Archive
February 2019
Vulnerabilities first published in this month (UTC), newest first.
847 results · Feed
-
Unscored —
In the Linux kernel before 4.9.3, fs/xfs/xfs_aops.c allows local users to cause a denial of service (system crash) beca…
-
Medium 4.8
ePolicy Orchestrator Cloud update fixes multiple Cross-Site Request Forgery vulnerabilities
Cross-Site Request Forgery (CSRF) vulnerability in McAfee ePO (legacy) Cloud allows unauthenticated users to perform unintended ePO actions using an authenticated user's session via unspecified vectors.
-
Medium 6.5
Communication Manager Denial of Service
A vulnerability in the "capro" (Call Processor) process component of Avaya Aura Communication Manager could allow a remote, unauthenticated user to cause denial of service. Affected versions include 6.3.x, all 7.x versions prior to 7.1.3.2, and all 8.x versio…
-
High 7.5
Pylons Colander Denial of Service vulnerability
In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis.
-
Unscored —
Artica Proxy 3.06.200056 allows remote attackers to execute arbitrary commands as root by reading the ressources/settin…
-
Unscored —
Zen Load Balancer 3.10.1 allows remote authenticated admin users to execute arbitrary commands as root via shell metach…
-
Unscored —CVE-2019-7298 EPSS 10%
An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability all…