29 July 2019

87 results · Feed

• Medium 5.3
  CVE-2019-1020013

  Sensitive Data Exposure in parse-server

  parse-server before 3.6.0 allows account enumeration.

  Parse parse-server parse-server npm
  Jul 29, 2019
• High 7.5
  CVE-2019-1020012

  Parse Server before v3.4.1 vulnerable to Denial of Service

  parse-server before 3.4.1 allows DoS after any POST to a volatile class.

  Parse parse-server parse-server npm
  Jul 29, 2019
• Critical 9.0
  CVE-2019-1020011

  SmokeDetector intentionally does automatic deployments of updated copies of SmokeDetector without server operator autho…

  SmokeDetector SmokeDetector
  Jul 29, 2019
• Unscored —
  CVE-2019-1020010 Public exploit

  Misskey before 10.102.4 allows hijacking a user's token.

  Misskey Misskey
  Jul 29, 2019
• Critical 9.8
  CVE-2019-14379

  Deserialization of untrusted data in FasterXML jackson-databind

  SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code execution.

  jackson-databind com.fasterxml.jackson.core:jackson-databind jackson-databind Debian Ubuntu Maven
  Jul 29, 2019
• Unscored —
  CVE-2019-14378 Public exploit EPSS 17%

  ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a ca…

  qemu android qemu slirp4netns Debian Ubuntu
  Jul 29, 2019
• High 7.5
  CVE-2019-1020001

  Path Traversal vulnerability that affects yard

  yard before 0.9.20 allows path traversal.

  yard yard yard yard Debian Ubuntu RubyGems
  Jul 29, 2019