Archive
15 July 2019
Vulnerabilities first published on this day (UTC), newest first.
85 results · Feed
-
High 8.8
python-engineio vulnerable to Cross-Site Request Forgery (CSRF)
An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability that allows attackers to make WebSocket connections to a server by using a victim's credentials, because the Origin header is not restric…
-
Unscored —
A Reflected Cross-site Scripting (XSS) vulnerability exists in Apache Roller. Roller's Math Comment Authenticator did n…
-
Unscored —
A CWE-119 Buffer Errors vulnerability exists in Modicon M580 CPU - BMEP582040, all versions before V2.90, and Modicon E…
-
Unscored —
A CWE-787: Out-of-bounds Write vulnerability exists in Interactive Graphical SCADA System (IGSS), Version 14 and prior,…
-
Unscored —
A Use After Free: CWE-416 vulnerability exists in Zelio Soft 2, V5.2 and earlier, which could cause remote code executi…
-
Unscored —
A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima (all versions prior to version 8.0.0) whic…
-
Unscored —
A CWE-119: Buffer Errors vulnerability exists in ProClima (all versions prior to version 8.0.0) which allows an unauthe…
-
Unscored —
A CWE-94: Code Injection vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow an un…
-
High 7.5
Out-of-bounds write
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1062, CVE-2019-1103, CVE-2…
-
Unscored —
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'D…
-
Unscored —
An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerabil…
-
Unscored —CVE-2019-1089 Public exploit
An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles a…
-
Unscored —
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'D…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows …
-
Unscored —
An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerabil…
-
Unscored —CVE-2019-1096 Public exploit
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'W…
-
Unscored —
An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerabil…
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —
An information disclosure vulnerability exists when Unistore.dll fails to properly handle objects in memory, aka 'Micro…
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —
An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory, aka 'Windows…
-
Unscored —CVE-2019-1083 Public exploit
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests, …
-
Unscored —
An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-…
-
Medium 6.1
Open redirect in ASP.NET Core
A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'.
-
Unscored —
An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissio…
-
Unscored —
An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Err…
-
Unscored —
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Interne…
-
Unscored —
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided …
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windo…
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft Windows where certain folders, with local service privilege…
-
Unscored —
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windo…
-
Unscored —
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft bro…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …
-
Unscored —
An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files…
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft Windows where a certain DLL, with Local Service privilege, …
-
High 7.5
Out-of-bounds write
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1092, CVE-2019-1103, CVE-2…
-
Unscored —CVE-2019-1006 Public exploit
An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation…
-
Unscored —CVE-2019-1072 EPSS 13%
A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handl…
-
Unscored —
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…