Archive

6 February 2019

Vulnerabilities first published on this day (UTC), newest first.

← January 2019 2019 / February /6 March 2019 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.4

CVE-2018-16890 Public exploit

libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling …

The curl Project curl curl curl Debian Ubuntu Alpine

Feb 6, 2019
High 8.8

CVE-2019-1003005 Public exploit EPSS 20%

Sandbox Bypass in Script Security Plugin

A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.50 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java that allows attackers with Overall/Read permission to provide a Groovy script…

Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security Web / CMS Maven

Feb 6, 2019