Archive
March 2019
Vulnerabilities first published in this month (UTC), newest first.
1,196 results · Feed
-
Unscored —
An Integer overflow vulnerability exists in the batchTransfer function of a smart contract implementation for CryptoBot…
-
Low 2.2
Static tempfile name allows overwriting of arbitrary files
In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink protection
-
Medium 6.5
SMB printer settings don't escape characters in passwords properly
In yast2-printer up to and including version 4.0.2 the SMB printer settings don't escape characters in passwords properly. If a password with backticks or simliar characters is supplied this allows for executing code as root. This requires tricking root to en…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function process_demand_active() that…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function ui_clip_handle_data() that r…
-
Unscored —
rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Read…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in …
-
Unscored —
rdesktop versions up to and including v1.8.3 contain several Out-Of- Bounds Reads in the file secure.c that result in a…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain a Buffer Overflow over the global variables in the function seamle…
-
Unscored —
rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in…
-
Unscored —
The receiver (aka bridge) component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection. Th…
-
Unscored —CVE-2019-9834 Public exploit
The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an impo…
-
Unscored —
The Screen Stream application through 3.0.15 for Android allows remote attackers to cause a denial of service via many …
-
Unscored —CVE-2019-9832 Public exploit
The AirDrop application through 2.0 for Android allows remote attackers to cause a denial of service via a client that …
-
Unscored —
The AirMore application through 1.6.1 for Android allows remote attackers to cause a denial of service (system hang) vi…
-
Unscored —
Cobham Satcom Sailor 250 and 500 devices before 1.25 contained persistent XSS, which could be exploited by an unauthent…
-
Unscored —
Cobham Satcom Sailor 800 and 900 devices contained persistent XSS, which required administrative access to exploit. The…
-
Unscored —
Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the…
-
Unscored —
Cobham Satcom Sailor 250 and 500 devices before 1.25 contained an unauthenticated password reset vulnerability. This co…
-
Unscored —
An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe attempts to enforce access control by a…
-
Unscored —
An issue was discovered in CapMon Access Manager 5.4.1.1005. A regular user can obtain local administrator privileges i…
-
Unscored —
An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe provides "NT AUTHORITY\SYSTEM" access t…
-
Unscored —
An issue was discovered in CapMon Access Manager 5.4.1.1005. An unprivileged user can read the cal_whitelist table in t…
-
Unscored —
An issue was discovered in CapMon Access Manager 5.4.1.1005. The client applications of AccessManagerCoreService.exe co…
-
Unscored —
Maccms 10 allows remote attackers to execute arbitrary PHP code by entering this code in a template/default_pc/html/art…
-
Medium 5.4
IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scriptin…
-
Medium 5.4
IBM Robotic Process Automation with Automation Anywhere 11 is vulnerable to cross-site scripting. This vulnerability al…
-
Medium 5.4
IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability …
-
Medium 5.4
IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scriptin…
-
Medium 5.4
IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to e…
-
Medium 5.4
IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to e…
-
Medium 5.4
IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability …
-
Medium 5.4
IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to e…
-
Medium 4.3
IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 could allow a malicious user to be allowed to view any vie…
-
Medium 6.3
IBM Content Navigator 3.0CD is could allow an attacker to execute arbitrary code on a user's workstation. When editing …
-
Medium 5.4
IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users t…
-
Medium 5.4
IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users t…
-
Medium 5.4
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to cross-site scr…