29 March 2019

22 results · Feed

• Unscored —
  CVE-2018-18766

  An elevation of privilege vulnerability exists in the Call Dispatcher in Provisio SiteKiosk before 9.7.4905.

  Mar 29, 2019
• Unscored —
  CVE-2018-19201

  A reflected XSS vulnerability in the ModCP Profile Editor in MyBB before 1.8.20 allows remote attackers to inject JavaS…

  Mar 29, 2019
• Unscored —
  CVE-2018-15840

  TP-Link TL-WR840N devices allow remote attackers to cause a denial of service (networking outage) via fragmented packet…

  Mar 29, 2019
• Unscored —
  CVE-2018-20378

  The L2CAP signaling channel implementation and SDP server implementation in OpenSynergy Blue SDK 3.2 through 6.0 allow …

  Mar 29, 2019
• Medium 5.8
  CVE-2019-9922 Scanner template EPSS 10%

  An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Directory Traversal allows read access …

  Mar 29, 2019
• High 7.7
  CVE-2019-9921

  An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to read information that…

  Mar 29, 2019
• High 7.7
  CVE-2019-9920

  An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to perform an action wit…

  Mar 29, 2019
• Medium 5.4
  CVE-2019-9919

  An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to craft messages in a w…

  Mar 29, 2019
• High 8.5
  CVE-2019-9918

  An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Input does not get validated and querie…

  Mar 29, 2019
• Unscored —
  CVE-2017-18106

  The identifier_hash for a session token in Atlassian Crowd before version 2.9.1 could potentially collide with an ident…

  Atlassian Crowd
  Mar 29, 2019
• Unscored —
  CVE-2017-18110

  The administration backup restore resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before versio…

  Atlassian Crowd
  Mar 29, 2019
• Unscored —
  CVE-2017-18111

  The OAuthHelper in Atlassian Application Links before version 5.0.10, from version 5.1.0 before version 5.1.3, and from…

  Atlassian Application Links
  Mar 29, 2019
• Unscored —
  CVE-2017-18109

  The login resource of CrowdId in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allow…

  Atlassian Crowd
  Mar 29, 2019
• Unscored —
  CVE-2017-18105

  The console login resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows r…

  Atlassian Crowd
  Mar 29, 2019
• Unscored —
  CVE-2017-18108

  The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows remote attackers with ad…

  Atlassian Crowd
  Mar 29, 2019
• Unscored —
  CVE-2019-9604

  PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Cross-Site Request Forgery (CSRF) for Edit Profile actio…

  Mar 29, 2019
• Unscored —
  CVE-2019-9605

  PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting (XSS) via the err value i…

  Mar 29, 2019
• Unscored —
  CVE-2019-9695

  Norton Core prior to v278 may be susceptible to an arbitrary code execution issue, which is a type of vulnerability tha…

  Norton Norton Core
  Mar 29, 2019
• Unscored —
  CVE-2019-6481

  Abine Blur 7.8.2431 allows remote attackers to conduct "Second-Factor Auth Bypass" attacks by using the "Perform a righ…

  Mar 29, 2019
• Unscored —
  CVE-2019-10477

  The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions.

  Mar 29, 2019
• Unscored —
  CVE-2019-10276

  Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify.php URI, as demonstra…

  Mar 29, 2019
• Unscored —
  CVE-2019-10269

  BWA (aka Burrow-Wheeler Aligner) before 2019-01-23 has a stack-based buffer overflow in the bns_restore function in bnt…

  bwa bwa Debian Ubuntu
  Mar 29, 2019