Archive
19 August 2019
Vulnerabilities first published on this day (UTC), newest first.
42 results · Feed
-
Unscored —
Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate th…
-
Unscored —
FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin console. This could lead to an attacke…
-
Unscored —
FUEL CMS 1.4.4 has XSS in the Create Blocks section of the Admin console. This could lead to cookie stealing and other …
-
Unscored —
In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expressio…
-
Critical 9.8CVE-2019-15224 Public exploit
rest-client Gem Contains Malicious Code
The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions <=1.6.9 and >=1.6.14 are unaffected.
-
Unscored —
An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in…
-
Unscored —
An issue was discovered in the Linux kernel before 5.1.8. There is a double-free caused by a malicious USB device in th…
-
Medium 4.6
An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in…
-
Unscored —
An issue was discovered in the Linux kernel before 5.0.10. There is a use-after-free in the sound subsystem because car…
-
Unscored —
An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in…
-
Unscored —
An issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference caused by a malicious US…
-
Unscored —
An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB…
-
Unscored —
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB…
-
Unscored —
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB…
-
Unscored —
An issue was discovered in the Linux kernel before 5.2.1. There is a use-after-free caused by a malicious USB device in…
-
Unscored —
An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious US…
-
Unscored —
An issue was discovered in the Linux kernel before 5.2.8. There is a NULL pointer dereference caused by a malicious USB…
-
Unscored —
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB…
-
Unscored —
Authentication bypass in the web console for Intel(R) Raid Web Console 2 all versions may allow an unauthenticated atta…
-
Unscored —
Insufficient session validation in system firmware for Intel(R) NUC may allow a privileged user to potentially enable e…
-
Unscored —
Improper permissions in the software installer for Intel(R) Authenticate before 3.8 may allow an authenticated user to …
-
Unscored —
Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to pot…
-
Unscored —
Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to pot…
-
Unscored —
Improper permissions in the installer for Intel(R) Remote Displays SDK before version 2.0.1 R2 may allow an authenticat…
-
Unscored —
Insufficient access control in a hardware abstraction driver for Intel(R) Processor Identification Utility for Windows …
-
Unscored —
Insufficient access control in hardware abstraction in SEMA driver for Intel(R) Computing Improvement Program before ve…
-
Medium 5.3
An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details…
-
Medium 6.4
A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administra…
-
Critical 9.6
A stored cross-site scripting (XSS) vulnerability exists in various firmware versions of the legacy IBM System x IMM (I…
-
High 7.3
A DLL search path vulnerability was reported in PaperDisplay Hotkey Service version 1.2.0.8 that could allow privilege …
-
Medium 5.4
Apps Manager sends tokens to Spring apps via HTTP
Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x prior to 2.3.16, 2.4.x prior to 2.4.12, 2.5.x prior to 2.5.8, and 2.6.x prior to 2.6.3, makes a request to the /cloudapplication endpoint via Spring actuator, and subsequent requests…
-
High 7.8
Rapid7 InsightAppSec Local Privilege Escalation
The Rapid7 InsightAppSec broker suffers from a DLL injection vulnerability in the 'prunsrv.exe' component of the product. If exploited, a local user of the system (who must already be authenticated to the operating system) can elevate their privileges with th…
-
High 7.5
Inline DTD allows XML bomb attack
The SweetXml (aka sweet_xml) package through 0.6.6 for Erlang and Elixir allows attackers to cause a denial of service (resource consumption) via an XML entity expansion attack with an inline DTD.
-
Unscored —
In the OAuth2 Client extension before 0.4 for MediaWiki, a CSRF vulnerability exists due to the OAuth2 state parameter …
-
Unscored —
An issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18. A use after free exists, related to xfs_…
-
Unscored —
An issue was discovered in fs/gfs2/rgrp.c in the Linux kernel before 4.8. A use-after-free is caused by the functions g…
-
Unscored —
An issue was discovered in drivers/net/ethernet/arc/emac_main.c in the Linux kernel before 4.5. A use-after-free is cau…
-
Unscored —
An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There is potential exposure…
-
Unscored —
An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There is potential exposure…
-
Unscored —
An issue was discovered in drivers/iio/dac/ad5755.c in the Linux kernel before 4.8.6. There is an out of bounds write i…