Archive
28 August 2019
Vulnerabilities first published on this day (UTC), newest first.
70 results · Feed
-
Unscored —
nse_libssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fai…
-
Unscored —
There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary…
-
Unscored —
Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash t…
-
Unscored —
Various Lexmark products have a Buffer Overflow (issue 3 of 3).
-
Unscored —
Various Lexmark products have a Buffer Overflow (issue 2 of 3).
-
Unscored —
Various Lexmark products have an Integer Overflow.
-
Unscored —
Various Lexmark products have CSRF.
-
Unscored —
The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.
-
Critical 9.1
OpenStack os-vif Ageing time of 0 disables linuxbridge MAC learning
In OpenStack os-vif 1.15.x before 1.15.2, and 1.16.0, a hard-coded MAC aging time of 0 disables MAC learning in linuxbridge, forcing obligatory Ethernet flooding of non-local destinations, which both impedes network performance and allows users to possibly vi…
-
High 7.8
Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-…
KEV Nov 3, 2021 -
Unscored —
An issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network packet with the right type…
-
Unscored —
An issue was discovered in Suricata 4.1.3. The function ftp_pasv_response lacks a check for the length of part1 and par…
-
Unscored —
An issue was discovered in Suricata 4.1.3. The function process_reply_record_v3 lacks a check for the length of reply.d…
-
Unscored —
An issue was discovered in Suricata 4.1.3. If the network packet does not have the right length, the parser tries to ac…
-
Unscored —
An issue was discovered in Suricata 4.1.3. If the function filetracker_newchunk encounters an unsafe "Some(sfcm) => { f…
-
Unscored —
A use-after-free flaw in the sandbox container implemented in cmdguard.sys in Comodo Antivirus 12.0.0.6870 can be trigg…
-
High 8.6
Cisco NX-OS Software IPv6 Denial of Service Vulnerability
A vulnerability in the IPv6 traffic processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an unexpected restart of the netstack process on an affected device. The vulnerability is due to improper validation of IPv6 traffi…
-
High 7.7
Cisco NX-OS Software Remote Management Memory Leak Denial of Service Vulnerability
A vulnerability in the Virtual Shell (VSH) session management for Cisco NX-OS Software could allow an authenticated, remote attacker to cause a VSH process to fail to delete upon termination. This can lead to a build-up of VSH processes that overtime can depl…
-
High 8.6
Cisco NX-OS Software Cisco Fabric Services over IP Denial of Service Vulnerability
A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause process crashes, which can result in a denial of service (DoS) condition on an affected system. The vulnerability is due to…
-
High 7.7
Cisco FXOS and NX-OS Software Authenticated Simple Network Management Protocol Denial of Service Vulnerability
A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application on an affected device to restart unexpectedly. …
-
Critical 10.0
Cisco REST API Container for IOS XE Software Authentication Bypass Vulnerability
A vulnerability in the Cisco REST API virtual service container for Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass authentication on the managed Cisco IOS XE device. The vulnerability is due to an improper check performed by t…
-
Unscored —
The URL part of the report message is not encoded in Fortinet FortiWeb 6.0.2 and below which may allow an attacker to e…
-
Unscored —
MyT Project Management 1.5.1 lacks CSRF protection and, for example, allows a user/create CSRF attack. This could lead …
-
Unscored —
LibreNMS v1.54 has XSS in the Create User, Inventory, Add Device, Notifications, Alert Rule, Create Maintenance, and Al…
-
Unscored —
CloudBerry Backup v6.1.2.34 allows local privilege escalation via a Pre or Post backup action. With only user-level acc…
-
Unscored —
Various Lexmark products have Incorrect Access Control.
-
Unscored —
Various Lexmark products have Incorrect Access Control (issue 2 of 2).
-
Unscored —
Various Lexmark products have Incorrect Access Control (issue 1 of 2).
-
Unscored —
In Knowage through 6.1.1, an authenticated user who accesses the datasources page will gain access to any data source c…
-
Unscored —
In Knowage through 6.1.1, there is XSS via the start_url or user_id field to the ChangePwdServlet page.
-
High 8.8
Cross-Site Request Forgery in Jenkins
Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed users to obtain CSRF tokens without an associated web session ID, resulting in CSRF tokens that did not expire and could be used to bypass CSRF protection for the anonymous user.
-
Medium 6.5
Jenkins IBM AppScan Plugin showed plain text password in job configuration form fields
Jenkins IBM Application Security on Cloud Plugin 1.2.4 and earlier transmitted configured passwords in plain text as part of job configuration forms, potentially resulting in their exposure.
-
High 8.8
Jenkins Splunk Plugin Sandbox Bypass
A sandbox bypass vulnerability in Jenkins Splunk Plugin 1.7.4 and earlier allowed attackers with Overall/Read permission to provide a Groovy script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.
-
Medium 4.8
Improper Neutralization of Input During Web Page Generation in Jenkins
A stored cross-site scripting vulnerability in Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed attackers with Overall/Administer permission to configure the update site URL to inject arbitrary HTML and JavaScript in update center web pages.
-
Unscored —
The Jetpack plugin before 3.4.3 for WordPress has XSS via add_query_arg() and remove_query_arg().
-
Unscored —
WTF before 0.19.0 does not set the permissions of config.yml, which might make it easier for local attackers to read pa…
-
Unscored —
iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via add_query_arg() and remove_query_arg().
-
Unscored —
iThemes Builder Theme Market before 5.1.27 for WordPress has XSS via add_query_arg() and remove_query_arg().
-
Unscored —
iThemes Builder Theme Depot before 5.0.30 for WordPress has XSS via add_query_arg() and remove_query_arg().
-
Unscored —
iThemes Mobile before 1.2.8 for WordPress has XSS via add_query_arg() and remove_query_arg().