Archive
24 June 2019
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
Unscored —CVE-2019-12323 Public exploit
The HC.Server service in Hosting Controller HC10 10.14 allows an Invalid Pointer Write DoS.
-
Medium 5.9
Deserialization of Untrusted Data in FasterXML jackson-databind
FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization. Depending on the classpath content, remote code execution may be possible.
-
Unscored —
The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remot…