Archive
August 2019
Vulnerabilities first published in this month (UTC), newest first.
2,007 results · Feed
-
Unscored —
An issue was discovered in fs/gfs2/rgrp.c in the Linux kernel before 4.8. A use-after-free is caused by the functions g…
-
Unscored —
An issue was discovered in drivers/net/ethernet/arc/emac_main.c in the Linux kernel before 4.5. A use-after-free is cau…
-
Unscored —
An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There is potential exposure…
-
Unscored —
An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There is potential exposure…
-
Unscored —
An issue was discovered in drivers/iio/dac/ad5755.c in the Linux kernel before 4.8.6. There is an out of bounds write i…
-
Unscored —
An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There is an out of bounds w…
-
Unscored —
An issue was discovered in net/rds/af_rds.c in the Linux kernel before 4.11. There is an out of bounds write and read i…
-
Critical 9.8
Double Free in Adplug
AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h.
-
Unscored —
core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a …
-
Unscored —
The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to c…
-
Unscored —
coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and appli…
-
Unscored —
WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application …
-
Unscored —
In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service (applicatio…
-
Unscored —
In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error (resource exhausti…
-
Unscored —
In DjVuLibre 3.5.27, the sorting functionality (aka GArrayTemplate<TYPE>::sort) allows attackers to cause a denial-of-s…
-
Unscored —
DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an out-of-bounds read) by …
-
Unscored —
GoPro GPMF-parser 1.2.2 has a heap-based buffer over-read (4 bytes) in GPMF_Next in GPMF_parser.c.
-
Unscored —
GoPro GPMF-parser 1.2.2 has an out-of-bounds read and SEGV in GPMF_Next in GPMF_parser.c.
-
Unscored —
GoPro GPMF-parser 1.2.2 has an out-of-bounds write in OpenMP4Source in demo/GPMF_mp4reader.c.
-
Unscored —
The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to upload any …
-
Unscored —
The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to access all …
-
Unscored —
The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings (i…
-
Unscored —
The Access Control plugin in eProsima Fast RTPS through 1.9.0 does not check partition permissions from remote particip…
-
Unscored —
The handshake protocol in Object Management Group (OMG) DDS Security 1.1 sends cleartext information about all of the c…
-
Unscored —
RIOT through 2019.07 contains a memory leak in the TCP implementation (gnrc_tcp), allowing an attacker to consume all m…
-
Unscored —CVE-2019-13069 Public exploit
extenua SilverSHielD 6.x fails to secure its ProgramData folder, leading to a Local Privilege Escalation to SYSTEM. The…
-
Unscored —
REDCap before 9.3.0 allows time-based SQL injection in the edit calendar event via the cal_id parameter, such as cal_id…
-
Unscored —
Zabbix through 4.4.0alpha1 allows User Enumeration. With login requests, it is possible to enumerate application userna…
-
Unscored —
In GIFLIB before 2019-02-16, a malformed GIF file triggers a divide-by-zero exception in the decoder function DGifSlurp…
-
Unscored —
The xo-security plugin before 1.5.3 for WordPress has XSS.
-
Unscored —CVE-2017-18542 Scanner template
The zendesk-help-center plugin before 1.0.5 for WordPress has multiple XSS issues.
-
Unscored —
The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan.
-
Unscored —
The companion-auto-update plugin before 3.2.1 for WordPress has CSRF.
-
Unscored —
The companion-auto-update plugin before 3.2.1 for WordPress has local file inclusion.
-
Unscored —
The companion-sitemap-generator plugin before 3.7.0 for WordPress has CSRF.
-
Unscored —
The erident-custom-login-and-dashboard plugin before 3.5 for WordPress has CSRF.
-
Unscored —
The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF.
-
Unscored —
The invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based invitations.
-
Unscored —
The invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF.
-
Unscored —
The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-end input.