Archive
7 June 2019
Vulnerabilities first published on this day (UTC), newest first.
79 results · Feed
-
High —
Prototype Pollution in querystringify
A vulnerability was found in querystringify before 2.0.0. It's possible to override built-in properties of the resulting query string object if a malicious string is inserted in the query string.
-
Medium —
Regular Expression Denial of Service
A Regular Expression vulnerability was found in nwmatcher before 1.4.4. The fix replacing multiple repeated instances of the "\s*" pattern.
-
Medium 5.6
Rate Limiting Bypass in express-brute
All versions of `express-brute` are vulnerable to Rate Limiting Bypass. Concurrent requests may lead to race conditions that cause the package to incorrectly count requests. This may allow an attacker to bypass the rate limiting provided by the package and ex…
-
Unscored —
HotelDruid before v2.3.1 has SQL Injection via the /visualizza_tabelle.php anno parameter.
-
Unscored —
HotelDruid before v2.3.1 has SQL Injection via the /tab_tariffe.php numtariffa1 parameter.
-
Unscored —
In Hoteldruid before 2.3.1, a division by zero was discovered in $num_tabelle in tab_tariffe.php (aka the numtariffa1 p…
-
Unscored —
Due to unencrypted and unauthenticated data communication, the wireless presenter Logitech R700 Laser Presentation Remo…
-
Unscored —
Due to unencrypted and unauthenticated data communication, the wireless presenter Inateck WP2002 is prone to keystroke …
-
Unscored —
Due to unencrypted and unauthenticated data communication, the wireless presenter Inateck WP1001 v1.3C is prone to keys…
-
Unscored —CVE-2019-3957 EPSS 26%
Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the…
-
Unscored —
Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the…
-
Unscored —CVE-2019-3955 EPSS 18%
Dameware Remote Mini Control version 12.1.0.34 and prior contains a unauthenticated remote heap overflow due to the ser…
-
Unscored —
An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scrip…
-
Unscored —
An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scrip…
-
Unscored —
An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scrip…
-
Unscored —CVE-2018-10700 EPSS 38%
An issue was discovered on Moxa AWK-3121 1.19 devices. It provides functionality so that an administrator can change th…
-
Unscored —
libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable fi…
-
Unscored —
In uvc_parse_standard_control of uvc_driver.c, there is a possible out-of-bound read due to improper input validation. …
-
Unscored —
In nfa_rw_store_ndef_rx_buf of nfa_rw_act.cc, there is a possible out-of-bound write due to a missing bounds check. Thi…
-
Unscored —
In areNotificationsEnabledForPackage of NotificationManagerService.java, there is a possible permissions bypass due to …
-
Unscored —
In the Bluetooth Low Energy (BLE) specification, there is a provided example Long Term Key (LTK). If a BLE device were …
-
Unscored —
In HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to type confusion. This c…
-
Unscored —
An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides certfile upload functionality so that…
-
Unscored —
In EffectRelease of EffectBundle.cpp, there is a possible memory corruption due to a double free. This could lead to lo…
-
Unscored —
In callGenIDChangeListeners and related functions of SkPixelRef.cpp, there is a possible use after free due to a race c…
-
Unscored —
In parseMPEGCCData of NuPlayerCCDecoder.cpp, there is a possible out of bounds write due to missing bounds checks. This…
-
Unscored —
In huff_dec_1D of nlc_dec.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead t…
-
Unscored —
An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. Thi…
-
Unscored —
In isSeparateProfileChallengeAllowed of DevicePolicyManagerService.java, there is a possible permissions bypass due to …
-
Unscored —
In GetPermittedAccessibilityServicesForUser of DevicePolicyManagerService.java, there is a possible permissions bypass …
-
Unscored —
In isPackageDeviceAdminOnAnyUser of PackageManagerService.java, there is a possible permissions bypass due to a missing…
-
Unscored —
An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides ping functionality so that an adminis…
-
Unscored —
An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a web interface to allow an administrator to…
-
Unscored —
An issue was discovered on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an administrator can sen…
-
Unscored —
An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a Wi-Fi connection that is open and does not…
-
Unscored —
An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator can exec…
-
Unscored —
An issue was discovered on Moxa AWK-3121 1.14 devices. The session cookie "Password508" does not have an HttpOnly flag.…
-
Unscored —
An issue was discovered on Moxa AWK-3121 1.14 devices. It is intended that an administrator can download /systemlog.log…
-
Unscored —
An issue was discovered on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic thus providing an inse…
-
Critical 9.8
A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 a…