Archive
June 2019
Vulnerabilities first published in this month (UTC), newest first.
1,303 results · Feed
-
Unscored —
An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A parameter in the web reports module is vulnerable t…
-
Unscored —
An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A directory traversal (arbitrary file access) vulnera…
-
Unscored —CVE-2018-20472 Public exploit
An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. The logs web interface is vulnerable to stored XSS.
-
Unscored —
app/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator because the PHP file_exis…
-
Unscored —
An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.7, Community Edition 6.0.x through 6.0.1…
-
Unscored —
An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8, Community Edition 6.0.x through 6.0.1…
-
High 7.4
Improper Certificate Validation in Twisted
In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections.
-
Unscored —
The "Count per Day" plugin before 3.2.6 for WordPress allows XSS via the wp-admin/?page=cpd_metaboxes daytoshow paramet…
-
Unscored —
In Webmin through 1.910, any user authorized to the "Package Updates" module can execute arbitrary commands with root p…
-
Unscored —
In OrangeHRM 4.3.1 and before, there is an input validation error within admin/listMailConfiguration (txtSendmailPath p…
-
Unscored —
formats/xml.cpp in Leanify 0.4.3 allows for a controlled out-of-bounds write in xml_memory_writer::write via characters…
-
Unscored —
In MyBB before 1.8.21, an attacker can abuse a default behavior of MySQL on many systems (that leads to truncation of s…
-
Unscored —
In MyBB before 1.8.21, an attacker can exploit a parsing flaw in the Private Message / Post renderer that leads to [vid…
-
Unscored —
radare2 through 3.5.1 mishandles the RParse API, which allows remote attackers to cause a denial of service (applicatio…
-
Unscored —
Modules.cpp in ZNC before 1.7.4-rc1 allows remote authenticated non-admin users to escalate privileges and execute arbi…
-
Unscored —
An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the origin:// and ori…
-
Unscored —
madskristensen MiniBlog through 2018-05-18 allows remote attackers to execute arbitrary ASPX code via an IMG element wi…
-
Unscored —
SAP NetWeaver Process Integration, versions: SAP_XIESR: 7.20, SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, does no…
-
Unscored —
SAP BusinessObjects Business Intelligence Platform (Administration Console), versions 4.2, 4.3, module BILogon/appServi…
-
Unscored —
When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data be…
-
Unscored —
An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. This issue affects Wh…
-
Unscored —
When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for…
-
Unscored —
When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a s…
-
Unscored —
Use-after-free vulnerability will occur if reset of the routing table encounters an invalid rule id while processing co…
-
Unscored —
A buffer overflow can occur while processing an extscan hotlist event in Snapdragon Auto, Snapdragon Consumer Electroni…
-
Unscored —
Buffer overflow in WLAN driver event handlers due to improper validation of array index in Snapdragon Auto, Snapdragon …
-
Unscored —
Buffer overflow in WLAN function due to improper check of buffer size before copying in Snapdragon Auto, Snapdragon Con…
-
Unscored —
A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto…
-
Unscored —
Out of bounds read occurs due to improper validation of array while processing VDEV stop response from WLAN firmware in…
-
Unscored —
An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapd…
-
Unscored —
Resource allocation error while playing the video whose dimensions are more than supported dimension in Snapdragon Auto…
-
Unscored —
An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapd…
-
Unscored —
Wrong permissions in configuration file can lead to unauthorized permission in Snapdragon Auto, Snapdragon Connectivity…
-
Unscored —
Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the fram…
-
Unscored —
The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapd…
-
Unscored —
Failure to initialize the reserved memory which is sent to the firmware might lead to exposure of 1 byte of uninitializ…
-
Unscored —
Lack of input validation in WLAN function can lead to potential heap overflow in Snapdragon Auto, Snapdragon Consumer I…
-
Unscored —
Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IO…
-
Unscored —
Possible out of bounds write due to improper input validation while processing DO_ACS vendor command in Snapdragon Auto…
-
Unscored —
Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IO…