime-configuration of key components of the database. In some ca…

    Apache Software Foundation Apache CouchDB couchdb Ubuntu
  • Unscored —
    CVE-2018-5197

    A vulnerability in the ExtCommon.dll user extension module version 9.2, 9.2.1, 9.2.2 of Xplatform ActiveX could allow a…

    Tobesoft XPLATFORM ActiveX
  • Unscored —
    CVE-2018-20657

    The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory lea…

    binutils Ubuntu
  • Unscored —
    CVE-2019-3501 Public exploit

    The OUGC Awards plugin before 1.8.19 for MyBB allows XSS via a crafted award reason that is mishandled on the awards pa…

  • Unscored —
    CVE-2019-3500

    aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, whi…

    aria2 aria2 aria2 Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-20652

    An attempted excessive memory allocation was discovered in the function tinyexr::AllocateImage in tinyexr.h in tinyexr …

  • Unscored —
    CVE-2018-20650

    A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lac…

    poppler poppler Debian Ubuntu
  • Unscored —
    CVE-2018-20651

    A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BF…

    binutils binutils Debian Ubuntu
  • Unscored —
    CVE-2019-3494

    Simply-Blog through 2019-01-01 has SQL Injection via the admin/deleteCategories.php delete parameter.