Archive
3 April 2019
Vulnerabilities first published on this day (UTC), newest first.
202 results · Feed
-
Unscored —
AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier is vulnerable to a Session Fixation attack.
-
Unscored —
AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier allows remote attackers to inject HTML into the scoping das…
-
Unscored —
AxiomSL's Axiom java applet module (used for editing uploaded Excel files and associated Java RMI services) 9.5.3 and e…
-
Unscored —
Vordel XML Gateway (acquired by Axway) version 7.2.2 could allow remote attackers to cause a denial of service via a sp…
-
High 8.1
Cleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBit
Eclipse hawkBit versions prior to 0.3.0M2 resolved Maven build artifacts for the Vaadin based UI over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of hawkBit m…
-
Unscored —
The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted acces…
-
Unscored —
SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial …
-
Unscored —
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to: iOS 12.1,…
-
Unscored —
A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS X El Capi…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Moja…
-
Unscored —
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.…
-
Unscored —
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS Hig…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1…
-
Unscored —
This issue was addressed with improved entitlements. This issue affected versions prior to iOS 12.1.1.
-
Unscored —CVE-2018-4442 Public exploit
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1…
-
Unscored —
"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This i…
-
Unscored —
A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.…
-
Unscored —
A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, Safari 12…
-
Unscored —CVE-2018-4443 Public exploit
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1…
-
Unscored —
A lock screen issue allowed access to photos and contacts on a locked device. This issue was addressed by restricting o…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Moja…
-
Unscored —
A logic issue was addressed with improved validation. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2, …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —
A denial of service issue was addressed by removing the vulnerable code. This issue affected versions prior to iOS 12.1…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Moja…
-
Unscored —
Analytics data was sent using HTTP rather than HTTPS. This was addressed by sending analytics data using HTTPS. This is…
-
Unscored —
A privacy issue in the handling of Open Directory records was addressed with improved indexing. This issue affected ver…
-
Unscored —CVE-2018-4438 Public exploit
A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue aff…
-
Unscored —
A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting op…
-
Unscored —
A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 1…
-
Unscored —CVE-2018-4431 Public exploit
A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12…
-
Unscored —
A certificate validation issue existed in configuration profiles. This was addressed with additional checks. This issue…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, ma…
-
Unscored —
A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12…
-
Unscored —
A memory corruption issue was addressed by removing the vulnerable code. This issue affected versions prior to iOS 12.1…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, ma…
-
Unscored —
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS Moj…