Archive
5 March 2019
Vulnerabilities first published on this day (UTC), newest first.
78 results · Feed
-
High 8.1
HashiCorp Consul Access Restriction Bypass
HashiCorp Consul (and Consul Enterprise) 1.4.x before 1.4.3 allows a client to bypass intended access restrictions and obtain the privileges of one other arbitrary token within secondary datacenters, because a token with literally "<hidden>" as its secret is …
-
Unscored —
In devs.c in Yubico libu2f-host before 1.1.8, the response to init is misparsed, leaking uninitialized stack memory bac…
-
Unscored —
Sagemcom F@st 5260 routers using firmware version 0.4.39, in WPA mode, default to using a PSK that is generated from a …
-
Unscored —CVE-2019-9213 Public exploit
In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which mak…
-
High 7.5
Stack Overflow in Apache Mesos
When parsing a JSON payload with deeply nested JSON structures, the parser in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.1, 1.6.0 to 1.6.1, and 1.7.0 might overflow the stack due to unbounded recursion. A malicious actor can therefore cause…
-
Unscored —
Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary ad…
-
Unscored —
Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the adminis…
-
Unscored —
Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to …
-
Unscored —
Moxa IKS and EDS allow remote authenticated users to cause a denial of service via a specially crafted packet, which ma…
-
Unscored —
Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may all…
-
Unscored —
Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perf…
-
Unscored —
Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability …
-
Unscored —
PSI GridConnect GmbH Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy versions Telecontrol …
-
Unscored —
Cross-site request forgery has been identified in Moxa IKS and EDS, which may allow for the execution of unauthorized a…
-
Unscored —
Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution.
-
Unscored —
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via…
-
Unscored —
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to command injection via craft…
-
Unscored —
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to authenticated command injec…
-
Unscored —
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 contains multiple hard coded credentials for…
-
Unscored —
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 allows a remote, unauthenticated attacker to…
-
Unscored —
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via…
-
Unscored —
The Blog2Social plugin before 5.0.3 for WordPress allows wp-admin/admin.php?page=blog2social-ship XSS.
-
Unscored —
The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in …
-
Unscored —
The Quiz And Survey Master plugin 6.0.4 for WordPress allows wp-admin/admin.php?page=mlw_quiz_results quiz_id XSS.
-
Unscored —
The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications.
-
Unscored —
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 an…
-
Medium 4.3
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an attacker to change one of the settings related to…
-
Medium 6.8
IBM Cloud Private 3.1.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By pe…
-
High 7.4
IBM InfoSphere Information Governance Catalog 11.3, 11.5, and 11.7 could allow a remote attacker to conduct phishing at…
-
Medium 4.4
IBM Cloud Private 3.1.1 could alllow a local user with administrator privileges to intercept highly sensitive unencrypt…
-
Medium 4.4
IBM Cloud Private 3.1.1 could alllow a local user with administrator privileges to intercept highly sensitive unencrypt…
-
Medium 5.4
IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows us…
-
Medium 5.4
IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows us…
-
Medium 6.3
IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.1.0 is vulnerable to SQL injection. A remot…
-
Medium 5.9
IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 Standard Edition could allow highly sensitive information to be tra…
-
Medium 5.4
IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows us…
-
Medium 6.7
Code execution if run with command line switch -v
If supportutils before version 3.1-5.7.1 is run with -v to perform rpm verification and the attacker manages to manipulate the rpm listing (e.g. with CVE-2018-19638) he can execute arbitrary commands as root.
-
Medium 4.4
Code execution if run with command line switch -v
If the attacker manages to create files in the directory used to collect log files in supportutils before version 3.1-5.7.1 (e.g. with CVE-2018-19638) he can kill arbitrary processes on the local machine.
-
Low 2.2
User can overwrite arbitrary log files in support tar
In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the directory that is used by supportutils to collect the log files.
-
High 7.3
Local root exploit via inclusion of attacker controlled shell script
Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath binary. If an attacker provides one at an arbitrary location it is executed with root privileges