Archive

10 July 2019

Vulnerabilities first published on this day (UTC), newest first.

← June 2019 2019 / July /10 August 2019 →

All Critical High Medium Low Exploited only Public exploit

90 results · Feed

Unscored —

CVE-2019-10119

eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.16 use session IDs for authentication but lack a…

Jul 10, 2019
Unscored —

CVE-2019-10120

On eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.16, automatic login configuration (aka setAut…

Jul 10, 2019
Unscored —

CVE-2018-12628

An issue was discovered in Eventum 3.5.0. CSRF in htdocs/manage/users.php allows creating another user with admin privi…

Jul 10, 2019
Unscored —

CVE-2018-12627

An issue was discovered in Eventum 3.5.0. /htdocs/list.php has XSS via the show_notification_list_issues or show_author…

Jul 10, 2019
Unscored —

CVE-2018-12626

An issue was discovered in Eventum 3.5.0. /htdocs/popup.php has XSS via the cat parameter.

Jul 10, 2019
Unscored —

CVE-2018-12625

An issue was discovered in Eventum 3.5.0. /htdocs/validate.php has XSS via the values parameter.

Jul 10, 2019
Unscored —

CVE-2018-12623

An issue was discovered in Eventum 3.5.0. htdocs/switch.php has XSS via the current_page parameter.

Jul 10, 2019
Unscored —

CVE-2018-12622

An issue was discovered in Eventum 3.5.0. htdocs/ajax/update.php has XSS via the field_name parameter.

Jul 10, 2019
High 8.8

CVE-2018-14550

Out-of-bounds write in libpng

An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png.

libpng1.6 libpng libpng15 libpng Debian Azure Linux Alpine NuGet

Jul 10, 2019
Unscored —

CVE-2019-13132 Public exploit EPSS 42%

In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting …

zeromq3 zeromq3 zeromq Debian Ubuntu Alpine

Jul 10, 2019