Archive
15 February 2019
Vulnerabilities first published on this day (UTC), newest first.
31 results · Feed
-
Unscored —
An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c has an integer overflow on the result of multipli…
-
Unscored —
An issue was discovered in SoX 14.4.2. One of the arguments to bitrv2 in fft4g.c is not guarded, such that it can lead …
-
Unscored —
An issue was discovered in SoX 14.4.2. In xmalloc.h, there is an integer overflow on the result of multiplication fed i…
-
Unscored —
An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c allows a NULL pointer dereference.
-
Unscored —
Vulnerability in Easy2map-photos WordPress Plugin v1.09 allows SQL Injection via unsanitized mapTemplateName, mapName, …
-
Unscored —
Vulnerability in Easy2map-photos WordPress Plugin v1.09 MapPinImageUpload.php and MapPinIconSave.php allows path traver…
-
Unscored —
A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php …
-
High 8.8
Fileutils Command Injection vulnerability
Vulnerability in FileUtils v0.7, Ruby Gem Fileutils <= v0.7 Command Injection vulnerability in user supplied url variable that is passed to the shell.
-
Unscored —
Vulnerability in YingZhi Python Programming Language v1.9 allows arbitrary anonymous uploads to the phone's storage
-
High 8.5
IBM InfoSphere Information Server 11.7 could allow an authenciated user under specialized conditions to inject commands…
-
High 7.1
IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) atta…
-
Medium 5.4
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows…
-
Medium 5.9
IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt …
-
High 7.5
IBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database password. An attacker …
-
Unscored —
SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, (Illuminator Servlet) currently does not …
-
Unscored —
Under certain conditions SAP Business One Mobile Android App, version 1.2.12, allows an attacker to access information …
-
Unscored —
SAP BusinessObjects, versions 4.2 and 4.3, (Visual Difference) allows an attacker to upload any file (including script …
-
Unscored —
Under certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS advanced) writes crede…
-
Unscored —
The Fiori Launchpad of SAP BusinessObjects, before versions 4.2 and 4.3, does not sufficiently encode user-controlled i…
-
Unscored —
Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.3…
-
Unscored —
SAP NetWeaver AS ABAP Platform, Krnl64nuc 7.74, krnl64UC 7.73, 7.74, Kernel 7.73, 7.74, 7.75, fails to validate type of…
-
Unscored —
SAP Disclosure Management (before version 10.1 Stack 1301) does not sufficiently encode user-controlled inputs, resulti…
-
Unscored —
Under certain circumstances, SAP HANA Extended Application Services, advanced model (XS advanced) does not perform auth…
-
Unscored —
SAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an authenticated user, re…
-
Unscored —
SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by cr…
-
Unscored —
SAP WebIntelligence BILaunchPad, versions 4.10, 4.20, does not sufficiently encode user-controlled inputs in generated …
-
Unscored —
In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because…
-
Unscored —
BEESCMS 4.0 has a CSRF vulnerability to add arbitrary VIP accounts via the admin/admin_member.php?action=add&nav=add_we…
-
Unscored —
The Help feature in the ES File Explorer File Manager application 4.1.9.7.4 for Android allows session hijacking by a M…
-
Unscored —
In Netwide Assembler (NASM) 2.14.02, there is a use-after-free in paste_tokens in asm/preproc.c.
-
Unscored —
An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) wher…