Archive
16 September 2019
Vulnerabilities first published on this day (UTC), newest first.
71 results · Feed
-
Medium 4.7
IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 is vulnerable to SQL injection. A remote attacker could send speciall…
-
Critical 9.8CVE-2019-5482 EPSS 18%
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
-
Critical 9.8
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
-
Unscored —
LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a vic…
-
Low —
Use of a weak cryptographic algorithm in Gradle
The PGP signing plugin in Gradle before 6.0 relies on the SHA-1 algorithm, which might allow an attacker to replace an artifact with a different one that has the same SHA-1 message digest, a related issue to CVE-2005-4900.
-
Critical 9.8
Timing attack on HMAC signature comparison in Apache Tapestry
The code which checks HMAC in form submissions used String.equals() for comparisons, which results in a timing side channel for the comparison of the HMAC signatures. This could lead to remote code execution if an attacker is able to determine the correct sig…
-
Unscored —
An issue was discovered in GitLab Omnibus 7.4 through 12.2.1. An unsafe interaction with logrotate could result in a pr…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 7.9 through 12.2.1. EXIF Geolocation data was not be…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 8.1 through 12.2.1. Certain areas displaying Markdow…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. Under certain conditions, merge…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Certain account actions needed impro…
-
Unscored —CVE-2019-8368 EPSS 46%
OpenEMR v5.0.1-6 allows XSS.
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Under certain circumstances, CI pipe…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 8.6 through 12.2.1. Under very specific conditions, …
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 7.12 through 12.2.1. The specified default branch na…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 12.2 through 12.2.1. The project import API could be…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. Non-members were able to commen…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 8.14 through 12.2.1. The Jira integration contains a…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 10.1 through 12.2.1. Protections against SSRF attack…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 11.2 through 12.2.1. Insufficient permission checks …
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Embedded images and media files in m…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. An IDOR in the epic notes API t…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.2.1. Label descriptions are vulnera…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 11.9.x and 11.10.x before 11.10.1. Merge requests cr…
-
Unscored —
OpenEMR v5.0.1-6 allows code execution.
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.2.1. Particular mathematical express…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 10.8 through 12.2.1. An internal endpoint unintentio…
-
Unscored —CVE-2016-10973 Scanner template
The Brafton plugin before 3.4.8 for WordPress has XSS via the wp-admin/admin.php?page=BraftonArticleLoader tab paramete…
-
Unscored —
The newspaper theme before 6.7.2 for WordPress has a lack of options access control via td_ajax_update_panel.
-
High 7.5CVE-2019-0207 Public exploit
Path traversal attack on Windows platforms
Tapestry processes assets `/assets/ctx` using classes chain `StaticFilesFilter -> AssetDispatcher -> ContextResource`, which doesn't filter the character `\`, so attacker can perform a path traversal attack to read any files on Windows platform.
-
Unscored —
Inteno EG200 EG200-WU7P1U_ADAMO3.16.4-190226_1650 routers have a JUCI ACL misconfiguration that allows the "user" accou…
-
Unscored —
In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from …
-
Unscored —
A race condition in specific microprocessors using Intel (R) DDIO cache allocation and RDMA may allow an authenticated …
-
Unscored —
Improper file permissions in the installer for Intel(R) Easy Streaming Wizard before version 2.1.0731 may allow an auth…
-
Unscored —
The CRM Plugin before 4.2.4 for Redmine allows XSS via crafted vCard data.
-
Critical 9.8CVE-2019-0195 EPSS 14%
Deserialization of Untrusted Data in Apache Tapestry
Manipulating classpath asset file URLs, an attacker could guess the path to a known file in the classpath and have it downloaded. If the attacker found the file with the value of the tapestry.hmac-passphrase configuration symbol, most probably the webapp's Ap…
-
Unscored —
The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for indiv…
-
Medium 4.7
Beego has a file creation race condition
The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation within a directory with weak permissions.
-
Unscored —
Emerson GE Automation Proficy Machine Edition 8.0 allows an access violation and application crash via crafted traffic …
-
Unscored —
AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (NULL po…