Archive
June 2019
Vulnerabilities first published in this month (UTC), newest first.
1,303 results · Feed
-
Medium 4.3
IBM Cloud Private 2.1.0, 3.1.0, 3.1.1, and 3.1.2 is vulnerable to cross-site request forgery which could allow an attac…
-
Unscored —
In firmware version MS_2.6.9900 of Columbia Weather MicroServer, a stored Cross-site scripting (XSS) vulnerability allo…
-
Unscored —
In firmware version MS_2.6.9900 of Columbia Weather MicroServer, a readouts_rd.php directory traversal issue makes it p…
-
Unscored —
In firmware version MS_2.6.9900 of Columbia Weather MicroServer, an authenticated web user can access an alternative co…
-
Unscored —
In firmware version MS_2.6.9900 of Columbia Weather MicroServer, the BACnet daemon does not properly validate input, wh…
-
Unscored —
In firmware version MS_2.6.9900 of Columbia Weather MicroServer, an authenticated web user can pipe commands directly t…
-
Medium 6.7
exacqVision Enterprise System Manager (ESM) privilege escalation
A vulnerability in the exacqVision Enterprise System Manager (ESM) v5.12.2 application whereby unauthorized privilege escalation can potentially be achieved. This vulnerability impacts exacqVision ESM v5.12.2 and all prior versions of ESM running on a Windows…
-
Unscored —
dotCMS before 5.1.6 is vulnerable to a SQL injection that can be exploited by an attacker of the role Publisher via vie…
-
Unscored —
In firmware version MS_2.6.9900 of Columbia Weather MicroServer, a networkdiags.php reflected Cross-site scripting (XSS…
-
Unscored —
Helpy v2.1.0 has Stored XSS via the Ticket title.
-
Unscored —
Artha ~ The Open Thesaurus 1.0.3.0 has a Buffer Overflow.
-
Unscored —
In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugi…
-
Unscored —CVE-2019-6965 Public exploit
An XSS issue was discovered in i-doit Open 1.12 via the src/tools/php/qr/qr.php url parameter.
-
Unscored —
OX App Suite 7.10.1 and earlier allows Information Exposure.
-
Unscored —
An issue was discovered on Phoenix Contact AXC F 2152 (No.2404267) before 2019.0 LTS and AXC F 2152 STARTERKIT (No.1046…
-
Medium 6.1
Craft CMS XSS Vulnerability
Craft CMS before 3.1.31 does not properly filter XML feeds and thus allowing XSS.
-
Unscored —
In radare2 through 3.5.1, cmd_mount in libr/core/cmd_mount.c has a double free for the ms command.
-
Unscored —
Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope th…
-
Unscored —
Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope th…
-
Unscored —
Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope th…
-
Unscored —
Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope th…
-
Unscored —
Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope th…
-
Unscored —
Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope th…
-
Unscored —
Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope th…
-
Medium 5.8
An exploitable information disclosure vulnerability exists in the KCodes NetUSB.ko kernel module that enables the Ready…
-
Critical 10.0
An exploitable arbitrary memory read vulnerability exists in the KCodes NetUSB.ko kernel module which enables the Ready…
-
Unscored —
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that ar…
-
Unscored —
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that ar…
-
Unscored —
OPNsense 18.7.x before 18.7.7 has Incorrect Access Control.
-
Unscored —
Concrete5 8.4.3 has XSS because config/concrete.php allows uploads (by administrators) of SVG files that may contain HT…
-
Unscored —
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that ar…
-
Unscored —
A use after free in the TextBox field Validate action in IReader_ContentProvider can occur for specially crafted PDF fi…
-
Unscored —
A command injection can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 whe…
-
Unscored —
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that ar…
-
Unscored —
A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the J…
-
Unscored —
An issue was discovered on Vera Veralite 1.7.481 devices. The device has an additional OpenWRT interface in addition to…
-
Unscored —
A stack-based buffer overflow can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) 5.4.0.1031 when p…
-
Unscored —
In Foxit Reader SDK (ActiveX) Professional 5.4.0.1031, an uninitialized object in IReader_ContentProvider::GetDocEventH…
-
Unscored —
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a script file called …
-
Unscored —
A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the J…