30 June 2019

24 results · Feed

• Unscored —
  CVE-2019-13113

  Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to assertion failure) via an invalid da…

  exiv2 exiv2 exiv2 Debian Ubuntu Alpine
  Jun 30, 2019
• Unscored —
  CVE-2019-13111

  A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (lar…

  exiv2 Alpine
  Jun 30, 2019
• Unscored —
  CVE-2019-13109

  An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG…

  exiv2 exiv2 Debian Alpine
  Jun 30, 2019
• Unscored —
  CVE-2019-13108

  An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG…

  exiv2 exiv2 Debian Alpine
  Jun 30, 2019
• Unscored —
  CVE-2019-13107

  Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c

  libmatio libmatio Debian Ubuntu
  Jun 30, 2019
• Unscored —
  CVE-2018-20849

  Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATH_INFO to the login/ URI.

  Jun 30, 2019
• Unscored —
  CVE-2018-20848

  Advisto PEEL SHOPPING 9.0.0 has CSRF via en/achat/caddie_ajout.php and en/achat/caddie_affichage.php, as demonstrated b…

  Jun 30, 2019
• Unscored —
  CVE-2019-13086 Public exploit EPSS 32%

  core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP …

  Jun 30, 2019
• Unscored —
  CVE-2019-13085

  XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000030ecfa.

  Jun 30, 2019
• Unscored —
  CVE-2019-13084

  XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000026b739.

  Jun 30, 2019
• Unscored —
  CVE-2019-13083

  XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000384e2a.

  Jun 30, 2019
• Unscored —
  CVE-2019-13082

  Chamilo LMS 1.11.8 and 2.x allows remote code execution through an lp_upload.php unauthenticated file upload feature. I…

  Jun 30, 2019
• Medium 6.5
  CVE-2019-11827

  Cross-site scripting (XSS) vulnerability in SYNO.NoteStation.Shard in Synology Note Station before 2.5.3-0863 allows re…

  Synology Note Station
  Jun 30, 2019
• Medium 5.5
  CVE-2019-11828

  Cross-site scripting (XSS) vulnerability in Chart in Synology Office before 3.1.4-2771 allows remote authenticated user…

  Synology Office
  Jun 30, 2019
• High 7.3
  CVE-2019-11829

  OS command injection vulnerability in drivers_syno_import_user.php in Synology Calendar before 2.3.1-0617 allows remote…

  Synology Calendar
  Jun 30, 2019
• Medium 4.3
  CVE-2019-11822

  Relative path traversal vulnerability in SYNO.PhotoStation.File in Synology Photo Station before 6.8.11-3489 and before…

  Synology Photo Station
  Jun 30, 2019
• High 7.3
  CVE-2019-11821

  SQL injection vulnerability in synophoto_csPhotoDB.php in Synology Photo Station before 6.8.11-3489 and before 6.3-2977…

  Synology Photo Station
  Jun 30, 2019
• Medium 6.5
  CVE-2019-11825

  Cross-site scripting (XSS) vulnerability in Event Editor in Synology Calendar before 2.3.0-0615 allows remote attackers…

  Synology Calendar
  Jun 30, 2019
• High 8.0
  CVE-2019-11826

  Relative path traversal vulnerability in SYNO.PhotoTeam.Upload.Item in Synology Moments before 1.3.0-0691 allows remote…

  Synology Photo Moments
  Jun 30, 2019
• Unscored —
  CVE-2019-13075

  Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's…

  firefox-esr Debian
  Jun 30, 2019
• Unscored —
  CVE-2019-13072

  Stored XSS in the Filters page (Name field) in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScrip…

  zoneminder zoneminder zoneminder Debian Ubuntu Alpine
  Jun 30, 2019
• Unscored —
  CVE-2019-13112

  A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a deni…

  exiv2 exiv2 exiv2 Debian Ubuntu Alpine
  Jun 30, 2019
• Medium 6.5
  CVE-2019-13114

  http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer…

  exiv2 exiv2 exiv2 exiv2 Debian Ubuntu Alpine PyPI
  Jun 30, 2019
• Unscored —
  CVE-2019-13110

  A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to ca…

  exiv2 exiv2 exiv2 Debian Ubuntu Alpine
  Jun 30, 2019