Archive
8 April 2019
Vulnerabilities first published on this day (UTC), newest first.
81 results · Feed
-
Unscored —CVE-2019-0697 EPSS 33%
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP respo…
-
Unscored —CVE-2019-0698 EPSS 57%
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP respo…
-
Unscored —
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from …
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windo…
-
Medium 6.5CVE-2019-0703 Exploited
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Wi…
KEV May 23, 2022 -
Unscored —
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Wi…
-
Unscored —CVE-2019-0726 EPSS 54%
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP respo…
-
Medium 6.5
Microsoft.ChakraCore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'.
-
Unscored —CVE-2019-0748 EPSS 14%
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles ob…
-
Unscored —
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Serv…
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windo…
-
Unscored —CVE-2019-0678 Public exploit
An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, whi…
-
Unscored —
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…
-
Unscored —
An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows …
-
Unscored —
An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an …
-
Unscored —
An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows …
-
Unscored —
A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly valid…
-
Unscored —
An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows …
-
Unscored —
An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows …
-
Unscored —
An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows …
-
Unscored —
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from …
-
Unscored —
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …
-
Unscored —
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Window…
-
Unscored —CVE-2019-0666 EPSS 20%
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Window…
-
Unscored —
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Window…
-
High 7.5CVE-2019-0639 EPSS 12%
High severity vulnerability that affects Microsoft.ChakraCore
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0680, CVE-2019-0769, CVE-2019-07…
-
Unscored —CVE-2019-0617 EPSS 20%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —
A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash ob…
-
High 7.5
High severity vulnerability that affects Microsoft.ChakraCore
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0592.
-
High 7.5
High severity vulnerability that affects Microsoft.ChakraCore
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0639, CVE-2019-0680, CVE-2019-0769, CVE-2…
-
Unscored —CVE-2019-0603 EPSS 34%
A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in…
-
High 7.5CVE-2019-0592 EPSS 23%
High severity vulnerability that affects Microsoft.ChakraCore
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0611.
-
Unscored —
FontInfoScanner::scanFonts in FontInfo.cc in Poppler 0.75.0 has infinite recursion, leading to a call to the error func…
-
Unscored —
In clearFilter() in utilities.php in Cacti before 1.2.3, no escaping occurs before printing out the value of the SNMP c…
-
Unscored —
The load_pnm function in frompnm.c in libsixel.a in libsixel 1.8.2 has infinite recursion.
-
Unscored —
The agroot() function in cgraph\obj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a NULL pointer dereference, as …
-
High 7.8
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileg…
KEV Nov 3, 2021 -
Critical 9.8
ThinkAdmin Administrator cookies still working after password change
application\admin\controller\User.php in ThinkAdmin V4.0 does not prevent continued use of an administrator's cookie-based credentials after a password change.
-
Medium 6.1
Elgg open redirect
Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect.