Archive
29 August 2019
Vulnerabilities first published on this day (UTC), newest first.
97 results · Feed
-
Unscored —
The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds…
-
Unscored —
CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the…
-
Unscored —
CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the…
-
Unscored —
Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP.
-
Unscored —
The TeamSpeak client before 3.3.2 allows remote servers to trigger a crash via the 0xe2 0x81 0xa8 0xe2 0x81 0xa7 byte s…
-
Medium 6.7
IBM i 7.4 users who have done a Restore User Profile (RSTUSRPRF) on a system which has been configured with Db2 Mirror …
-
Medium 4.0
IBM Cloud Automation Manager 3.1.2 could allow a user to be impropertly redirected and obtain sensitive information rat…
-
Medium 5.0
IBM Cloud Automation Manager 3.1.2 could allow a malicious user on the client side (with access to client computer) to …
-
Medium 6.5
Apport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml
Apport before versions 2.14.1-0ubuntu3.29+esm1, 2.20.1-0ubuntu2.19, 2.20.9-0ubuntu7.7, 2.20.10-0ubuntu27.1, 2.20.11-0ubuntu5 contained a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml file, which allows a local attacker to replace this file…
-
Medium 6.5
Integer overflow in whoopsie results in out-of-bounds heap write
An integer overflow in whoopsie before versions 0.2.52.5ubuntu0.1, 0.2.62ubuntu0.1, 0.2.64ubuntu0.1, 0.2.66, results in an out-of-bounds write to a heap allocated buffer when processing large crash dumps. This results in a crash or possible code-execution in …
-
Unscored —
There was a local file disclosure vulnerability in Confluence Server and Confluence Data Center via page exporting. An …
-
Unscored —CVE-2019-11500 EPSS 62%
In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for q…
-
Unscored —
The Eques elf smart plug and the mobile app use a hardcoded AES 256 bit key to encrypt the commands and responses betwe…
-
Unscored —
FontForge 20190813 through 20190820 has a buffer overflow in PrefsUI_LoadPrefs in prefs.c.
-
Unscored —
ROBOTIS Dynamixel SDK through 3.7.11 has a buffer overflow via a large rxpacket.
-
Unscored —
The nd-shortcodes plugin before 6.0 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl set…
-
Unscored —
The woo-variation-gallery plugin before 1.1.29 for WordPress has XSS.
-
Unscored —
The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qligg_dismiss_notice or qligg_form_item…
-
Unscored —
The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF.
-
Unscored —
Secure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many SRT connections.
-
Unscored —
Clara Genomics Analysis before 0.2.0 has an integer overflow for cudapoa memory management in allocate_block.cpp.
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.1.4. It uses Hard-coded Credentials.
-
Unscored —
The formidable plugin before 4.02.01 for WordPress has unsafe deserialization.
-
Unscored —
The shapepress-dsgvo plugin before 2.2.19 for WordPress has wp-admin/admin-ajax.php?action=admin-common-settings&admin_…
-
Unscored —
The simple-301-redirects-addon-bulk-uploader plugin before 1.2.5 for WordPress has no protection against 301 redirect r…
-
Unscored —CVE-2019-15774 Scanner template
The nd-booking plugin before 2.5 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl settin…
-
Unscored —
The nd-learning plugin before 4.8 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setti…
-
Unscored —
The nd-travel plugin before 1.7 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.
-
Unscored —
The nd-donations plugin before 1.4 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl sett…
-
Unscored —
The woo-address-book plugin before 1.6.0 for WordPress has save calls without nonce verification checks.
-
Unscored —
The handl-utm-grabber plugin before 2.6.5 for WordPress has CSRF via add_option and update_option.
-
Unscored —
The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders …
-
Unscored —
libZetta.rs through 0.1.2 has an integer overflow in the zpool parser (for error stats) that leads to a panic.
-
Unscored —
Lute-Tab before 2019-08-23 has a buffer overflow in pdf_print.cc.
-
Medium 6.1
Cross-Site Scripting in webtorrent
WebTorrent before 0.107.6 allows XSS in the HTTP server via a title or file name.
-
Unscored —
In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend/cmd.cc via a crafted ch…
-
Unscored —
An issue was discovered in Binaryen 1.38.32. Missing validation rules in asmjs/asmangle.cpp can lead to an Assertion Fa…
-
Unscored —
An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer de…
-
Unscored —
Windows binaries generated with InstallBuilder versions earlier than 19.7.0 are vulnerable to tampering even if they co…
-
Unscored —
The shell DNS command can cause unpredictable results due to misuse of stack variables.
Use After Free vulnerability in the Zephyr shell allows a serial or telnet connected user to cause denial of service, and possibly remote code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all.