Archive
January 2019
Vulnerabilities first published in this month (UTC), newest first.
1,214 results · Feed
-
Medium 6.5
Files uploaded by anonymous users into a private file system can be accessed by other anonymous users
In Drupal core 8.x prior to 8.3.4 and Drupal core 7.x prior to 7.56; Private files that have been uploaded by an anonymous user but not permanently attached to content on the site should only be visible to the anonymous user that uploaded them, rather than al…
-
High 8.0
third-party PEAR Archive_Tar library updates
In Drupal Core versions 7.x prior to 7.62, 8.6.x prior to 8.6.6 and 8.5.x prior to 8.5.9; Drupal core uses the third-party PEAR Archive_Tar library. This library has released a security update which impacts some Drupal configurations. Refer to CVE-2018-100088…
-
Critical 9.8
PHAR stream wrapper Arbitrary PHP code execution
In Drupal Core versions 7.x prior to 7.62, 8.6.x prior to 8.6.6 and 8.5.x prior to 8.5.9; A remote code execution vulnerability exists in PHP's built-in phar stream wrapper when performing file operations on an untrusted phar:// URI. Some Drupal code (core, c…
-
Medium 4.3
A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 a…
KEV Sep 8, 2022 -
Unscored —
There is a deserialization vulnerability in Chatopera cosin v3.10.0. An attacker can execute commands during server-sid…
-
High 8.8
Jenkins Pipeline Declarative Plugin sandbox bypass vulnerability
A sandbox bypass vulnerability exists in Pipeline: Declarative Plugin 1.3.3 and earlier in pipeline-model-definition/src/main/groovy/org/jenkinsci/plugins/pipeline/modeldefinition/parser/Converter.groovy that allows attackers with Overall/Read permission to p…
-
High 8.8
Jenkins Groovy Plugin sandbox bypass vulnerability
A sandbox bypass vulnerability exists in Pipeline: Groovy Plugin 2.61 and earlier in src/main/java/org/jenkinsci/plugins/workflow/cps/CpsFlowDefinition.java, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShellFactory.java that allows attackers wit…
-
High 7.2
Improper Authorization in Jenkins Core
An improper authorization vulnerability exists in Jenkins 2.158 and earlier, LTS 2.150.1 and earlier in core/src/main/java/hudson/security/TokenBasedRememberMeServices2.java that allows attackers with Overall/RunScripts permission to craft Remember Me cookies…
-
High 8.8
Protection Mechanism Failure in Jenkins Script Security Plugin
A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java that allows attackers with the ability to provide sandboxed scripts to execute arbitrary c…
-
High 7.2
Improper Authorization in Jenkins Core
An improper authorization vulnerability exists in Jenkins 2.158 and earlier, LTS 2.150.1 and earlier in core/src/main/java/hudson/security/AuthenticationProcessingFilter2.java that allows attackers to extend the duration of active HTTP sessions indefinitely e…
-
Unscored —
sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a call from eidenv.
-
Unscored —
In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that…
-
Unscored —
Teradata Viewpoint before 14.0 and 16.20.00.02-b80 contains a hardcoded password of TDv1i2e3w4 for the viewpoint databa…
-
Unscored —
In Axway File Transfer Direct 2.7.1, an unauthenticated Directory Traversal vulnerability can be exploited by issuing a…
-
Unscored —CVE-2019-6498 Public exploit
GattLib 0.2 has a stack-based buffer over-read in gattlib_connect in dbus/gattlib.c because strncpy is misused.
-
Unscored —
The Sky Go Desktop application 1.0.19-1 through 1.0.23-1 for Windows performs several requests over cleartext HTTP. Thi…
-
Unscored —
Hotels_Server through 2018-11-05 has SQL Injection via the controller/fetchpwd.php username parameter.
-
Unscored —
The ThreadX-based firmware on Marvell Avastar Wi-Fi devices, models 88W8787, 88W8797, 88W8801, 88W8897, and 88W8997, al…
-
Unscored —
Possible undefined behavior due to lack of size check in function for parameter segment_idx can lead to a read outside …
-
Unscored —
Spoofed SMS can be used to send a large number of messages to the device which will in turn initiate a flood of registr…
-
Unscored —
While processing a packet decode request in MQTT, Race condition can occur leading to an out-of-bounds access in snapdr…
-
Unscored —
Improper input validation in trustzone can lead to denial of service in snapdragon automobile, snapdragon mobile and sn…
-
Unscored —
Improper check while accessing the local memory stack on MQTT connection request can lead to buffer overflow in snapdra…
-
Unscored —
Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, s…
-
Unscored —
Anti-rollback can be bypassed in replay scenario during app loading due to improper error handling of RPMB writes in sn…
-
High 7.4
DSA-2019-001: Dell Networking OS10 Improper Certificate Validation Vulnerability
Dell Networking OS10 versions prior to 10.4.3.0 contain a vulnerability in the Phone Home feature which does not properly validate the server's certificate authority during TLS handshake. Use of an invalid or malicious certificate could potentially allow an a…
-
Unscored —
Improper data length check while processing an event report indication can lead to a buffer overflow in snapdragon mobi…
-
Unscored —
Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wea…
-
Unscored —
Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile and snapdragon mobile in v…
-
Unscored —
Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdrag…
-
Unscored —
Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and sna…
-
Unscored —
Improper length check while processing an MQTT message can lead to heap overflow in snapdragon mobile and snapdragon we…
-
Unscored —
Improper validation of buffer length checks in the lwm2m device management protocol can leads to a buffer overflow in s…
-
Unscored —
Improper access control on secure display buffers in snapdragon automobile, snapdragon mobile and snapdragon wear in ve…
-
Unscored —
Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile …
-
Unscored —
AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon …
-
Unscored —
Improper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile and snapdragon wear in…
-
Low —
Spring Integration XML External Entity Injection (XXE)
Spring Integration (spring-integration-xml and spring-integration-ws modules), versions 4.3.18, 5.0.10, 5.1.1, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.
-
Low —
Spring Batch XML External Entity Injection (XXE)
Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.
-
Critical 9.8
Spring Web Services XML External Entity Injection (XXE)
Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.