Skip to content
OpenAdvisories

Archive

1 August 2019

Vulnerabilities first published on this day (UTC), newest first.

← July 2019 2019 / August /1 September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

162 results · Feed

  • Medium 6.1
    CVE-2019-14517

    Cross-site Scripting in pandao editor.md

    pandao Editor.md 1.5.0 allows XSS via the Javascript: string.

    editor.md npm
  • Unscored —
    CVE-2019-5401

    A potential security vulnerability has been identified in HP2910al-48G version W.15.14.0016. The attack exploits an xss…

    HP HP 2910-48G al Switch
  • Unscored —
    CVE-2019-14513

    Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send large DNS packets that…

    dnsmasq dnsmasq Debian Ubuntu
  • Unscored —
    CVE-2019-14260

    On the Alcatel-Lucent Enterprise (ALE) 8008 Cloud Edition Deskphone VoIP phone with firmware 1.50.13, a command injecti…

  • Unscored —
    CVE-2016-10813

    cPanel before 57.9999.54 allows self XSS during ftp account creation under addon domains (SEC-118).

  • Unscored —
    CVE-2016-10814

    cPanel before 57.9999.54 allows demo-mode escape via show_template.stor (SEC-119).

  • Unscored —
    CVE-2016-10815

    cPanel before 57.9999.54 allows arbitrary file-read operations for Webmail accounts via Branding APIs (SEC-120).

  • Unscored —
    CVE-2016-10816

    cPanel before 57.9999.54 allows Webmail accounts to execute arbitrary code through forwarders (SEC-121).

  • Unscored —
    CVE-2016-10817

    cPanel before 57.9999.54 allows SQL Injection via the ModSecurity TailWatch log file (SEC-123).

  • Unscored —
    CVE-2016-10818

    cPanel before 57.9999.54 incorrectly sets log-file permissions in dnsadmin-startup and spamd-startup (SEC-124).

  • Unscored —
    CVE-2016-10819

    In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd (SEC-125).

  • Unscored —
    CVE-2016-10820

    cPanel before 55.9999.141 allows daemons to access their controlling TTYs (SEC-31).

  • Unscored —
    CVE-2016-10821

    In cPanel before 55.9999.141, Scripts/addpop reveals a command-line password in a process list (SEC-75).

  • Unscored —
    CVE-2016-10826

    cPanel before 55.9999.141 allows attackers to bypass Two Factor Authentication via DNS clustering requests (SEC-93).

  • Unscored —
    CVE-2019-14497

    ModuleEditor::convertInstrument in tracker/ModuleEditor.cpp in MilkyTracker 1.02.00 has a heap-based buffer overflow.

    milkytracker milkytracker Debian Ubuntu
  • Unscored —
    CVE-2019-14496

    LoaderXM::load in LoaderXM.cpp in milkyplay in MilkyTracker 1.02.00 has a stack-based buffer overflow.

    milkytracker milkytracker Debian Ubuntu
  • High 7.8
    CVE-2019-9140

    Happypoint mobile application information disclosure vulnerability

    When processing Deeplink scheme, Happypoint mobile app 6.3.19 and earlier versions doesn't check Deeplink URL correctly. This could lead to javascript code execution, url redirection, sensitive information disclosure. An attacker can exploit this issue by ent…

    SPC CLOUD Happypoint mobile app
  • Medium 5.8
    CVE-2019-14495

    webadmin.c in 3proxy before 0.8.13 has an out-of-bounds write in the admin interface.

  • Unscored —
    CVE-2016-10822

    cPanel before 55.9999.141 allows self XSS in X3 Reseller Branding Images (SEC-88).

  • Unscored —
    CVE-2016-10823

    cPanel before 55.9999.141 allows arbitrary code execution in the context of the root account because of MakeText interp…

  • Unscored —
    CVE-2016-10824

    cPanel before 55.9999.141 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-90).

  • Unscored —
    CVE-2016-10825

    cPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents (SEC-92).

  • Unscored —
    CVE-2016-10827

    cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences (SEC-96).

  • Unscored —
    CVE-2016-10828

    cPanel before 55.9999.141 allows arbitrary code execution because of an unsafe @INC path (SEC-97).

  • Unscored —
    CVE-2016-10829

    cPanel before 55.9999.141 allows arbitrary file-read operations because of a multipart form processing error (SEC-99).

  • Unscored —
    CVE-2016-10830

    cPanel before 55.9999.141 allows ACL bypass for AppConfig applications via magic_revision (SEC-100).

  • Unscored —
    CVE-2016-10831

    cPanel before 55.9999.141 does not perform as two-factor authentication check when possessing another account (SEC-101).

  • Unscored —
    CVE-2018-20953

    cPanel before 68.0.27 allows self XSS in the WHM listips interface (SEC-389).

  • Unscored —
    CVE-2018-20952

    cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor (SEC-388).

  • Unscored —
    CVE-2018-20951

    cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config (SEC-387).

  • Unscored —
    CVE-2018-20950

    cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer (SEC-386).

  • Unscored —
    CVE-2018-20949

    cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor (SEC-385).

  • Unscored —
    CVE-2018-20948

    cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration (SEC-383).

  • Unscored —
    CVE-2018-20947

    cPanel before 68.0.27 allows certain file-write operations via the telnetcrt script (SEC-356).

  • Unscored —
    CVE-2018-20946

    cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the arch…

  • Unscored —
    CVE-2018-20945

    bin/csvprocess in cPanel before 68.0.27 allows insecure file operations (SEC-354).

  • Unscored —
    CVE-2018-20944

    cPanel before 68.0.27 allows attackers to read a copy of httpd.conf that is created during a syntax test (SEC-353).

  • Unscored —
    CVE-2016-10832

    cPanel before 55.9999.141 allows FTP cPHulk bypass via account name munging (SEC-102).

  • Unscored —
    CVE-2018-20943

    cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon a post-update task…

  • Unscored —
    CVE-2018-20942

    cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon configuring cronta…