Skip to content
OpenAdvisories

Archive

1 March 2019

Vulnerabilities first published on this day (UTC), newest first.

11 results · Feed

  • Unscored —

    In Storage Performance Development Kit (SPDK) before 19.01, a malicious vhost client (i.e., virtual machine) could care…

  • Unscored —

    SolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ service.

  • Unscored —

    An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readGenericBitmap() located in JB…

  • Unscored —

    An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2…

  • Unscored —

    An issue was discovered in Bento4 1.5.1-628. An out of bounds write occurs in AP4_CttsTableEntry::AP4_CttsTableEntry() …

  • Unscored —

    Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user …

  • Unscored —

    In pfSense 2.4.4_1, blocking of source IP addresses on the basis of failed HTTPS authentication is inconsistent with bl…

  • Unscored —

    The expiretable configuration in pfSense 2.4.4_1 establishes block durations that are incompatible with the block durat…

  • Unscored —

    The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obta…

  • Unscored —

    Amazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio and video data, or inse…

  • Unscored —

    In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this require…