Archive
March 2019
Vulnerabilities first published in this month (UTC), newest first.
1,196 results · Feed
-
Unscored —
In CMS Made Simple (CMSMS) before 2.2.10, an authenticated user can achieve SQL Injection in class.showtime2_data.php v…
-
Unscored —
sftnow through 2018-12-29 allows index.php?g=Admin&m=User&a=add_post CSRF to add an admin account.
-
Unscored —
PoDoFo 0.9.6 has a heap-based buffer overflow in PdfString::ConvertUTF16toUTF8 in base/PdfString.cpp.
-
Unscored —
pacman before 5.1.3 allows directory traversal when installing a remote package via a specified URL "pacman -U <url>" d…
-
Unscored —
The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm,…
-
Unscored —
An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar/tar.c ha…
-
Unscored —
Stored XSS exists in YzmCMS 5.2 via the admin/system_manage/user_config_edit.html "value" parameter,
-
Unscored —
Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter.
-
Unscored —
An issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function OFXApplication::startElem…
-
Unscored —
An issue was discovered in JTBC(PHP) 3.0.1.8. Its cache management module is flawed. An arbitrary file ending in "inc.p…
-
Medium 5.3
Moderate severity vulnerability that affects com.puppycrawl.tools:checkstyle
Checkstyle before 8.18 loads external DTDs by default.
-
Unscored —CVE-2019-9650 Public exploit
An XSS issue was discovered in upcoming_events.php in the Upcoming Events plugin before 1.33 for MyBB via a crafted nam…
-
Unscored —
An issue was discovered in SDCMS V1.7. In the \app\admin\controller\themecontroller.php file, the check_bad() function'…
-
Unscored —
There is a CSRF in SDCMS V1.7 via an m=admin&c=theme&a=edit request. It allows PHP code injection by providing a filena…
-
Unscored —
The Contact Form Email plugin before 1.2.66 for WordPress allows wp-admin/admin.php item XSS, related to cp_admin_int_e…
-
Unscored —CVE-2019-9580 Public exploit
In st2web in StackStorm Web UI before 2.9.3 and 2.10.x before 2.10.3, it is possible to bypass the CORS protection mech…
-
Unscored —
UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially r…
-
Unscored —
UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-o…
-
Unscored —
UltraVNC revision 1207 has out-of-bounds read vulnerability in VNC client code inside TextChat module, which results in…
-
Unscored —
UltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside FileTransfer module, whi…
-
Unscored —
UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnect…
-
Unscored —
UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, …
-
Unscored —
UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code…
-
Unscored —
UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer handler, which …
-
Unscored —
UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read st…
-
Unscored —
UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentiall…
-
Unscored —
UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of Clie…
-
Unscored —
UltraVNC revision 1210 has out-of-bounds read vulnerability in VNC client code inside Ultra decoder, which results in a…
-
Unscored —
UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handle…
-
Unscored —
UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS mac…
-
Unscored —
UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler…
-
Unscored —
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There …
-
Unscored —
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There …
-
Unscored —
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There …
-
Unscored —
An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() acro…
-
Unscored —
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There …
-
High 7.5
Server-Side Request Forgery (SSRF) in org.apache.solr:solr-core
Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive). Since the "shards" parameter does not have a corresponding whitelist mechanism, a remote attacker with access to the server could make Solr perform an HTTP GET request to any reac…
-
Medium 5.3
Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorr…
-
Critical 9.9
Script security sandbox bypass in Jenkins Email Extension Plugin
A sandbox bypass vulnerability exists in Jenkins Email Extension Plugin 2.64 and earlier in pom.xml, src/main/java/hudson/plugins/emailext/ExtendedEmailPublisher.java, src/main/java/hudson/plugins/emailext/plugins/content/EmailExtScript.java, src/main/java/hu…
-
Critical 9.9
Script security sandbox bypass in Jenkins Job DSL Plugin
A sandbox bypass vulnerability exists in Jenkins Job DSL Plugin 1.71 and earlier in job-dsl-core/src/main/groovy/javaposse/jobdsl/dsl/AbstractDslScriptLoader.groovy, job-dsl-plugin/build.gradle, job-dsl-plugin/src/main/groovy/javaposse/jobdsl/plugin/JobDslWhi…