Archive
27 September 2019
Vulnerabilities first published on this day (UTC), newest first.
311 results · Feed
-
Unscored —
Flower 0.9.3 has XSS via the name parameter in an @app.task call. NOTE: The project author stated that he doesn't think…
-
Unscored —
Flower 0.9.3 has XSS via a crafted worker name. NOTE: The project author stated that he doesn't think this is a valid v…
-
High 8.1
Dell EMC ECS versions prior to 3.4.0.0 contain an improper restriction of excessive authentication attempts vulnerabili…
-
High 8.4
Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a stored cross-site scripting vulnerability…
-
Critical 9.8
Dell EMC Integrated Data Protection Appliance versions prior to 2.3 do not limit the number of authentication attempts …
-
High 8.2
Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a password storage vulnerability in the ACM…
-
Unscored —
An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on t…
-
Critical 9.8
Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-b…
KEV Mar 3, 2022 -
Unscored —
Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc,…
-
Medium 5.4
Dolibarr stored Cross-site Scripting in an Email Template section
Dolibarr 9.0.5 has stored XSS in an Email Template section to mails_templates.php. A user with no privileges can inject script to attack the admin. (This stored XSS can affect all types of user privilege from Admin to users with no permissions.)
-
Medium 5.4
Dolibarr Cross-site Scripting in a User Profile in a Signature section
Dolibarr 9.0.5 has stored XSS in a User Profile in a Signature section to card.php. A user with the "Create/modify other users, groups and permissions" privilege can inject script and can also achieve privilege escalation.
-
Medium 5.4
Dolibarr Cross-site Scripting in a User Note section
Dolibarr 9.0.5 has stored XSS in a User Note section to note.php. A user with no privileges can inject script to attack the admin.
-
Medium 5.4
Dolibarr stored Cross-site Scripting vulnerability
Dolibarr 9.0.5 has stored XSS vulnerability via a User Group Description section to card.php. A user with the "Create/modify other users, groups and permissions" privilege can inject script and can also achieve privilege escalation.
-
Unscored —
In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of…
-
Unscored —
In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds ch…
-
Unscored —
In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of…
-
Unscored —
In LG's LAF component, there is a possible leak of information in a protected disk partition due to a missing bounds ch…
-
Unscored —
In Platform, there is a possible bypass of user interaction requirements due to missing permission checks. This could l…
-
Unscored —
In WiFi, the RSSI value and SSID information is broadcast as part of android.net.wifi.RSSI_CHANGE and android.net.wifi.…
-
Unscored —
In the Package Manager service, there is a possible information disclosure due to a confused deputy. This could lead to…
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial…
-
Unscored —
In Platform, there is a possible bypass of user interaction requirements due to background app interception. This could…
-
Unscored —
In libttspico, there is a possible OOB write due to a heap buffer overflow. This could lead to remote escalation of pri…
-
Unscored —
In AOSP Email, there is a possible information disclosure due to a confused deputy. This could lead to local disclosure…
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of…
-
Unscored —
In libAACdec, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execut…
-
Unscored —
In Bluetooth, there is possible controlled termination due to a missing bounds check. This could lead to remote denial …
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio…
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati…
-
Unscored —
In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information d…
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information dis…
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati…
-
Unscored —
In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote infor…
-
Unscored —
In libhevc, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of serv…
-
Unscored —
In the Screen Lock, there is a possible information disclosure due to an unusual root cause. In certain circumstances, …
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati…
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati…
-
Unscored —
In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information d…
-
Unscored —
In libstagefright there is a possible information disclosure due to uninitialized data. This could lead to remote infor…
-
Unscored —
In libhevc there is a possible information disclosure due to uninitialized data. This could lead to remote information …