Archive
April 2019
Vulnerabilities first published in this month (UTC), newest first.
126 results · Clear filters · Feed
-
Unscored —
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Window…
-
Unscored —
A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash ob…
-
High 7.8
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileg…
KEV Nov 3, 2021 -
Unscored —
In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded serv…
-
Unscored —CVE-2019-10887 Public exploit
A reflected HTML injection vulnerability on Salicru SLC-20-cube3(5) devices running firmware version cs121-SNMP v4.54.8…
-
High 8.8CVE-2019-10874 Public exploit
Bolt Cross Site Request Forgery (CSRF)
Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a JavaScript file to include executable extensions in the file/edit/config/config.yml configuration file.
-
High 8.8
Pimcore Unserialize Remote Code Execution
An issue was discovered in Pimcore before 5.7.1. An attacker with classes permission can send a POST request to /admin/class/bulk-commit, which will make it possible to exploit the unserialize function when passing untrusted values in the data parameter to bu…
-
Unscored —
A command injection vulnerability exists in TeemIp versions before 2.4.0. The new_config parameter of exec.php allows o…
-
Unscored —CVE-2019-10273 Public exploit
Information leakage vulnerability in the /mc login page in ManageEngine ServiceDesk Plus 9.3 software allows authentica…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1…
-
Unscored —CVE-2018-4442 Public exploit
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1…
-
Unscored —CVE-2018-4443 Public exploit
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1…
-
Unscored —CVE-2018-4438 Public exploit
A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue aff…
-
Unscored —CVE-2018-4431 Public exploit
A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —CVE-2018-4411 Public exploit
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS Moj…
-
Unscored —CVE-2018-4435 Public exploit
A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.1.1, macOS Mojave …
-
Unscored —CVE-2018-4415 Public exploit
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Moja…
-
Unscored —CVE-2018-4386 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —CVE-2018-4382 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —CVE-2018-4384 Public exploit
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1,…
-
Unscored —CVE-2018-4367 Public exploit
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.
-
Unscored —CVE-2018-4366 Public exploit
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.
-
Unscored —CVE-2018-4343 Public exploit
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, ma…
-
Unscored —CVE-2018-4327 Public exploit
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1.
-
Unscored —CVE-2018-4331 Public exploit
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, ma…
-
Unscored —CVE-2018-4328 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —CVE-2018-4323 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —CVE-2018-4315 Public exploit
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvO…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvO…
-
Unscored —CVE-2018-4317 Public exploit
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvO…
-
Unscored —CVE-2018-4318 Public exploit
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvO…
-
Unscored —CVE-2018-4306 Public exploit
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvO…
-
Unscored —CVE-2018-4312 Public exploit
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvO…
-
Unscored —CVE-2018-4280 Public exploit
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1…
-
Unscored —CVE-2018-4248 Public exploit
An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, m…
-
Unscored —CVE-2018-4197 Public exploit
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvO…
-
Unscored —CVE-2019-10261 Public exploit
CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fie…
-
Unscored —
A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS M…
-
Unscored —CVE-2019-10708 Public exploit
S-CMS PHP v1.0 has SQL injection via the 4/js/scms.php?action=unlike id parameter.