Archive
5 February 2019
Vulnerabilities first published on this day (UTC), newest first.
66 results · Feed
-
Unscored —CVE-2018-18333 Public exploit
A DLL hijacking vulnerability in Trend Micro Security 2019 (Consumer) versions below 15.0.0.1163 and below could allow …
-
Unscored —
A vulnerability in the Private Browser of Trend Micro Dr. Safety for Android (Consumer) versions below 3.0.1478 could a…
-
Critical 10.0CVE-2018-3991 EPSS 34%
An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, v…
-
Critical 9.3
An exploitable pool corruption vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuK…
-
Medium 4.3
An exploitable kernel memory disclosure vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYST…
-
Unscored —
When JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may occur because of …
-
Unscored —
A crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is still in use during g…
-
Unscored —
An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communica…
-
Unscored —
A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This resul…
-
Unscored —
When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is …
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some o…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 64. Some of these bugs showed e…
-
Unscored —
WebAccess/SCADA, Version 8.3. An improper authentication vulnerability exists that could allow a possible authenticatio…
-
Unscored —
WebAccess/SCADA, Version 8.3. The software does not properly sanitize its inputs for SQL commands.
-
Unscored —
WebAccess/SCADA, Version 8.3. Specially crafted requests could allow a possible authentication bypass that could allow …
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_bitmap_updates() that re…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in …
-
Unscored —
rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function ui_clip_handle_data() tha…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function process_plane() that resu…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of-Bounds Write in functi…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_secondary_order() that r…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that resul…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdr_process() that results in …
-
Unscored —
rdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function cssp_read_tsrequest() tha…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsnd_process_ping() that resul…
-
Unscored —CVE-2018-20251 EPSS 31%
In WinRAR versions prior to and including 5.61, there is path traversal vulnerability when crafting the filename field …
-
High 7.8
In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field …
KEV Feb 15, 2022 -
Unscored —
In WinRAR versions prior to and including 5.60, there is an out-of-bounds write vulnerability during parsing of crafted…
-
High 7.5
Mitsubishi Electric MELSEC-Q Series PLCs Resource Exhaustion
Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior. A remote attacker can send specific bytes over Port 5…
-
Unscored —
On BIG-IP LTM 13.0.0 to 13.0.1 and 12.1.0 to 12.1.3.6, under certain conditions, the TMM may consume excessive resource…
-
Unscored —CVE-2018-18990 EPSS 39%
LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation…
-
Unscored —
LCDS Laquis SCADA prior to version 4.1.0.4150 uses hard coded credentials, which may allow an attacker unauthorized acc…
-
Unscored —
LCDS Laquis SCADA prior to version 4.1.0.4150 allows the opening of a specially crafted report format file that may cau…
-
Unscored —
LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper sanitation, which may allow an…
-
Unscored —
LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper authorization or sanitation, w…
-
Critical 9.1
An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4…
-
Unscored —
LCDS Laquis SCADA prior to version 4.1.0.4150 allows an authentication bypass, which may allow an attacker access to se…
-
Unscored —
LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a poi…
-
Unscored —
LCDS Laquis SCADA prior to version 4.1.0.4150 allows improper control of generation of code when opening a specially cr…
-
Low 3.7
IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) stores sensitive information in URL parameters. This may …