Archive
19 June 2019
Vulnerabilities first published on this day (UTC), newest first.
95 results · Feed
-
Unscored —
In serviceDied of HalDeathHandlerHidl.cpp, there is a possible memory corruption due to a use after free. This could le…
-
Unscored —
In ihevcd_fmt_conv_420sp_to_420p of ihevcd_fmt_conv.c, there is a possible out of bounds write due to a missing bounds …
-
Unscored —
In ih264d_fmt_conv_420sp_to_420p of ih264d_format_conv.c, there is a possible out of bounds write due to a missing boun…
-
Unscored —
In onPermissionGrantResult of GrantPermissionsActivity.java, there is a possible incorrectly granted permission due to …
-
Unscored —
In publishKeyEvent, publishMotionEvent and sendUnchainedFinishedSignal of InputTransport.cpp, there are uninitialized d…
-
Unscored —
In findAvailSpellCheckerLocked of TextServicesManagerService.java, there is a possible way to bypass the warning dialog…
-
Unscored —
The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell Metacharacter Injection.
-
Unscored —
The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal.
-
Unscored —
The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices has a Buffer Overflow.
-
Unscored —CVE-2019-12890 Public exploit
RedwoodHQ 2.5.5 does not require any authentication for database operations, which allows remote attackers to create ad…
-
Unscored —
An issue was discovered in the update function in the wpForo Forum plugin before 1.5.2 for WordPress. A registered foru…
-
Unscored —
VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. …
-
Unscored —
An issue was discovered in ZRLOG 2.0.1. There is a Stored XSS vulnerability in the nickname field of the comment area.
-
Unscored —
A cross-site scripting vulnerability exists in Nagios XI before 5.5.4 via the 'name' parameter within the Account Infor…
-
Unscored —
An Insufficient Access Control vulnerability (leading to credential disclosure) in coreconfigsnapshot.php (aka configur…
-
Unscored —
SQL Injection exists in the Auction Factory 4.5.5 component for Joomla! via the filter_order_Dir or filter_order parame…
-
Unscored —
SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the filter_order_Dir or filter_order …
-
Unscored —
SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla! via the id parameter, or the PATH_INFO to my…
-
Unscored —
CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account.
-
Unscored —
An issue was discovered in Openfind Mail2000 6.0 and 7.0 Webmail. XSS can occur via an '<object data="data:text/html' s…
-
Unscored —
SQL Injection exists in Twilio WEB To Fax Machine System 1.0 via the email or password parameter to login_check.php, or…
-
Unscored —
CSRF exists in server.php in Live Call Support Application 1.5 for adding an admin account.
-
Unscored —
EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information without being authenticated, by sendin…
-
Unscored —
EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information (Password) without being authenticated…
-
Unscored —
SQL Injection exists in HealthNode Hospital Management System 1.0 via the id parameter to dashboard/Patient/info.php or…
-
Unscored —
SQL Injection exists in the AMGallery 1.2.3 component for Joomla! via the filter_category_id parameter.
-
Unscored —
SQL Injection exists in the Jimtawl 2.2.7 component for Joomla! via the id parameter.
-
Unscored —
An issue was discovered in e107 v2.1.9. There is a XSS attack on e107_admin/comment.php.
-
Unscored —
SQL injection exists in Scriptzee Education Website 1.0 via the college_list.html subject, city, or country parameter.
-
Unscored —
In BubbleUPnP 0.9 update 30, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity…
-
Unscored —
SQL injection exists in Scriptzee Flippa Marketplace Clone 1.0 via the site-search sortBy or sortDir parameter.
-
Medium 5.4
KM03461174 Micro Focus Fortify Software Security Center Server, CVE-2019-11649
Cross-Site Scripting vulnerability in Micro Focus Fortify Software Security Center Server, versions 17.2, 18.1, 18.2, has been identified in Micro Focus Software Security Center. The vulnerability could be exploited to execute JavaScript code in user’s browse…
-
Unscored —
SQL injection exists in Scriptzee Hotel Booking Engine 1.0 via the hotels h_room_type parameter.
-
Unscored —
An issue was discovered in Tufin SecureTrack 18.1 with TufinOS 2.16 build 1179(Final). The Audit Report module is affec…
-
Unscored —
The doAirdrop function of a smart contract implementation for Primeo (PEO), an Ethereum token, does not check the numer…
-
Unscored —
An issue was discovered in Corel PaintShop Pro 2019 21.0.0.119. An integer overflow in the jp2 parsing library allows a…
-
Unscored —CVE-2019-9701 Public exploit
DLP 15.5 MP1 and all prior versions may be susceptible to a cross-site scripting (XSS) vulnerability, a type of issue t…
-
Unscored —
/api/2.0/rest/aggregator/xml in Axentra firmware, used by NETGEAR Stora, Seagate GoFlex Home, and MEDION LifeCloud, has…
-
Unscored —CVE-2018-18472 EPSS 30%
Western Digital WD My Book Live and WD My Book Live Duo (all versions) have a root Remote Command Execution bug via she…
-
Unscored —
OnApp before 5.0.0-88, 5.5.0-93, and 6.0.0-196 allows an attacker to run arbitrary commands with root privileges on ser…