Archive
February 2019
Vulnerabilities first published in this month (UTC), newest first.
847 results · Feed
-
Medium 5.9
IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt …
-
High 7.5
IBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database password. An attacker …
-
Unscored —
SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, (Illuminator Servlet) currently does not …
-
Unscored —
Under certain conditions SAP Business One Mobile Android App, version 1.2.12, allows an attacker to access information …
-
Unscored —
SAP BusinessObjects, versions 4.2 and 4.3, (Visual Difference) allows an attacker to upload any file (including script …
-
Unscored —
Under certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS advanced) writes crede…
-
Unscored —
The Fiori Launchpad of SAP BusinessObjects, before versions 4.2 and 4.3, does not sufficiently encode user-controlled i…
-
Unscored —
Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.3…
-
Unscored —
SAP NetWeaver AS ABAP Platform, Krnl64nuc 7.74, krnl64UC 7.73, 7.74, Kernel 7.73, 7.74, 7.75, fails to validate type of…
-
Unscored —
SAP Disclosure Management (before version 10.1 Stack 1301) does not sufficiently encode user-controlled inputs, resulti…
-
Unscored —
Under certain circumstances, SAP HANA Extended Application Services, advanced model (XS advanced) does not perform auth…
-
Unscored —
SAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an authenticated user, re…
-
Unscored —
SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by cr…
-
Unscored —
SAP WebIntelligence BILaunchPad, versions 4.10, 4.20, does not sufficiently encode user-controlled inputs in generated …
-
Unscored —
In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because…
-
Unscored —
BEESCMS 4.0 has a CSRF vulnerability to add arbitrary VIP accounts via the admin/admin_member.php?action=add&nav=add_we…
-
Unscored —
The Help feature in the ES File Explorer File Manager application 4.1.9.7.4 for Android allows session hijacking by a M…
-
Unscored —
In Netwide Assembler (NASM) 2.14.02, there is a use-after-free in paste_tokens in asm/preproc.c.
-
Unscored —
An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) wher…
-
Unscored —
On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, and 11.6.0-11.6.3.2, a reflected Cross Site Scripting (XSS…
-
Unscored —
NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software does not validate or incorrectly …
-
Unscored —
NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software delivers extra data with the buff…
-
Unscored —
NVIDIA Tegra library contains a vulnerability in libnvmmlite_video.so, where referencing memory after it has been freed…
-
Unscored —
The TextEditor 2.0 in ABB CP400 Panel Builder versions 2.0.7.05 and earlier contain a vulnerability in the file parser …
-
Unscored —
In msmtp 1.8.2 and mpop 1.4.3, when tls_trust_file has its default configuration, certificate-verification results are …
-
Unscored —
The SOAP Admin API component of TIBCO Software Inc.'s TIBCO Silver Fabric contains a vulnerability that may allow refle…
-
Unscored —
OpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows remote authenticated attack…
-
Unscored —
Untrusted search path vulnerability in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL (UNARJ32.DLL for Win…
-
Unscored —
Untrusted search path vulnerability in Self-Extracting Archives created by UNLHA32.DLL prior to Ver 3.00 allows an atta…
-
Unscored —
The VerifyPopServerConnection resource in Atlassian Jira before version 7.6.10, from version 7.7.0 before version 7.7.5…
-
Unscored —
The two-dimensional filter statistics gadget in Atlassian Jira before version 7.6.10, from version 7.7.0 before version…
-
Unscored —
Atlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to download a deleted pa…
-
Unscored —
Various rest resources in Atlassian Crowd before version 3.2.7 and from version 3.3.0 before version 3.3.4 allow remote…
-
Unscored —
The labels widget gadget in Atlassian Jira before version 7.6.11 and from version 7.7.0 before version 7.13.1 allows re…
-
Unscored —
V20 PRO L-01J software version L01J20c and L01J20d has a NULL pointer exception flaw that can be used by an attacker to…
-
Unscored —
Untrusted search path vulnerability in the installer of UNARJ32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier) a…
-
Unscored —
License Manager Service of YOKOGAWA products (CENTUM VP (R5.01.00 - R6.06.00), CENTUM VP Entry Class (R5.01.00 - R6.06.…
-
Unscored —
Open redirect vulnerability in OpenAM (Open Source Edition) 13.0 allows remote attackers to redirect users to arbitrary…
-
Unscored —
Untrusted search path vulnerability in the installer of UNLHA32.DLL (UNLHA32.DLL for Win32 Ver 2.67.1.2 and earlier) al…
-
Unscored —
Untrusted search path vulnerability in the installer of LHMelting (LHMelting for Win32 Ver 1.65.3.6 and earlier) allows…