Archive
3 July 2019
Vulnerabilities first published on this day (UTC), newest first.
97 results · Feed
-
Unscored —
WavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access fo…
-
Critical 9.8
CodeIgniter Rest Server XXE Vulnerability
CodeIgniter Rest Server (aka codeigniter-restserver) 2.7.1 allows XXE attacks.
-
Critical 9.8CVE-2019-9827 EPSS 27%
Server-Side Request Forgery in Hawt Hawtio
Hawt Hawtio through 2.5.0 is vulnerable to SSRF, allowing a remote attacker to trigger an HTTP request from an affected server to an arbitrary host via the initial /proxy/ substring of a URI.
-
Unscored —
A vulnerability in the FTP daemon on MikroTik routers through 6.44.3 could allow remote attackers to exhaust all availa…
-
Unscored —
nsd-checkzone in NLnet Labs NSD 4.2.0 has a Stack-based Buffer Overflow in the dname_concatenate() function in dname.c.
-
Unscored —
An SSRF attack was possible on a JetBrains YouTrack server. The issue (1 of 2) was fixed in JetBrains YouTrack 2018.4.4…
-
Unscored —
A user without the required permissions could gain access to some JetBrains TeamCity settings. The issue was fixed in T…
-
Unscored —
A reflected XSS on a user page was detected on one of the JetBrains TeamCity pages. The issue was fixed in TeamCity 201…
-
Unscored —
Incorrect handling of user input in ZIP extraction was detected in JetBrains TeamCity. The issue was fixed in TeamCity …
-
Unscored —
A possible stored JavaScript injection requiring a deliberate server administrator action was detected. The issue was f…
-
Unscored —
The generated Kotlin DSL settings allowed usage of an unencrypted connection for resolving artifacts. The issue was fix…
-
Unscored —
A possible stored JavaScript injection was detected on one of the JetBrains TeamCity pages. The issue was fixed in Team…
-
Unscored —
The Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 allows HTTP requests that permit enabling various…
-
Unscored —
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices mishandle reboots within the past two hours. Amcrest cloud services …
-
Unscored —
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait for 5 minutes in case 30 incorrect pas…
-
Unscored —
On Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, the users on the device are divided into 2 groups "admin" and "u…
-
Unscored —
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are hardcoded in the firmware and can …
-
Unscored —
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative cre…
-
Unscored —
Incorrect access control in the password reset component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 an…
-
Unscored —
Improper sanitization of dynamic user expressions in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earli…
-
Unscored —
Improper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows authenticated use…
-
Unscored —
Incorrect access control in the mail templating system in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and …
-
Unscored —
Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 a…
-
Unscored —CVE-2019-5602 Public exploit
In FreeBSD 12.0-STABLE before r349628, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349629, 11.3-RC3 be…
-
Unscored —
In several JetBrains IntelliJ IDEA Ultimate versions, an Application Server run configuration (for Tomcat, Jetty, Resin…
-
Unscored —
In FreeBSD 12.0-STABLE before r347474, 12.0-RELEASE before 12.0-RELEASE-p7, 11.2-STABLE before r347475, and 11.2-RELEAS…
-
Unscored —
Incorrect access control in asset bundles in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 throug…
-
Unscored —
In FreeBSD 12.0-STABLE before r349622, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349624, 11.3-RC3 be…
-
High 8.8
An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in SDL2_image, version 2.0.4. A …
-
Unscored —
In several versions of JetBrains IntelliJ IDEA Ultimate, creating Task Servers configurations leads to saving a clearte…
-
High 8.8
An exploitable integer overflow vulnerability exists when loading a PCX file in SDL2_image 2.0.4. A specially crafted f…
-
Unscored —
Report engine in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0 and earlier does not …
-
Unscored —
In several versions of JetBrains IntelliJ IDEA Ultimate, creating run configurations for cloud application servers lead…
-
Unscored —
In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote at…
-
Unscored —
On BIG-IP 12.1.0-12.1.4.1, undisclosed requests can cause iControl REST processes to crash. The attack can only come fr…
-
Unscored —
In JetBrains Hub versions earlier than 2018.4.11298, the audit events for SMTPSettings show a cleartext password to the…
-
Unscored —
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.1-11.5.8, SNMP ex…
-
Unscored —
An Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was possible in JetBrains…
-
Unscored —
On BIG-IP (AFM, PEM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.1-11.5…
-
Unscored —
Certain actions could cause privilege escalation for issue attachments in JetBrains YouTrack. The issue was fixed in 20…