Archive
2 May 2019
Vulnerabilities first published on this day (UTC), newest first.
26 results · Feed
-
High 7.8CVE-2019-11687 Public exploit
An issue was discovered in the DICOM Part 10 File Format in the NEMA DICOM Standard 1995 through 2019b and continuing i…
-
High 7.5
phpBB Denial of Service
The fulltext search component in phpBB before 3.2.6 allows Denial of Service.
-
Unscored —CVE-2018-10383 Scanner template
Lantronix SecureLinx Spider (SLS) 2.2+ devices have XSS in the auth.asp login page.
-
Unscored —
An issue was discovered in Open XDMoD through 7.5.0. An authentication bypass (account takeover) exists due to a weak p…
-
Unscored —
An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/dl_publication.php allows Path traversal via the …
-
Unscored —
An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/login.php has Reflected XSS via the xd_user_forma…
-
Unscored —
An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted…
-
Unscored —
A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox.
-
Unscored —CVE-2018-16716 Scanner template
A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, whi…
-
Unscored —
DWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 has a Buffer Overflow associated with the size field for the …
-
Unscored —
udp_gro_receive_segment in net/ipv4/udp_offload.c in the Linux kernel 5.x before 5.0.13 allows remote attackers to caus…
-
Unscored —
A DOM based XSS vulnerability has been identified in the Netstorage component of Open Enterprise Server (OES) allowing …
-
Unscored —CVE-2018-12404 EPSS 44%
A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content…
-
Unscored —
The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has two user accoun…
-
Unscored —
The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three user accounts with defau…
-
Unscored —
The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerabil…
-
Unscored —
The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default pass…
-
Unscored —
The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in …
-
Unscored —
The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote…
-
Critical 9.8
The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injec…
KEV Aug 7, 2023 -
Medium 6.4
IBM API Connect 2018.1 and 2018.4.1.4 could allow a remote attacker to hijack the clicking action of the victim. By per…
-
Unscored —
A buffer overflow in the SMTP response service in MailCarrier 2.51 allows the attacker to execute arbitrary code remote…
-
Unscored —
The "default reports" feature in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123218 is vulnerable to SQL Inje…
-
Unscored —
The Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to XML …
-
Unscored —
The user defined DNS name in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to stored XSS a…
-
Unscored —
The groonga-httpd package 6.1.5-1 for Debian sets the /var/log/groonga ownership to the groonga account, which might le…