Archive
April 2019
Vulnerabilities first published in this month (UTC), newest first.
126 results · Clear filters · Feed
-
Unscored —
OpenKM 6.3.2 through 6.3.7 allows an attacker to upload a malicious JSP file into the /okm:root directories and move th…
-
Unscored —
An issue was discovered in Liferay Portal CE 7.1.2 GA3. An attacker can use Liferay's Groovy script console to execute …
-
Unscored —CVE-2019-11416 Public exploit
A CSRF issue was discovered on Intelbras IWR 3000N 1.5.0 devices, leading to complete control of the router, as demonst…
-
Unscored —
An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. A malformed login request allows remote attackers to caus…
-
Unscored —
A buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long string, as demonstra…
-
Unscored —CVE-2019-11375 Public exploit
Msvod v10 has a CSRF vulnerability to change user information via the admin/member/edit.html URI.
-
Unscored —CVE-2019-11374 Public exploit
74CMS v5.0.1 has a CSRF vulnerability to add a new admin user via the index.php?m=Admin&c=admin&a=add URI.
-
Unscored —
The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Or…
-
Medium 6.1
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Obj…
-
High 7.1
Dell SupportAssist Client versions prior to 3.2.0.90 contain a remote code execution vulnerability. An unauthenticated …
-
Unscored —CVE-2019-10893 Public exploit
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version) and 0.9.8.753 (Pro) is vulnerable t…
-
Unscored —CVE-2019-11017 Public exploit
On D-Link DI-524 V2.06RU devices, multiple Stored and Reflected XSS vulnerabilities were found in the Web Configuration…
-
High 8.8
Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote a…
KEV Nov 3, 2021 -
Unscored —CVE-2019-0162 Public exploit
Memory access in virtual memory mapping for some microprocessors may allow an authenticated user to potentially enable …
-
High 7.7CVE-2017-11427 Public exploit
Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal
OneLogin PythonSAML 2.3.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the atta…
-
High 8.1
Apache Tomcat OS Command Injection vulnerability
When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windo…
-
High 8.1
Gitea Remote Code Execution
models/repo_mirror.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 mishandles mirror repo URL settings, leading to remote code execution.
-
Unscored —
Unauthenticated reflected cross-site scripting (XSS) exists in Zarafa Webapp 2.0.1.47791 and earlier. NOTE: this is a d…
-
Unscored —CVE-2019-0285 Public exploit
The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensitive databa…
-
Unscored —
An issue was discovered in Joomla! before 3.9.5. The Media Manager component does not properly sanitize the folder para…
-
Critical 9.8
Magento 2 Community Edition SQLi Vulnerability
An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which causes sensitive data leakage. This issue is fixed in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2.
-
Critical 9.0
IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root p…
-
Medium 4.5CVE-2019-3842 Public exploit
In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using …
-
High 7.8
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
KEV Nov 3, 2021 -
High 7.8
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard l…
KEV Mar 15, 2022 -
Unscored —CVE-2019-0836 Public exploit
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), a…
-
Unscored —CVE-2019-0805 Public exploit
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), a…
-
High 7.8
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
KEV Nov 3, 2021 -
Unscored —CVE-2019-0796 Public exploit
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), a…
-
Unscored —CVE-2019-0730 Public exploit
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), a…
-
Unscored —CVE-2019-0731 Public exploit
An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), a…
-
Unscored —CVE-2019-0735 Public exploit
An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to prope…
-
High 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…
KEV Feb 15, 2022 -
Unscored —CVE-2019-0732 Public exploit
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Win…
-
Unscored —CVE-2019-5513 Public exploit
VMware Horizon Connection Server (7.x before 7.8, 7.5.x before 7.5.2, 6.x before 6.2.8) contains an information disclos…
-
Unscored —CVE-2019-5512 Public exploit
VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle COM classes appropriatel…
-
Unscored —CVE-2018-14894 Public exploit
CyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker (who is able to edit permissions of a fil…
-
High 7.8
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
KEV Nov 3, 2021 -
Unscored —
A security feature bypass vulnerability exists when Internet Explorer VBScript execution policy does not properly restr…
-
Unscored —CVE-2019-0678 Public exploit
An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, whi…