Archive
21 March 2019
Vulnerabilities first published on this day (UTC), newest first.
53 results · Feed
-
Unscored —CVE-2019-9915 Scanner template
GetSimpleCMS 3.3.13 has an Open Redirect via the admin/index.php redirect parameter.
-
Unscored —
The yop-poll plugin before 6.0.3 for WordPress has wp-admin/admin.php?page=yop-polls&action=view-votes poll_id XSS.
-
Unscored —
The wp-live-chat-support plugin before 8.0.18 for WordPress has wp-admin/admin.php?page=wplivechat-menu-gdpr-page term …
-
Unscored —CVE-2019-9912 Scanner template
The wp-google-maps plugin before 7.10.43 for WordPress has XSS via the wp-admin/admin.php PATH_INFO.
-
Unscored —
The social-networks-auto-poster-facebook-twitter-g plugin before 4.2.8 for WordPress has wp-admin/admin.php?page=nxssna…
-
Unscored —
The kingcomposer plugin 2.7.6 for WordPress has wp-admin/admin.php?page=kc-mapper id XSS.
-
Unscored —
The "Donation Plugin and Fundraising Platform" plugin before 2.3.1 for WordPress has wp-admin/edit.php csv XSS.
-
Unscored —
The font-organizer plugin 2.1.1 for WordPress has wp-admin/options-general.php manage_font_id XSS.
-
Unscored —
Opera before 57.0.3098.106 is vulnerable to a DLL Search Order hijacking attack where an attacker can send a ZIP archiv…
-
Unscored —
A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet …
-
Critical 9.6
ipycache is vulnerable to Code Injection
A code injection issue was discovered in ipycache through 2016-05-31.
-
Unscored —
A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publishe…
-
Unscored —
A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet …
-
Medium 6.5CVE-2019-3871 EPSS 13%
A vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7. An insufficient validation of…
-
Unscored —
Heimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers, which allows remote atta…
-
Medium 5.0
An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from…
-
High 7.5
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way p…
-
Critical 9.8
Donfig Command Injection in collect_yaml method
An issue was discovered in Donfig 0.3.0. There is a vulnerability in the collect_yaml method in config_obj.py. It can execute arbitrary Python commands, resulting in command execution.
-
Unscored —
Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution.…
-
Unscored —
Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution.…
-
Unscored —
A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V14), SICAM A8000 CP-802X (All versions < V1…
-
Unscored —
Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script t…
-
Unscored —
Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a de…
-
Unscored —
Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401,…
-
Unscored —
An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursi…
-
Unscored —
PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function…
-
Unscored —CVE-2019-8997 Public exploit
An XML External Entity Injection (XXE) vulnerability in the Management System (console) of BlackBerry AtHoc versions ea…
-
High 8.5
An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware versi…
-
High 8.5
An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware versi…
-
High 8.5
An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware versi…
-
Critical 9.8
Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.
KEV Dec 10, 2021 -
High 8.2
An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.…
-
Critical 9.0
An exploitable command injection vulnerability exists in the DHCP daemon configuration of the CUJO Smart Firewall. When…
-
Medium 5.3
An exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall, version 7003. The bug lies i…
-
Medium 6.5
An exploitable integer underflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall, version 7003. W…
-
Unscored —
RISI Gestao de Horarios v3201.09.08 rev.23 allows SQL Injection.
-
High 8.3
An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall. When parsing mDNS pac…
-
High 8.2
An exploitable vulnerability exists in the verified boot protection of the CUJO Smart Firewall. It is possible to add a…
-
High 8.3
An exploitable heap overflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall running firmware 700…
-
Unscored —
A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.35), Fir…