Archive

25 February 2019

Vulnerabilities first published on this day (UTC), newest first.

← January 2019 2019 / February /25 March 2019 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.5

CVE-2019-1683

Cisco SPA112, SPA525, and SPA5x5 Series IP Phones Certificate Validation Vulnerability

A vulnerability in the certificate handling component of the Cisco SPA112, SPA525, and SPA5X5 Series IP Phones could allow an unauthenticated, remote attacker to listen to or control some aspects of a Transport Level Security (TLS)-encrypted Session Initiatio…

Cisco Cisco Small Business SPA500 Series IP Phones Cisco Small Business SPA5X5 Series IP Phones Cisco Small Business SPA525 Series IP Phones Network devices

Feb 25, 2019
Medium 6.1

CVE-2019-9142

Moderate severity vulnerability that affects org.b3log:symphony

An issue was discovered in b3log Symphony (aka Sym) before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java.

org.b3log:symphony Maven

Feb 25, 2019