Archive
15 March 2019
Vulnerabilities first published on this day (UTC), newest first.
39 results · Feed
-
Unscored —
Phamm (aka PHP LDAP Virtual Hosting Manager) 0.6.8 allows XSS via the login page (the /public/main.php action parameter…
-
Medium 6.1
Cross-Site Scripting in simple-markdown
simple-markdown.js in Khan Academy simple-markdown before 0.4.4 allows XSS via a data: or vbscript: URI.
-
High 7.5
Improper Restriction of XML External Entity Reference in DiffPlug Spotless
In DiffPlug Spotless before 1.20.0 (library and Maven plugin) and before 3.20.0 (Gradle plugin), the XML parser would resolve external entities over both HTTP and HTTPS and didn't respect the resolveExternalEntities setting. For example, this allows disclosur…
-
Medium 6.1
Doorkeeper-openid_connect contains Open Redirect
Doorkeeper::OpenidConnect (aka the OpenID Connect extension for Doorkeeper) 1.4.x and 1.5.x before 1.5.4 has an open redirect via the redirect_uri field in an OAuth authorization request (that results in an error response) with the 'openid' scope and a prompt…
-
Unscored —
Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control (issue 2 of 2).
-
Unscored —
Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control allowing a remote attackers to cause a denial of service …
-
Unscored —
An issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp.
-
Unscored —
Buffer overflow in prot_get_ring_space in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 a…
-
Medium 6.7
An unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0…
-
Medium 5.3
CircuitWerkes Sicon-8 Client-Side Authentication Read-Only Bypass
CircuitWerkes Sicon-8, a hardware device used for managing electrical devices, ships with a web-based front-end controller and implements an authentication mechanism in JavaScript that is run in the context of a user's web browser.
-
Unscored —
Topvision CC8800 CMTS C-E devices allow remote attackers to obtain sensitive information via a direct request for /WebC…
-
Low 3.3
Password exposed in process listing
In yast2-samba-provision up to and including version 1.0.1 the password for samba shares was provided on the command line to tools used by yast2-samba-provision, allowing local attackers to read them in the process list
-
Unscored —
An Integer overflow vulnerability exists in the batchTransfer function of a smart contract implementation for CryptoBot…
-
Low 2.2
Static tempfile name allows overwriting of arbitrary files
In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink protection
-
Medium 6.5
SMB printer settings don't escape characters in passwords properly
In yast2-printer up to and including version 4.0.2 the SMB printer settings don't escape characters in passwords properly. If a password with backticks or simliar characters is supplied this allows for executing code as root. This requires tricking root to en…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function process_demand_active() that…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function ui_clip_handle_data() that r…
-
Unscored —
rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Read…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in …
-
Unscored —
rdesktop versions up to and including v1.8.3 contain several Out-Of- Bounds Reads in the file secure.c that result in a…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain a Buffer Overflow over the global variables in the function seamle…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in…
-
Unscored —
The receiver (aka bridge) component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection. Th…
-
Unscored —CVE-2019-9834 Public exploit
The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an impo…
-
Unscored —
The Screen Stream application through 3.0.15 for Android allows remote attackers to cause a denial of service via many …
-
Unscored —CVE-2019-9832 Public exploit
The AirDrop application through 2.0 for Android allows remote attackers to cause a denial of service via a client that …
-
Unscored —
The AirMore application through 1.6.1 for Android allows remote attackers to cause a denial of service (system hang) vi…
-
Unscored —
Cobham Satcom Sailor 250 and 500 devices before 1.25 contained persistent XSS, which could be exploited by an unauthent…
-
Unscored —
Cobham Satcom Sailor 800 and 900 devices contained persistent XSS, which required administrative access to exploit. The…
-
Unscored —
Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the…
-
Unscored —
Cobham Satcom Sailor 250 and 500 devices before 1.25 contained an unauthenticated password reset vulnerability. This co…
-
Unscored —
An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe attempts to enforce access control by a…
-
Unscored —
An issue was discovered in CapMon Access Manager 5.4.1.1005. A regular user can obtain local administrator privileges i…
-
Unscored —
An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe provides "NT AUTHORITY\SYSTEM" access t…
-
Unscored —
An issue was discovered in CapMon Access Manager 5.4.1.1005. An unprivileged user can read the cal_whitelist table in t…
-
Unscored —
An issue was discovered in CapMon Access Manager 5.4.1.1005. The client applications of AccessManagerCoreService.exe co…
-
Unscored —
Maccms 10 allows remote attackers to execute arbitrary PHP code by entering this code in a template/default_pc/html/art…