Archive
4 July 2019
Vulnerabilities first published on this day (UTC), newest first.
48 results · Feed
-
Unscored —
AROX School-ERP Pro has a command execution vulnerability. import_stud.php and upload_fille.php do not have session con…
-
Unscored —CVE-2019-13292 Public exploit
A SQL Injection issue was discovered in webERP 4.15. Payments.php accepts payment data in base64 format. After this is …
-
Unscored —
In Xpdf 4.01.01, there is a heap-based buffer over-read in the function DCTStream::readScan() located at Stream.cc. It …
-
Unscored —
Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz/list-device.c, allowing…
-
Unscored —
In Xpdf 4.01.01, there is a use-after-free vulnerability in the function JBIG2Stream::close() located at JBIG2Stream.cc…
-
Unscored —CVE-2019-13288 Public exploit
In Xpdf 4.01.01, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote a…
-
Unscored —
In Xpdf 4.01.01, there is an out-of-bounds read vulnerability in the function SplashXPath::strokeAdjust() located at sp…
-
Unscored —
In Xpdf 4.01.01, there is a heap-based buffer over-read in the function JBIG2Stream::readTextRegionSeg() located at JBI…
-
High 7.4
Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized Access Vulnerability
A vulnerability in the fabric infrastructure VLAN connection establishment of the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an unauthenticated, adjacent attacker to bypass security validations and connec…
-
High 7.2
Cisco Application Policy Infrastructure Controller REST API Privilege Escalation Vulnerability
A vulnerability in the REST API for software device management in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an authenticated, remote attacker to escalate privileges to root on an affected device. The vulnerability is due t…
-
High 7.3
Cisco Jabber for Windows DLL Preloading Vulnerability
A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Jabber for Windows could allow an authenticated, local attacker to perform a DLL preloading attack. To exploit this vulnerability, the attacker would need to have valid crede…
-
High 7.7
Cisco Web Security Appliance Web Proxy Denial of Service Vulnerability
A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insuf…
-
High 8.6
Cisco Web Security Appliance HTTPS Certificate Denial of Service Vulnerability
A vulnerability in the HTTPS decryption feature of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient validation of Secure Sockets Layer (SS…
-
Unscored —
In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in strncpy from FoFiType1::parse in fofi/FoFiType1.cc…
-
Unscored —
In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in SampledFunction::transform in Function.cc when usi…
-
Unscored —
In Xpdf 4.01.01, a heap-based buffer overflow could be triggered in DCTStream::decodeImage() in Stream.cc when writing …
-
Unscored —
An issue was discovered in the VeronaLabs wp-statistics plugin before 12.6.7 for WordPress. The v1/hit endpoint of the …
-
Unscored —
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003283eb.
-
Unscored —
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328384.
-
Unscored —
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327a07.
-
Unscored —
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e566.
-
Unscored —
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328165.
-
Unscored —
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003273aa.
-
Unscored —
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e849.
-
Unscored —
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327464.
-
Unscored —
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e808.
-
Unscored —
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000385474.
-
Unscored —
ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000001172b0.
-
Unscored —
ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000000c47ff.
-
Unscored —
ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000000b9c2f.
-
Unscored —
ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000000b9e7a.
-
Unscored —
ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!JPEGTransW+0x0000000000002450.
-
Unscored —
ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!JPEGTransW+0x00000000000024ed.
-
Unscored —
FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a9601.
-
Unscored —
FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a95b1.
-
Unscored —
FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x0000000000002d7d.
-
Unscored —
IrfanView 4.52 has a User Mode Write AV starting at image00400000+0x00000000000249c6.
-
Unscored —
IrfanView 4.52 has a User Mode Write AV starting at image00400000+0x0000000000013a98.
-
Unscored —
FlightCrew v0.9.2 and older are vulnerable to a directory traversal, allowing attackers to write arbitrary files via a …
-
Unscored —