Archive
8 April 2019
Vulnerabilities first published on this day (UTC), newest first.
17 results · Clear filters · Feed
-
Medium 6.5CVE-2019-0703 Exploited
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Wi…
KEV May 23, 2022 -
Medium 6.5
Microsoft.ChakraCore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'.
-
Medium 6.1
Elgg open redirect
Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect.
-
Medium 6.1
Materialize-css vulnerable to Improper Neutralization of Input During Web Page Generation
In Materialize through 1.0.0, XSS is possible via the Toast feature.
-
Medium 6.1
Materialize-css vulnerable to Cross-site Scripting in autocomplete component
In Materialize through 1.0.0, XSS is possible via the Autocomplete feature.
-
Medium 6.1
Materialize-css vulnerable to Cross-site Scripting in tooltip component
In Materialize through 1.0.0, XSS is possible via the Tooltip feature.
-
Medium 4.3
IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site request forgery which could allow an…
-
Medium 5.5
The IBM Cloud Private Key Management Service (IBM Cloud Private 3.1.1 and 3.1.2) could allow a local user to obtain sen…
-
Medium 4.3
IBM Business Automation Workflow and IBM Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 provide embedded doc…
-
Medium 5.3
Some URIs in IBM API Connect 2018.1 and 2018.4.1.3 disclose system specification information like the machine id, syste…
-
Medium 4.3
IBM Business Automation Workflow and Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 are vulnerable to a deni…
-
Medium 4.7
In a certain atypical IBM Spectrum Protect 7.1 and 8.1 configurations, the node password could be displayed in plain te…
-
Medium 5.4
IBM Cloud Private 3.1.0 and 3.1.1 is vulnerable to HTTP HOST header injection, caused by improper validation of input. …
-
Medium 5.3
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain sen…
-
Medium 5.1
IBM Spectrum Protect 7.1 and 8.1 is affected by a password exposure vulnerability caused by insecure file permissions. …
-
Medium 6.1
IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) could allow a remote attacker to hijack the clicking acti…
-
Medium 4.3
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could reveal sensitive version information about the …