Archive
25 June 2019
Vulnerabilities first published on this day (UTC), newest first.
26 results · Feed
-
Unscored —
PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element.
-
Unscored —
Nessus versions 8.4.0 and earlier were found to contain a reflected XSS vulnerability due to improper validation of use…
-
Unscored —
Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure …
-
Unscored —CVE-2019-6329 Public exploit
HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of …
-
Unscored —
HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of …
-
Medium 5.1
IBM Security Access Manager 9.0.1 through 9.0.6 does not invalidate session tokens in a timely manner. The lack of prop…
-
Medium 6.8
IBM Security Access Manager 9.0.1 through 9.0.6 could allow a remote attacker to conduct phishing attacks, using an ope…
-
Medium 4.3
IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 reveals sensitive information from a stack trace that could be used in …
-
Medium 5.9
IBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic algorithms that could allow an …
-
Medium 5.3
IBM API Connect 5.0.0.0 through 5.0.8.6 could allow an unauthorized user to obtain sensitive information about the syst…
-
Medium 6.1
IBM Security Access Manager 9.0.1 through 9.0.6 is vulnerable to cross-site scripting. This vulnerability allows users …
-
Medium 5.4
IBM Security Access Manager 9.0.1 through 9.0.6 does not prove that a user's identity is correct which can lead to the …
-
Medium 4.3
IBM API Connect 5.0.0.0 through 5.0.8.6 is vulnerable to cross-site request forgery which could allow an attacker to ex…
-
Medium 5.3
IBM API Connect 2018.1 through 2018.4.1.5 could allow an attacker to obtain sensitive information from a specially craf…
-
Medium 5.3
IBM API Connect 2018.1 through 2018.4.1.5 could disclose sensitive information to an unauthorized user that could aid i…
-
Medium 5.9
IBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic algorithms that could allow an …
-
Low 3.7
IBM Security Access Manager 9.0.1 through 9.0.6 does not validate, or incorrectly validates, a certificate which could …
-
High 7.5
IBM Security Access Manager 9.0.1 through 9.0.6 is affected by a security vulnerability that could allow authenticated …
-
High 7.7
IBM Security Access Manager 9.0.1 through 9.0.6 could reveal highly sensitive in specialized conditions to a local user…
-
Unscored —
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php Subject.
-
Unscored —
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action.
-
Unscored —
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header.
-
Unscored —
LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function.
-
Unscored —
LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in functions.internal.build.inc.php via the parameter p_…
-
Unscored —
arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processe…
-
Unscored —CVE-2019-12949 Public exploit
In pfSense 2.4.4-p2 and 2.4.4-p3, if it is possible to trick an authenticated administrator into clicking on a button o…