Archive
July 2019
Vulnerabilities first published in this month (UTC), newest first.
1,623 results · Feed
-
Unscored —
A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its …
-
Unscored —
An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevatio…
-
Unscored —
A remote code execution vulnerability exists in Remote Desktop Services - formerly known as Terminal Services - when an…
-
Unscored —
A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digital signature.An atta…
-
Unscored —
A denial of service vulnerability exists in Windows DNS Server when it fails to properly handle DNS queries, aka 'Windo…
-
Unscored —
An elevation of privilege vulnerability exists in Azure Automation "RunAs account" runbooks for users with contributor …
-
High 7.8CVE-2019-0880 Exploited
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 …
KEV May 23, 2022 -
Unscored —
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from …
-
Unscored —
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted pa…
-
Medium 5.3
Path Traversal in http-file-server
A path traversal vulnerability in <= v0.2.6 of http-file-server npm module allows attackers to list files in arbitrary folders.
-
Unscored —
Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Boundary crossing. The impact is: Memory corruption of the TEE i…
-
Unscored —
Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Rounding error. The impact is: Potentially leaking code and/or d…
-
Unscored —
Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Memory corruption and disclosure…
-
Unscored —
Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code execution in context of TEE…
-
Unscored —
Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Execution of code in TEE core (k…
-
Unscored —CVE-2019-1010298 Public exploit
Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code execution in the context of…
-
Unscored —
The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impa…
-
Unscored —
mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow. The impact is: Software crash. The compone…
-
Unscored —
jhead 3.03 is affected by: Buffer Overflow. The impact is: Denial of service. The component is: gpsinfo.c Line 151 Proc…
-
Unscored —
jhead 3.03 is affected by: Incorrect Access Control. The impact is: Denial of service. The component is: iptc.c Line 12…
-
Unscored —
GLPI GLPI Product 9.3.1 is affected by: Cross Site Scripting (XSS). The impact is: All dropdown values are vulnerable t…
-
Unscored —
Aquaverde GmbH Aquarius CMS prior to version 4.1.1 is affected by: Incorrect Access Control. The impact is: The access …
-
Unscored —
borg-reducer c6d5240 is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The…
-
Unscored —
Saleor Issue was introduced by merge commit: e1b01bad0703afd08d297ed3f1f472248312cc9c. This commit was released as part…
-
Unscored —
libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function…
-
Critical 9.8
Slanger Arbitrary command execution
Slanger 0.6.0 is affected by: Remote Code Execution (RCE). The impact is: A remote attacker can execute arbitrary commands by sending a crafted request to the server. The component is: Message handler & request validator. The attack vector is: Remote unauthen…
-
Unscored —
There is a short key vulnerability in HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader v…
-
Unscored —
uLaunchELF < commit 170827a is affected by: Buffer Overflow. The impact is: Possible code execution and denial of servi…
-
Unscored —
OpenModelica OMCompiler is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. …
-
Unscored —
On Fitbit activity-tracker devices, certain addresses never change. According to the popets-2019-0036.pdf document, thi…
-
Unscored —
Deepwoods Software WebLibrarian 3.5.2 and earlier is affected by: SQL Injection. The impact is: Exposing the entire dat…
-
Unscored —
phpscriptsmall.com School College Portal with ERP Script 2.6.1 and earlier is affected by: Cross Site Scripting (XSS). …
-
Unscored —
GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_cre…
-
Medium 5.4
GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst cas…
-
Unscored —
GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack…
-
Unscored —
GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The comp…
-
High 7.5
XML Injection in python-libnmap
libnmap < v0.6.3 is affected by: XML Injection. The impact is: Denial of service (DoS) by consuming resources. The component is: XML Parsing. The attack vector is: Specially crafted XML payload.
-
Medium 6.1
Dolibarr Cross Site Scripting (XSS)
Dolibarr 6.0.4 is affected by: Cross Site Scripting (XSS). The impact is: Cookie stealing. The component is: htdocs/product/stats/card.php. The attack vector is: Victim must click a specially crafted link sent by the attacker.
-
Unscored —
DGLogik Inc DGLux Server All Versions is affected by: Insecure Permissions. The impact is: Remote Execution, Credential…
-
Unscored —
OpenEnergyMonitor Project Emoncms 9.8.8 is affected by: Cross Site Scripting (XSS). The impact is: Theoretically low, b…