29 June 2019

15 results · Feed

• Unscored —
  CVE-2019-13067

  njs through 0.3.3, used in NGINX, has a buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c. This issue occurs after …

  Jun 29, 2019
• Unscored —
  CVE-2019-13055

  Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the capability of live dec…

  Jun 29, 2019
• Unscored —
  CVE-2019-13054

  The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to keystroke injection. On Wi…

  Jun 29, 2019
• Unscored —
  CVE-2019-13053

  Logitech Unifying devices allow keystroke injection, bypassing encryption. The attacker must press a "magic" key combin…

  Jun 29, 2019
• Unscored —
  CVE-2016-10761

  Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack.

  Jun 29, 2019
• Unscored —
  CVE-2019-13052

  Logitech Unifying devices allow live decryption if the pairing of a keyboard to a receiver is sniffed.

  Jun 29, 2019
• Unscored —
  CVE-2019-13050

  Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes …

  gnupg2 gnupg sks Ubuntu
  Jun 29, 2019
• Unscored —
  CVE-2019-13049

  An integer wrap in kernel/sys/syscall.c in ToaruOS 1.10.10 allows users to map arbitrary kernel pages into userland pro…

  Jun 29, 2019
• Unscored —
  CVE-2019-13048

  kernel/sys/syscall.c in ToaruOS through 1.10.9 allows a denial of service upon a critical error in certain sys_sbrk all…

  Jun 29, 2019
• Unscored —
  CVE-2019-13047

  kernel/sys/syscall.c in ToaruOS through 1.10.9 has incorrect access control in sys_sysfunc case 9 for TOARU_SYS_FUNC_SE…

  Jun 29, 2019
• Unscored —
  CVE-2019-13046

  linker/linker.c in ToaruOS through 1.10.9 has insecure LD_LIBRARY_PATH handling in setuid applications.

  Jun 29, 2019
• Unscored —
  CVE-2019-13045

  Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending…

  irssi irssi irssi irssi Debian Ubuntu Azure Linux Alpine
  Jun 29, 2019
• Unscored —
  CVE-2019-13035

  Artica Pandora FMS 7.0 NG before 735 suffers from local privilege escalation due to improper permissions on C:\PandoraF…

  Jun 29, 2019
• Unscored —
  CVE-2019-13038

  mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the …

  libapache2-mod-auth-mellon libapache2-mod-auth-mellon Debian Ubuntu
  Jun 29, 2019
• Medium 5.4
  CVE-2019-13068 Public exploit EPSS 52%

  Grafana Cross-site Scripting vulnerability

  public/app/features/panel/panel_ctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links (via the Title or url field).

  github.com/grafana/grafana Go
  Jun 29, 2019