Archive
13 May 2019
Vulnerabilities first published on this day (UTC), newest first.
80 results · Feed
-
Unscored —
The GraceMedia Media Player plugin 1.0 for WordPress allows Local File Inclusion via the "cfg" parameter.
-
Unscored —
A Path Traversal vulnerability located in the webserver affects several Bosch hardware and software products. The vulne…
-
Unscored —
An Open Redirect vulnerability located in the webserver affects several Bosch hardware and software products. The vulne…
-
Unscored —
An issue was discovered in the administration page in IPBRICK OS 6.3. There are multiple XSS vulnerabilities.
-
Unscored —
An issue was discovered in the Web Management Console in IPBRICK OS 6.3. There are multiple SQL injections.
-
Unscored —
An issue was discovered in the administrator interface in IPBRICK OS 6.3. The application doesn't check for Anti-CSRF t…
-
Unscored —
An issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the function SSHParseBanner is composed only of…
-
Unscored —
A SQL injection vulnerability in the activities API in OpenProject before 8.3.2 allows a remote attacker to execute arb…
-
Unscored —CVE-2018-16139 Scanner template
Cross-site scripting (XSS) vulnerability in BIBLIOsoft BIBLIOpac 2008 allows remote attackers to inject arbitrary web s…
-
High 7.2
Cisco IOS XE Software Web UI Command Injection Vulnerability
A vulnerability in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the …
-
Medium 6.7
Cisco Secure Boot Hardware Tampering Vulnerability
A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local attacker to write a modified firmware image to the component. This vulnerability a…
-
Unscored —
The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, …
-
Unscored —CVE-2018-18912 Public exploit
An issue was discovered in Easy File Sharing (EFS) Web Server 7.2. A stack-based buffer overflow vulnerability occurs w…
-
Unscored —
Citrix ShareFile before 19.23 allows a downgrade from two-factor authentication to one-factor authentication. An attack…
-
Unscored —
Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on differ…
-
Unscored —
KonaKart 8.9.0.0 is vulnerable to Remote Code Execution by uploading a web shell as a product category image.
-
Unscored —
A Remote Code Execution issue in the DNS Query Web UI in Lifesize Icon LS_RM3_3.7.0 (2421) allows remote authenticated …
-
Unscored —
Unauthenticated password hash disclosure in the User.getUserPWD method in eQ-3 AG Homematic CCU3 3.43.15 and earlier al…
-
Unscored —
Directory Traversal / Arbitrary File Read in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to read…
-
Unscored —
A buffer over-read issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the decode-mpls.c function Deco…
-
Unscored —
A Local Privilege Escalation in libqcocoa.dylib in Foxit Reader 3.1.0.0111 on macOS has been discovered due to an incor…
-
Unscored —
In MobaTek MobaXterm Personal Edition v11.1 Build 3860, the SSH private key and its password can be retrieved from proc…
-
Medium 4.0
A security vulnerability has been identified in IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 with CE…
-
Unscored —
Directory Traversal was discovered in University of Cambridge mod_ucam_webauth before 2.0.2. The key identification fie…
-
Critical 10.0
An exploitable code execution vulnerability exists in the HTTP request-parsing function of the NT9665X Chipset firmware…
-
High 7.5
An exploitable denial-of-service vulnerability exists in the thumbnail display functionality of the NT9665X Chipset fir…
-
Medium 5.3
An exploitable denial-of-service vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chipset firmwa…
-
Medium 5.3
An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware running on the Anker Roav A1 Dashca…
-
Critical 10.0
An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware, running on Anker Roav A1 Dashcam v…
-
High 7.5
An exploitable denial-of-service vulnerability exists in the XML_GetRawEncJpg Wi-Fi command of the NT9665X Chipset firm…
-
High 7.5
An exploitable denial-of-service vulnerability exists in the XML_GetScreen Wi-Fi command of the NT9665X Chipset firmwar…
-
Critical 10.0
An exploitable code execution vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chipset firmware,…
-
High 7.1
An exploitable vulnerability exists in the Wi-Fi Access Point feature of the Roav A1 Dashcam running version RoavA1SWV1…
-
High 8.0
An exploitable code execution vulnerability exists in the URL-parsing functionality of the Roav A1 Dashcam running vers…
-
High 8.0
An exploitable code execution vulnerability exists in Wi-Fi Command 9999 of the Roav A1 Dashcam running version RoavA1S…
-
Unscored —CVE-2019-11429 Public exploit
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version), 0.9.8.753 (Pro) and 0.9.8.807 (Pro…
-
Unscored —
Gridea v0.8.0 has an XSS vulnerability through which the Nodejs module can be called to achieve arbitrary code executio…
-
Medium 4.0
susemanager installer creates world-readable swap files
SUSE Manager until version 4.0.7 and Uyuni until commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade created world-readable swap files on systems that don't have a swap already configured and don't have btrfs as filesystem
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in ProfileDesign CMS v6.0.2.5 allows remote attackers to inject arb…
-
Unscored —
Multiple stored cross-site scripting (XSS) in the MyThemeShop Launcher plugin 1.0.8 for WordPress allow remote authenti…