Archive
March 2019
Vulnerabilities first published in this month (UTC), newest first.
1,196 results · Feed
-
Unscored —
Opera before 57.0.3098.106 is vulnerable to a DLL Search Order hijacking attack where an attacker can send a ZIP archiv…
-
Unscored —
A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet …
-
Critical 9.6
ipycache is vulnerable to Code Injection
A code injection issue was discovered in ipycache through 2016-05-31.
-
Unscored —
A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publishe…
-
Unscored —
A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet …
-
Medium 6.5CVE-2019-3871 EPSS 13%
A vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7. An insufficient validation of…
-
Unscored —
Heimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers, which allows remote atta…
-
Medium 5.0
An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from…
-
High 7.5
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way p…
-
Critical 9.8
Donfig Command Injection in collect_yaml method
An issue was discovered in Donfig 0.3.0. There is a vulnerability in the collect_yaml method in config_obj.py. It can execute arbitrary Python commands, resulting in command execution.
-
Unscored —
Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution.…
-
Unscored —
Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution.…
-
Unscored —
A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V14), SICAM A8000 CP-802X (All versions < V1…
-
Unscored —
Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script t…
-
Unscored —
Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a de…
-
Unscored —
Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401,…
-
Unscored —
An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursi…
-
Unscored —
PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function…
-
Unscored —CVE-2019-8997 Public exploit
An XML External Entity Injection (XXE) vulnerability in the Management System (console) of BlackBerry AtHoc versions ea…
-
High 8.5
An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware versi…
-
High 8.5
An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware versi…
-
High 8.5
An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware versi…
-
Critical 9.8
Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.
KEV Dec 10, 2021 -
High 8.2
An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.…
-
Critical 9.0
An exploitable command injection vulnerability exists in the DHCP daemon configuration of the CUJO Smart Firewall. When…
-
Medium 5.3
An exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall, version 7003. The bug lies i…
-
Medium 6.5
An exploitable integer underflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall, version 7003. W…
-
Unscored —
RISI Gestao de Horarios v3201.09.08 rev.23 allows SQL Injection.
-
High 8.3
An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall. When parsing mDNS pac…
-
High 8.2
An exploitable vulnerability exists in the verified boot protection of the CUJO Smart Firewall. It is possible to add a…
-
High 8.3
An exploitable heap overflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall running firmware 700…
-
Unscored —
A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.35), Fir…
-
High 7.1
An exploitable privilege escalation vulnerability exists in the helper service CleanMyMac X, version 4.20, due to impro…
-
Medium 6.4
The IBM Power 9 OP910, OP920, and FW910 boot firmware's bootloader is responsible for loading and validating the initia…
-
Medium 5.9
IBM InfoSphere Streams 4.2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt…
-
Medium 6.5
An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version…
-
High 7.7
An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4.…
-
Unscored —
A malicious attacker can trigger a remote buffer overflow in the Communication Server in Fatek Automation PM Designer V…
-
Unscored —
Moxa G3100V2 Series, editions prior to Version 2.8, and OnCell G3111/G3151/G3211/G3251 Series, editions prior to Versio…
-
Unscored —
Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71.