Skip to content
OpenAdvisories

Archive

19 March 2019

Vulnerabilities first published on this day (UTC), newest first.

49 results · Feed

  • Unscored —

    YSoft SafeQ Server 6 allows a replay attack.

  • Unscored —

    A hidden backdoor on PATLITE NH-FB Series devices with firmware version 1.45 or earlier, NH-FV Series devices with firm…

  • Unscored —
    CVE-2019-6441 Public exploit EPSS 54%

    An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3…

  • Unscored —
    CVE-2019-6282 Public exploit

    ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have CSRF via the cgi-bin/webproc?getpa…

  • Unscored —
    CVE-2019-6279 Public exploit

    ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have an Incorrect Access Control vulner…

  • Unscored —

    This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reade…

  • Unscored —

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User …

  • Unscored —

    This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Phant…

  • Unscored —

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User …

  • Unscored —

    This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reade…

  • Unscored —

    This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Phant…

  • Unscored —

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. U…

  • Unscored —

    This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Phant…

  • Unscored —

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User …

  • Unscored —
    CVE-2019-6275 Public exploit EPSS 13%

    Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote atta…

  • Unscored —
    CVE-2019-6274 Public exploit EPSS 11%

    Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote att…

  • High 8.4

    Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the p…

  • Low 2.9

    Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while i…

  • High 8.4

    eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtua…

  • Low 2.9

    EasyLobby Solo could allow a local attacker to obtain sensitive information, caused by the storing of the social securi…

  • High 7.7

    EasyLobby Solo is vulnerable to a denial of service. By visiting the kiosk and accessing the task manager, a local atta…

  • High 8.4

    eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtua…

  • High 8.4

    Lobby Track Desktop contains default administrative credentials. An attacker could exploit this vulnerability to gain f…

  • High 8.4

    eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error while in kiosk …

  • High 8.4

    eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Fullsc…

  • Medium 4.0

    Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Sample Database…

  • High 8.4

    Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the p…

  • Medium 4.0

    The Receptionist for iPad could allow a local attacker to obtain sensitive information, caused by an error in the conta…

  • High 8.4

    EasyLobby Solo contains default administrative credentials. An attacker could exploit this vulnerability to gain full a…

  • High 8.4

    eVisitorPass contains default administrative credentials. An attacker could exploit this vulnerability to gain full acc…

  • High 8.4

    EasyLobby Solo could allow a local attacker to gain elevated privileges on the system. By visiting the kiosk and typing…

  • Low 2.9

    Envoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain sensitive information, …

  • Low 2.9

    Lobby Track Desktop could allow a local attacker to bypass security restrictions, caused by an error in the find visito…

  • Low 2.9

    Envoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain sensitive information, …

  • Medium 4.0

    Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while i…

  • Unscored —
    CVE-2019-6273 Public exploit EPSS 12%

    download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files.

  • Unscored —
    CVE-2019-6272 Public exploit EPSS 13%

    Command injection vulnerability in login_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attacke…

  • Unscored —
    CVE-2019-6116 Public exploit EPSS 42%

    In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to…

  • Unscored —

    There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located in GfxState.cc in Xpdf…

  • Unscored —

    There is an invalid memory access vulnerability in the function TextPage::findGaps() located at TextOutputDev.c in Xpdf…