Archive
28 June 2019
Vulnerabilities first published on this day (UTC), newest first.
29 results · Feed
-
Unscored —
An issue was discovered in FlightCrew v0.9.2 and earlier. A NULL pointer dereference occurs in GetRelativePathToNcx() o…
-
Unscored —
LemonLDAP::NG before 1.9.20 has an XML External Entity (XXE) issue when submitting a notification to the notification s…
-
Unscored —
An incorrect implementation of a local web server in eID client (Windows version before 3.1.2, Linux version before 3.0…
-
High 7.1
Medtronic MiniMed 508 and Paradigm Series Insulin Pumps Improper Access Control
Medtronic MiniMed Insulin Pumps are designed to communicate using a wireless RF with other devices, such as blood glucose meters, glucose sensor transmitters, and CareLink USB devices. This wireless RF communication protocol does not properly implement authen…
-
Unscored —CVE-2019-10993 EPSS 11%
In WebAccess/SCADA Versions 8.3.5 and prior, multiple untrusted pointer dereference vulnerabilities may allow a remote …
-
Unscored —
In WebAccess/SCADA Versions 8.3.5 and prior, multiple out-of-bounds write vulnerabilities are caused by a lack of prope…
-
Unscored —
In WebAccess/SCADA Versions 8.3.5 and prior, an out-of-bounds read vulnerability is caused by a lack of proper validati…
-
Unscored —
In WebAccess/SCADA Versions 8.3.5 and prior, multiple heap-based buffer overflow vulnerabilities are caused by a lack o…
-
Unscored —
In WebAccess/SCADA, Versions 8.3.5 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack…
-
Unscored —
In WebAccess/SCADA, Versions 8.3.5 and prior, a path traversal vulnerability is caused by a lack of proper validation o…
-
Medium 6.5
A flaw was found in the containerized-data-importer in virt-cdi-cloner, version 1.4, where the host-assisted cloning fe…
-
Unscored —
Grouptime Teamwire Desktop Client 1.5.1 prior to 1.9.0 on Windows allows code injection via a template, leading to remo…
-
Unscored —
The admin interface of the Grouptime Teamwire Client 1.5.1 prior to 1.9.0 on-premises messenger server allows stored XS…
-
Unscored —
Incorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo Enterprise 9.0 and 10.0…
-
Unscored —
Incorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo Enterprise 9.0 allows authent…
-
Unscored —
Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and…
-
Unscored —
The module-description renderer in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier does not disabl…
-
Unscored —
Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterpr…
-
Unscored —
A stored XSS vulnerability was found in SeedDMS 5.1.11 due to poorly escaping the search result in the autocomplete sea…
-
Unscored —
LOYTEC LGATE-902 6.3.2 devices allow Arbitrary file deletion.
-
Unscored —
LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal.
-
Unscored —
LOYTEC LGATE-902 6.3.2 devices allow XSS.
-
Medium 5.3
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin Console could allow a remote attacker to obtain sensitive…
-
Unscored —
Various Lexmark devices have a Buffer Overflow (issue 1 of 2).
-
Unscored —
Various Lexmark devices have a Buffer Overflow (issue 2 of 2).
-
Unscored —
On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with the user "root" and p…
-
Unscored —
The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_…
-
Unscored —
In Loopchain through 2.2.1.3, an attacker can escalate privileges from a low-privilege shell by changing the environmen…
-
Unscored —
Istio before 1.2.2 mishandles certain access tokens, leading to "Epoch 0 terminated with an error" in Envoy. This is re…