Archive
24 March 2019
Vulnerabilities first published on this day (UTC), newest first.
26 results · Feed
-
Unscored —
PHPCMS 9.6.x through 9.6.3 has XSS via the mailbox (aka E-mail) field on the personal information screen.
-
Unscored —
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec in Function.cc for th…
-
Unscored —
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nBit…
-
Unscored —
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu at Splash.cc for y Bres…
-
Unscored —
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for th…
-
Unscored —
An issue was discovered in Xpdf 4.01.01. There is a NULL pointer dereference in the function Gfx::opSetExtGState in Gfx…
-
Unscored —
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nCom…
-
Unscored —
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu at Splash.cc for x Bres…
-
Unscored —
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PSOutputDev::checkPageSlice at PSOutputDev.cc …
-
Unscored —
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for th…
-
Unscored —
CMS Made Simple 2.2.10 has XSS via the moduleinterface.php Name field, which is reachable via an "Add a new Profile" ac…
-
Unscored —
baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configu…
-
Unscored —
In DedeCMS 5.7SP2, member/resetpassword.php allows remote authenticated users to reset the passwords of arbitrary users…
-
Medium 6.1
Moderate severity vulnerability that affects league/commonmark
Cross-site scripting (XSS) vulnerability in the PHP League CommonMark library before 0.18.3 allows remote attackers to insert unsafe links into HTML by using double-encoded HTML entities that are not properly escaped during rendering, a different vulnerabilit…
-
Medium 6.1
The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_opti…
KEV Nov 3, 2021 -
Unscored —
The renderer process in the entertainment system on Tesla Model 3 vehicles mishandles JIT compilation, which allows att…
-
Unscored —
Open Whisper Signal (aka Signal-Desktop) through 1.23.1 and the Signal Private Messenger application through 4.35.3 for…
-
Unscored —
XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly hav…
-
Unscored —
XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly hav…
-
Unscored —
XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly hav…
-
Unscored —
XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly hav…
-
Unscored —
XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have u…
-
Unscored —
XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have u…
-
Unscored —
XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have u…
-
Unscored —
XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have u…
-
Unscored —
The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relat…