Archive
12 April 2019
Vulnerabilities first published on this day (UTC), newest first.
25 results · Feed
-
High 8.8
Subrion CMS vulnerable to CSRF in blog/delete
Subrion CMS 4.1.5 has CSRF in blog/delete/.
-
Medium 5.5
It was discovered that a world-readable log file belonging to Candlepin component of Red Hat Satellite 6.4 leaked the c…
-
Unscored —
Moxa IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and p…
-
Unscored —
Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph func…
-
Unscored —
Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.
-
Unscored —
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.
-
Unscored —
Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.
-
Unscored —
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.
-
Unscored —
gf_bin128_parse in utils/os_divers.c in GPAC 0.7.1 has a buffer overflow issue for the crypt feature when encountering …
-
Unscored —
GPAC 0.7.1 has a buffer overflow issue in gf_import_message() in media_import.c.
-
Unscored —
There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-settings large_feed_limit. NOT…
-
Unscored —
There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-import custom_type. NOTE: The …
-
Unscored —
There are multiple XSS vulnerabilities in WP All Import plugin 3.4.9 for WordPress via action=template. NOTE: The vendo…
-
Unscored —
Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.
-
Unscored —
There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via Add Filtering Options(Add Rule). NOTE: Th…
-
Unscored —
There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=evaluate. NOTE: The vendor states …
-
Unscored —
There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=options. NOTE: The vendor states t…
-
Unscored —
The Events Manager plugin 5.9.4 for WordPress has XSS via the dbem_event_reapproved_email_body parameter to the wp-admi…
-
Critical 9.8
Within multiple XEROX products a vulnerability allows remote command execution on the Linux system, as the "nobody" use…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition Migration tool 1.1.12 and earlier may allow a…
-
Unscored —
NVIDIA Jetson TX2 contains a vulnerability in the kernel driver where input/output control (IOCTL) handling for user mo…
-
Unscored —
NVIDIA Jetson TX2 contains a vulnerability by means of speculative execution where local and unprivileged code may acce…
-
Unscored —
A buffer overflow has been found in the Zephyr Project's getaddrinfo() implementation in 1.9.0 and 1.10.0.
-
Unscored —
In Pulse Secure Pulse Desktop Client and Network Connect, an attacker could access session tokens to replay and spoof s…
-
Unscored —
An authentication bypass vulnerability in all versions of ValuePLUS Integrated University Management System (IUMS) allo…