Skip to content
OpenAdvisories

Archive

14 July 2019

Vulnerabilities first published on this day (UTC), newest first.

6 results · Feed

  • Unscored —

    An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 al…

  • Unscored —

    LuaUPnP in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via …

  • Unscored —
    CVE-2019-13597 Public exploit EPSS 14%

    _s_/sprm/_s_/dyn/Player_setScriptFile in Sahi Pro 8.0.0 allows command execution. It allows one to run ".sah" scripts v…

  • High 8.8

    Mirumee Saleor CSRF Protection Disabled

    In Mirumee Saleor 2.7.0 (fixed in 2.8.0), CSRF protection middleware was accidentally disabled, which allowed attackers to send a POST request without a valid CSRF token and be accepted by the server.

  • Critical 9.8

    paranoid2 gem Code backdoor

    The paranoid2 gem 1.1.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.1.5.

  • Unscored —

    An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h (startread function), there is an integer overflow on t…