Archive
12 July 2019
Vulnerabilities first published on this day (UTC), newest first.
11 results · Feed
-
Unscored —
An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0,…
-
Unscored —
Buffer overflow in res_pjsip_messaging in Digium Asterisk versions 13.21-cert3, 13.27.0, 15.7.2, 16.4.0 and earlier all…
-
Unscored —
A man-in-the-middle vulnerability related to vCenter access was found in Cohesity DataPlatform version 5.x and 6.x prio…
-
Unscored —
GLPI GLPI Product 9.3.1 is affected by: Frame and Form tags Injection allowing admins to phish users by putting code in…
-
Unscored —
The Windows versions of Snapview Mikogo, versions before 5.10.2 are affected by insecure implementations which allow lo…
-
High 7.8
An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the…
-
Unscored —CVE-2019-13027 Public exploit
Realization Concerto Critical Chain Planner (aka CCPM) 5.10.8071 has SQL Injection in at least in the taskupdt/taskdeta…
-
Unscored —
A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or…
-
Unscored —CVE-2019-13494 Public exploit
nodeimp.exe in Castle Rock SNMPc before 9.0.12.1 and 10.x before 10.0.9 has a stack-based buffer overflow via a long va…
-
Unscored —
The Zoom Client before 4.4.53932.0709 on macOS allows remote code execution, a different vulnerability than CVE-2019-13…
-
High 7.8CVE-2019-13574 Public exploit
OS Command Injection in MiniMagick
In lib/mini_magick/image.rb in MiniMagick before 4.9.4, a fetched remote image filename could cause remote command execution because Image.open input is directly passed to Kernel#open, which accepts a '|' character followed by a command.