Archive
18 February 2019
Vulnerabilities first published on this day (UTC), newest first.
43 results · Feed
-
Unscored —
Stack-based buffer overflow in the strip_vt102_codes function in TinTin++ 2.01.6 and WinTin++ 2.01.6 allows remote atta…
-
Unscored —
The seadroid (aka Seafile Android Client) application through 2.2.13 for Android always uses the same Initialization Ve…
-
Unscored —CVE-2019-8917 EPSS 36%
SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine ser…
-
Unscored —
An issue was discovered in WTCMS 1.0. It allows remote attackers to cause a denial of service (resource consumption) vi…
-
Unscored —
An issue was discovered in WTCMS 1.0. It allows index.php?g=admin&m=setting&a=site_post CSRF.
-
Unscored —
In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain str…
-
Unscored —
An issue was discovered in WTCMS 1.0. It has stored XSS via the third text box (for the website statistics code).
-
Unscored —
An issue was discovered in WTCMS 1.0. It allows remote attackers to execute arbitrary PHP code by going to the "Setting…
-
Unscored —
Buffer overflow in the command-line interface for Intel(R) PROSet Wireless v20.50 and before may allow an authenticated…
-
Unscored —
Code injection vulnerability in the installer for Intel(R) USB 3.0 eXtensible Host Controller Driver for Microsoft Wind…
-
Unscored —
Improper file permissions for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to …
-
Unscored —
Insufficient file protection in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an …
-
Unscored —
Logic error in the installer for Intel(R) OpenVINO(TM) 2018 R3 and before for Linux may allow a privileged user to pote…
-
Unscored —
Improper file permissions for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to …
-
Unscored —
Authentication bypass in the Intel Unite(R) solution versions 3.2 through 3.3 may allow an unauthenticated user to pote…
-
Unscored —
Insufficient run protection in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a pr…
-
Unscored —
Insufficient key management for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user t…
-
Unscored —
Insufficient session authentication in web server for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a…
-
Unscored —
Insufficient file protection in uninstall routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a…
-
Unscored —
Insufficient user prompt in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a privi…
-
Unscored —
Improper folder permissions in Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to…
-
Unscored —
Improper flow control in crypto routines for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a privileg…
-
Unscored —
Insufficient file permissions checking in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may…
-
Unscored —
do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file…
-
Unscored —
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
-
Unscored —
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a d…
-
Unscored —
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corrup…
-
High 7.5
Path Traversal in total.js
index.js in Total.js Platform before 3.2.3 allows path traversal.
-
Unscored —
mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The …
-
Unscored —
The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to …
-
Unscored —
An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the publ…
-
Unscored —
ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filter[Query][terms][0][cnj] paramet…
-
Unscored —
JTBC(PHP) 3.0.1.8 allows Arbitrary File Upload via the console/#/console/file/manage.php?type=list URI, as demonstrated…
-
Unscored —
ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php sort parameter.
-
Unscored —
ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql parameter, as demonstrated …
-
Unscored —
ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php filter[Query][terms][0][cnj] parameter.
-
Unscored —
skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the…
-
Unscored —
admin/default.php in PHPMyWind v5.5 has XSS via an HTTP Host header.
-
Unscored —
daemonControl in includes/functions.php in ZoneMinder before 1.32.3 allows command injection via shell metacharacters.
-
Unscored —
In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter.