Archive
29 April 2019
Vulnerabilities first published on this day (UTC), newest first.
26 results · Feed
-
Unscored —CVE-2019-11599 Public exploit
The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma l…
-
Medium 5.3
IBM Emptoris Contract Management 10.0.0 and 10.1.3.0 could disclose sensitive information from detailed information fro…
-
Medium 5.9
IBM API Connect 2018.1 and 2018.4.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker t…
-
Medium 5.4
IBM Jazz Reporting Service (JRS) 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows use…
-
Medium 4.3
IBM Jazz Reporting Service (JRS) 6.0.6 could allow an authenticated user to access the execution log files as a guest u…
-
Unscored —
A potential security vulnerability has been identified in Micro Focus Network Automation Software 9.20, 9.21, 10.00, 10…
-
Unscored —
A third party website can access information available to a user with access to a restricted bug entry using the image …
-
Unscored —
Insufficient boundary checks for the strrpos and strripos functions allow access to out-of-bounds memory. This affects …
-
Unscored —
A remote web page could inject arbitrary HTML code into the Oculus Browser UI, allowing an attacker to spoof UI and pot…
-
Unscored —
Wangle's LineBasedFrameDecoder contains logic for identifying newlines which incorrectly advances a buffer, leading to …
-
Unscored —
A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows be…
-
Unscored —
In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c, whic…
-
Unscored —
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, wh…
-
Unscored —
In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru temp_ttl" commands. This ca…
-
Unscored —
In uBlock before 0.9.5.15, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-…
-
Unscored —
In AdBlock before 3.45.0, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-s…
-
Unscored —
In Adblock Plus before 3.5.2, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a clie…
-
Unscored —
When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random value but sends an all-z…
-
Unscored —
Untrusted search path in FileZilla before 3.41.0-rc1 allows an attacker to gain privileges via a malicious 'fzsftp' bin…
-
Unscored —
Element Plug-in for vCenter Server versions prior to 4.2.3 may disclose sensitive account information to an unauthentic…
-
Unscored —
WeBid 1.2.2 has reflected XSS via the id parameter to admin/deletenews.php, admin/editbannersuser.php, admin/editfaqsca…
-
Unscored —
esoTalk 1.0.0g4 has XSS via the PATH_INFO to the conversations/ URI.
-
Unscored —
parse_string in cJSON.c in cJSON before 2016-10-02 has a buffer over-read, as demonstrated by a string that begins with…
-
Unscored —
The WebDorado Contact Form plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parame…
-
Unscored —
The 10Web Form Maker plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, w…
-
Unscored —
An improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an infinite loop and denia…