Archive
9 April 2019
Vulnerabilities first published on this day (UTC), newest first.
169 results · Feed
-
Medium 5.9
Insecure transport protocol in Gradle
Gradle versions from 1.4 to 5.3.1 use an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins are used. Dependency artifacts could have been maliciously compromised by a MITM attack against the ajax.googleapis…
-
Low 2.5
Information Disclosure in GlobalProtect Agent
GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the end-user account and gained the ability to inspect memory, to access authentication and/or session toke…
-
Unscored —
An improper access control vulnerability in FortiClientMac before 6.0.5 may allow an attacker to affect the application…
-
Unscored —
A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may allow an attacker to execu…
-
Unscored —
A configuration issue has been discovered in Forcepoint Email Security 8.4.x and 8.5.x: the product is left in a vulner…
-
Unscored —CVE-2019-8456 EPSS 20%
Check Point IKEv2 IPsec VPN up to R80.30, in some less common conditions, may allow an attacker with knowledge of the i…
-
Medium 4.5CVE-2019-3842 Public exploit
In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using …
-
Unscored —
Symantec VIP Enterprise Gateway (all versions) may be susceptible to a cross-site scripting (XSS) exploit, which is a t…
-
Unscored —
An elevation of privilege vulnerability exists when Azure DevOps Server 2019 does not properly enforce project permissi…
-
Unscored —
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly s…
-
Unscored —
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly s…
-
Unscored —
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided inp…
-
Unscored —
A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Az…
-
Unscored —
An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in mem…
-
Unscored —
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly s…
-
Unscored —
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web…
-
Unscored —
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly s…
-
High 7.5CVE-2019-0860 EPSS 11%
ChakraCore Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2…
-
High 7.5CVE-2019-0861 EPSS 11%
ChakraCore Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2…
-
High 7.8
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
KEV Nov 3, 2021 -
Unscored —
A spoofing vulnerability that could allow a security feature bypass exists in when Azure DevOps Server does not properl…
-
Unscored —CVE-2019-0862 EPSS 11%
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…
-
Unscored —CVE-2019-0853 EPSS 30%
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles object…
-
Unscored —
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly s…
-
Unscored —CVE-2019-0856 EPSS 19%
A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Remote Cod…
-
Unscored —CVE-2019-0846 EPSS 16%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2019-0842 EPSS 18%
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Window…
-
Unscored —CVE-2019-0847 EPSS 16%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
High 7.8
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard l…
KEV Mar 15, 2022 -
Unscored —
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'W…
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windo…
-
Unscored —CVE-2019-0845 EPSS 15%
A remote code execution vulnerability exists when the IOleCvt interface renders ASP webpage content, aka 'Windows IOleC…
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windo…
-
Unscored —
An information disclosure vulnerability exists when the Terminal Services component improperly discloses the contents o…
-
Unscored —CVE-2019-0851 EPSS 16%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory, ak…
-
Unscored —CVE-2019-0827 EPSS 11%
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles ob…