Archive
17 February 2019
Vulnerabilities first published on this day (UTC), newest first.
30 results · Feed
-
Unscored —
upload/protected/modules/admini/views/post/index.php in BageCMS through 3.1.4 allows SQL Injection via the title or tit…
-
Unscored —
VNote 2.2 has XSS via a new text note.
-
Unscored —
A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\…
-
Unscored —
global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing.
-
Unscored —
SeaCMS 7.2 mishandles member.php?mod=repsw4 requests.
-
Unscored —
FeiFeiCms 4.0.181010 on Windows allows remote attackers to read or delete arbitrary files via index.php?s=Admin-Data-Do…
-
Unscored —
On Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface of the device file /d…
-
Unscored —
admin/dl_data.php in zzcms 2018 (2018-10-19) allows remote attackers to delete arbitrary files via action=del&filename=…
-
Unscored —
The GloBee plugin before 1.1.2 for WooCommerce mishandles IPN messages.
-
Unscored —
HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.ph…
-
Unscored —
OneFileCMS 3.6.13 allows remote attackers to modify onefilecms.php by clicking the Copy button twice.
-
Unscored —
Zabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before 3.2.10rc1, and 3.3.x and 3.4.x before 3.4.4rc1 al…
-
Unscored —
Hotels_Server through 2018-11-05 has SQL Injection via the API because the controller/api/login.php telephone parameter…
-
Unscored —
A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause…
-
Unscored —
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in …
-
Unscored —
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_close_real i…
-
Medium 6.1
Hydra has Reflected XSS via error_hint parameter
ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter.
-
Unscored —
Amazon Fire OS before 5.3.6.4 allows a man-in-the-middle attack against HTTP requests for "Terms of Use" and Privacy pa…
-
Unscored —
An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing re…
-
Unscored —
An Insecure Direct Object Reference (IDOR) vulnerability exists in Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0…
-
High 7.5
Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via …
KEV Nov 3, 2021 -
Unscored —CVE-2019-8389 Public exploit
A file-read vulnerability was identified in the Wi-Fi transfer feature of Musicloud 1.6. By default, the application ru…
-
Unscored —
An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function be_uint32_read() …
-
Unscored —
An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_ipv6_l4proto() loca…
-
Unscored —
An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in AP4_Track::GetSampleIndexForTimeStamp…
-
Unscored —
An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in the function AP4_List:Find located in…
-
Unscored —
An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum in checksum.c. It can be tri…
-
Unscored —
An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located…
-
Unscored —
An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function adv_png_unfilter_8…
-
Unscored —
An issue was discovered in Bento4 1.5.1-628. A heap-based buffer over-read exists in AP4_BitStream::ReadBytes() in Code…