Archive
7 June 2019
Vulnerabilities first published on this day (UTC), newest first.
79 results · Feed
-
Unscored —
SuiteCRM 7.10.x before 7.10.17 and 7.11.x before 7.11.5 allows SQL Injection.
-
Unscored —
SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 1 of 3).
-
Unscored —
SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 2 of 3).
-
Unscored —
SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 3 of 3).
-
Unscored —
A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 whe…
-
Unscored —
A use after free in the TextBox field Mouse Enter action in IReader_ContentProvider can occur for specially crafted PDF…
-
Unscored —
admin\db\DoSql.php in EmpireCMS through 7.5 allows XSS via crafted SQL syntax to admin/admin.php.
-
Unscored —
admin\db\DoSql.php in EmpireCMS through 7.5 allows remote attackers to execute arbitrary PHP code via SQL injection tha…
-
Unscored —
Maccms through 8.0 allows XSS via the site_keywords field to index.php?m=system-config because of tpl/module/system.php…
-
Critical 9.8
aubio Buffer Overflow vulnerability
aubio v0.4.0 to v0.4.8 has a Buffer Overflow in new_aubio_tempo.
-
High 7.5
Aubio is vulnerable to a NULL pointer dereference in new_aubio_filterbank
aubio v0.4.0 to v0.4.8 has a NULL pointer dereference in new_aubio_filterbank via invalid n_filters.
-
High 7.5
Aubio is vulnerable to a NULL pointer dereference in new_aubio_notes function
aubio v0.4.0 to v0.4.8 has a new_aubio_onset NULL pointer dereference.
-
Unscored —
Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspeci…
-
Unscored —
Micro Focus Solution Business Manager versions prior to 11.4.2 is susceptible to open redirect.
-
Unscored —
The local management interface in SolarWinds Serv-U FTP Server 15.1.6.25 has incorrect access controls that permit loca…
-
Unscored —
In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugi…
-
Unscored —
An SQL injection vulnerability was found in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. This would allo…
-
Unscored —
Samsung Galaxy Apps before 4.4.01.7 allows modification of the hostname used for load balancing on installations of app…
-
Unscored —
Xiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones allows content provider…
-
Unscored —
Ubiquiti UniFi 52 devices, when Hotspot mode is used, allow remote attackers to bypass intended restrictions on "free t…
-
Unscored —
An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044_update_…
-
Unscored —
An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044_update_…
-
Unscored —
An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044_update_…
-
Unscored —
A number of stored XSS vulnerabilities have been identified in the web configuration feature in ENTTEC Datagate Mk2 700…
-
Unscored —
Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin credentia…
-
Unscored —
This CVE relates to an unspecified cross site scripting vulnerability in Cloudera Manager.
-
Unscored —
In Cloudera Navigator Key Trustee KMS 5.12 and 5.13, incorrect default ACL values allow remote access to purge and unde…
-
Unscored —
Supra Smart Cloud TV allows remote file inclusion in the openLiveURL function, which allows a local attacker to broadca…
-
Medium 5.9
IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to user enumeration, allowing an attacker to …
-
Medium 5.4
IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to cross-site scripting. This vulnerability a…
-
High 8.0
IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not properly validate file types, allowing an attacker…
-
Medium 5.9
IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not require that users should have strong passwords by…
-
High 8.8
IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 could allow an authenciated user to create arbitrary users …
-
Unscored —
Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet-inc.com …
-
Unscored —
Hasplm cookie in Gemalto Admin Control Center, all versions prior to 7.92, does not have 'HttpOnly' flag. This allows m…
-
Unscored —
Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated us…
-
Unscored —
Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated us…
-
Unscored —
Command injection is possible in ThinStation through 6.1.1 via shell metacharacters after the cgi-bin/CdControl.cgi act…
-
Unscored —
The Security Camera CZ application through 1.6.8 for Android stores potentially sensitive recorded video in external da…