Archive
March 2019
Vulnerabilities first published in this month (UTC), newest first.
1,196 results · Feed
-
Unscored —
Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or eleva…
-
Unscored —
Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of pri…
-
High 7.5
Uncontrolled Resource Consumption in org.eclipse.jetty:jetty-server
In Eclipse Jetty version 9.3.x and 9.4.x, the server is vulnerable to Denial of Service conditions if a remote client sends either large SETTINGs frames container containing many settings, or many small SETTINGs frames. The vulnerability is due to the additio…
-
Unscored —
Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of…
-
Unscored —
In Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in the Mosquitto library wh…
-
High 8.7
Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privil…
-
Unscored —
Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege a…
-
Unscored —
Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalat…
-
Unscored —
Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, i…
-
Unscored —
Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentiall…
-
Unscored —
Cross-Site Scripting (XSS) vulnerability in newwinform.php in GNUBOARD5 before 5.3.1.6 allows remote attackers to injec…
-
Unscored —
An Information Disclosure / Data Modification issue exists in article2pdf_getfile.php in the article2pdf Wordpress plug…
-
Unscored —
A disk space or quota exhaustion issue exists in article2pdf_getfile.php in the article2pdf Wordpress plugin 0.24, 0.25…
-
Unscored —
Sitemagic CMS v4.4 has XSS in SMFiles/FrmUpload.class.php via the filename parameter.
-
Unscored —
S-CMS PHP v1.0 has a CSRF vulnerability to add a new admin user via the 4.edu.php/admin/ajax.php?type=admin&action=add&…
-
Unscored —
LCDS Laquis SCADA prior to version 4.1.0.4150 allows an out of bounds read when opening a specially crafted project fil…
-
Unscored —
When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use a password file for authentication, any ma…
-
Unscored —
When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use an ACL file, and that ACL file is empty, o…
-
Unscored —
In Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message to a topic, then has i…
-
Medium 5.3CVE-2019-3829 EPSS 59%
A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double free) vulnerability i…
-
Unscored —
Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB (includes 1756-EWEBK) Version 5.001 and earlier, and Compa…
-
Medium 4.7
Solutions Business Manager (SBM) Information Leakage issue in version prior to 11.5
Information leakage issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.
-
Medium 5.0
Solutions Business Manager (SBM) reflected cross site script issue in version prior to 11.5
Reflected cross site script issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.
-
High 7.4
phpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user parameter.
-
Unscored —CVE-2018-19466 Public exploit
A vulnerability was found in Portainer before 1.20.0. Portainer stores LDAP credentials, corresponding to a master pass…
-
Medium 5.1
Solutions Business Manager (SBM) Denial of Service issue in version prior to 11.5
Denial of service issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.
-
Medium 6.1
Solutions Business Manager (SBM) Unauthenticated remote code execution issue in version prior to 11.5
Unauthenticated remote code execution issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.
-
Unscored —
Teclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie.
-
Unscored —
Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlock_tasks.php.
-
Unscored —
Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication. This occ…
-
Unscored —
A potential security vulnerability caused by incomplete obfuscation of application configuration information was discov…
-
Unscored —
A potential security vulnerability caused by the use of insecure (http) transactions during login has been identified w…
-
Unscored —
HP Support Assistant before 8.7.50.3 allows an unauthorized person with local access to load arbitrary code.
-
Unscored —
Opening a specially crafted LCDS LAquis SCADA before 4.3.1.71 ELS file may result in a write past the end of an allocat…
-
Unscored —
A potential vulnerability has been identified in HP Remote Graphics Software’s certificate authentication process versi…
-
Unscored —
In HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise Printers, solution …
-
Unscored —
Due to unencrypted signal communication and predictability of rolling codes, an attacker can "desynchronize" an ABUS Se…
-
Unscored —
An issue was discovered on ABUS Secvest wireless alarm system FUAA50000 3.01.01 in conjunction with Secvest remote cont…
-
Critical 9.8
Use of Insufficiently Random Values in Railties Allows Remote Code Execution
A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to escalat…
-
High 7.5
Denial of Service Vulnerability in Action View
There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and make the server unresponsive.