Archive
12 February 2019
Vulnerabilities first published on this day (UTC), newest first.
35 results · Feed
-
Unscored —
Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script sandbox, which allows a…
-
Unscored —
An access of uninitialized pointer vulnerability in CX-Supervisor (Versions 3.42 and prior) could lead to type confusio…
-
Unscored —
When CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value of an offset, an attack…
-
Unscored —CVE-2017-0938 EPSS 21%
Denial of Service attack in airMAX < 8.3.2 , airMAX < 6.0.7 and EdgeMAX < 1.9.7 allow attackers to use the Discovery Pr…
-
Unscored —
Solutions Business Manager (SBM) Authentication Bypass Issue in Version prior to 11.5
An Authentication Bypass issue exists in Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.
-
Unscored —
ATTO FibreBridge 7500N firmware version 2.95 is susceptible to a vulnerability which allows attackers to cause a Denial…
-
Unscored —
In JForum 2.1.8, an unauthenticated, remote attacker can enumerate whether a user exists by using the "create user" fun…
-
High 7.7
Cisco Network Assurance Engine CLI Access with Default Password Vulnerability
A vulnerability in the management web interface of Cisco Network Assurance Engine (NAE) could allow an unauthenticated, local attacker to gain unauthorized access or cause a Denial of Service (DoS) condition on the server. The vulnerability is due to a fault …
-
Unscored —
An issue was discovered in Joomla! before 3.9.3. The "No Filtering" textfilter overrides child settings in the Global C…
-
Unscored —
An issue was discovered in Joomla! before 3.9.3. Inadequate filtering on URL fields in various core components could le…
-
Critical 9.8
Joomla! Object Injection Vulnerability
An issue was discovered in Joomla! before 3.9.3. The phar:// stream wrapper can be used for objection injection attacks because there is no protection mechanism (such as the TYPO3 PHAR stream wrapper) to prevent use of the phar:// handler for non .phar-files.
-
Unscored —
An issue was discovered in Joomla! before 3.9.3. A combination of specific web server configurations, in connection wit…
-
Unscored —
An issue was discovered in Joomla! before 3.9.3. Inadequate checks at the Global Configuration helpurl settings allowed…
-
Unscored —
An issue was discovered in Joomla! before 3.9.3. Inadequate parameter handling in JavaScript code (core.js writeDynaLis…
-
Unscored —
An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions prior to Rel…
-
Unscored —
In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned …
-
Unscored —
Registers used to store Modbus values can be read and written from the web interface without authentication in the PR10…
-
Unscored —
PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) may allow an attacker to be able …
-
Unscored —
Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter.
-
Unscored —CVE-2019-5596 Public exploit
In FreeBSD 11.2-STABLE after r338618 and before r343786, 12.0-STABLE before r343781, and 12.0-RELEASE before 12.0-RELEA…
-
Unscored —
In FreeBSD before 11.2-STABLE(r343782), 11.2-RELEASE-p9, 12.0-STABLE(r343781), and 12.0-RELEASE-p3, kernel callee-save …
-
Unscored —
Nessus versions 8.2.1 and earlier were found to contain a stored XSS vulnerability due to improper validation of user-s…
-
Unscored —
In savePhotoFromUriToUri of ContactPhotoUtils.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8…
-
Unscored —
In avdt_scb_hdl_report of avdt_scb_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and An…
-
Unscored —
In add_attr of sdp_discovery.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, th…
-
Unscored —
In run of InstallPackageTask.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9,…
-
Unscored —
In ieee802_11_rx_wnmsleep_req of wnm_ap.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and An…
-
Unscored —
In bta_hh_ctrl_dat_act of bta_hh_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Andr…
-
Unscored —
In llcp_dlc_proc_i_pdu of llcp_dlc.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Androi…
-
Unscored —
In llcp_link_proc_agf_pdu of llcp_link.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and An…
-
Unscored —
In bta_ag_parse_cmer of bta_ag_cmd.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Androi…
-
Unscored —
In nfc_ncif_proc_get_routing of nfc_ncif.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and …
-
Unscored —
In nfc_ncif_set_config_status of nfc_ncif.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and…
-
Unscored —
In mca_ccb_hdl_rsp of mca_cact.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9,…
-
Unscored —
In package installer in Android-8.0, Android-8.1 and Android-9, there is a possible bypass of the unknown source warnin…