Archive
August 2019
Vulnerabilities first published in this month (UTC), newest first.
2,007 results · Feed
-
Medium 5.0
IBM Cloud Automation Manager 3.1.2 could allow a malicious user on the client side (with access to client computer) to …
-
Medium 6.5
Apport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml
Apport before versions 2.14.1-0ubuntu3.29+esm1, 2.20.1-0ubuntu2.19, 2.20.9-0ubuntu7.7, 2.20.10-0ubuntu27.1, 2.20.11-0ubuntu5 contained a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml file, which allows a local attacker to replace this file…
-
Medium 6.5
Integer overflow in whoopsie results in out-of-bounds heap write
An integer overflow in whoopsie before versions 0.2.52.5ubuntu0.1, 0.2.62ubuntu0.1, 0.2.64ubuntu0.1, 0.2.66, results in an out-of-bounds write to a heap allocated buffer when processing large crash dumps. This results in a crash or possible code-execution in …
-
Unscored —
There was a local file disclosure vulnerability in Confluence Server and Confluence Data Center via page exporting. An …
-
Unscored —CVE-2019-11500 EPSS 62%
In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for q…
-
Unscored —
The Eques elf smart plug and the mobile app use a hardcoded AES 256 bit key to encrypt the commands and responses betwe…
-
Unscored —
FontForge 20190813 through 20190820 has a buffer overflow in PrefsUI_LoadPrefs in prefs.c.
-
Unscored —
ROBOTIS Dynamixel SDK through 3.7.11 has a buffer overflow via a large rxpacket.
-
Unscored —
The nd-shortcodes plugin before 6.0 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl set…
-
Unscored —
The woo-variation-gallery plugin before 1.1.29 for WordPress has XSS.
-
Unscored —
The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qligg_dismiss_notice or qligg_form_item…
-
Unscored —
The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF.
-
Unscored —
Secure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many SRT connections.
-
Unscored —
Clara Genomics Analysis before 0.2.0 has an integer overflow for cudapoa memory management in allocate_block.cpp.
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.1.4. It uses Hard-coded Credentials.
-
Unscored —
The formidable plugin before 4.02.01 for WordPress has unsafe deserialization.
-
Unscored —
The shapepress-dsgvo plugin before 2.2.19 for WordPress has wp-admin/admin-ajax.php?action=admin-common-settings&admin_…
-
Unscored —
The simple-301-redirects-addon-bulk-uploader plugin before 1.2.5 for WordPress has no protection against 301 redirect r…
-
Unscored —CVE-2019-15774 Scanner template
The nd-booking plugin before 2.5 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl settin…
-
Unscored —
The nd-learning plugin before 4.8 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setti…
-
Unscored —
The nd-travel plugin before 1.7 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.
-
Unscored —
The nd-donations plugin before 1.4 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl sett…
-
Unscored —
The woo-address-book plugin before 1.6.0 for WordPress has save calls without nonce verification checks.
-
Unscored —
The handl-utm-grabber plugin before 2.6.5 for WordPress has CSRF via add_option and update_option.
-
Unscored —
The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders …
-
Unscored —
libZetta.rs through 0.1.2 has an integer overflow in the zpool parser (for error stats) that leads to a panic.
-
Unscored —
Lute-Tab before 2019-08-23 has a buffer overflow in pdf_print.cc.
-
Medium 6.1
Cross-Site Scripting in webtorrent
WebTorrent before 0.107.6 allows XSS in the HTTP server via a title or file name.
-
Unscored —
In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend/cmd.cc via a crafted ch…
-
Unscored —
An issue was discovered in Binaryen 1.38.32. Missing validation rules in asmjs/asmangle.cpp can lead to an Assertion Fa…
-
Unscored —
An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer de…
-
Unscored —
Windows binaries generated with InstallBuilder versions earlier than 19.7.0 are vulnerable to tampering even if they co…
-
Unscored —
The shell DNS command can cause unpredictable results due to misuse of stack variables.
Use After Free vulnerability in the Zephyr shell allows a serial or telnet connected user to cause denial of service, and possibly remote code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all.
-
Unscored —
The shell implementation does not protect against buffer overruns resulting in unpredictable behavior.
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions…
-
Medium 4.7
Kubernetes client-go logs authorization headers at debug verbosity levels
The Kubernetes client-go library logs request headers at verbosity levels of 7 or higher. This can disclose credentials to unauthorized users via logs or command output. Kubernetes components (such as kube-apiserver) prior to v1.16.0, which make use of basic …
-
Unscored —
libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.
-
Medium 4.8
kubectl cp allows symlink directory traversal
The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If…
-
Medium 6.5
Kubernetes kubelet exposes /debug/pprof info on healthz port
The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kubelet's healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory …
-
Medium 5.0
Kubernetes kube-apiserver allows access to custom resources via wrong scope
The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced. Authorizations for the resource accessed in this manner are enforced using roles and role bindings within the…
-
Medium 6.4
kubectl cp allows symlink directory traversal
The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If…