Archive
19 April 2019
Vulnerabilities first published on this day (UTC), newest first.
29 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in display.php in I, Librarian 4.10 allows remote attackers to inject arbitrar…
-
Unscored —
SV_SteamAuthClient in various Activision Infinity Ward Call of Duty games before 2015-08-11 is missing a size check whe…
-
Unscored —
The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Or…
-
Unscored —
TeamSpeak 3 Client before 3.2.5 allows remote code execution in the Qt framework.
-
Unscored —
CloudBees Jenkins Operations Center 2.150.2.3, when an expired trial license exists, allows Cleartext Password Storage …
-
Unscored —
In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out-of-bound read due to an incorrect bounds check. T…
-
Unscored —
In the configuration of NFC modules on certain devices, there is a possible failure to distinguish individual devices d…
-
Unscored —
In SetScanResponseData of ble_advertiser_hci_interface.cc, there is a possible out-of-bound write due to a missing boun…
-
Unscored —
In btm_proc_smp_cback of tm_ble.cc, there is a possible memory corruption due to a use after free. This could lead to r…
-
Unscored —
In rw_i93_process_ext_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This …
-
Unscored —
In rw_i93_sm_detect_ndef of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could …
-
Unscored —
In rw_i93_process_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This coul…
-
Unscored —
In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible out-of-bound write due to a missing bounds check. This could…
-
Unscored —
In rw_i93_sm_read_ndef of rw_i93.cc, there is a possible out-of-bounds write due to an integer overflow. This could lea…
-
Unscored —
In create_hdr of dnssd_clientstub.c, there is a possible use after free. This could lead to local escalation of privile…
-
Unscored —
In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a missing bounds check.…
-
Unscored —
In removeInterfaceAddress of NetworkController.cpp, there is a possible use after free. This could lead to remote code …
-
Unscored —
In numerous hand-crafted functions in libmpeg2, NEON registers are not preserved. This could lead to remote code execut…
-
Unscored —
In floor0_inverse1 of floor0.c, there is a possible out of bounds write due to an incorrect bounds check. This could le…
-
Unscored —
In updateAssistMenuItems of Editor.java, there is a possible escape from the Setup Wizard due to a missing permission c…
-
Unscored —
Vesta Control Panel 0.9.8-23 allows XSS via a crafted URL.
-
Unscored —
data/inc/files.php in Pluck 4.7.8 allows remote attackers to execute arbitrary code by uploading a .htaccess file that …
-
Unscored —
hw/sparc64/sun4u.c in QEMU 3.1.50 is vulnerable to a NULL pointer dereference, which allows the attacker to cause a den…
-
Unscored —
An incorrect access control exists in the Sony Photo Sharing Plus application in the firmware before PKG6.5629 version …
-
Medium 5.3
IBM QRadar SIEM 7.3 discloses sensitive information to unauthorized users. The information can be used to mount further…
-
High 7.5
IBM MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, and 9.1.0.0 through 9.1.1 is vulnerable to a denial of servic…
-
Unscored —
In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past t…
-
Medium 5.9
Matrix Sydent mishandles emails
util/emailutils.py in Matrix Sydent before 1.0.2 mishandles registration restrictions that are based on e-mail domain, if the allowed_local_3pids option is enabled. This occurs because of potentially unwanted behavior in Python, in which an email.utils.parsea…
-
Medium 6.1
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Obj…