Archive
September 2019
Vulnerabilities first published in this month (UTC), newest first.
1,540 results · Feed
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.2.1. Particular mathematical express…
-
Unscored —
An issue was discovered in GitLab Community and Enterprise Edition 10.8 through 12.2.1. An internal endpoint unintentio…
-
Unscored —CVE-2016-10973 Scanner template
The Brafton plugin before 3.4.8 for WordPress has XSS via the wp-admin/admin.php?page=BraftonArticleLoader tab paramete…
-
Unscored —
The newspaper theme before 6.7.2 for WordPress has a lack of options access control via td_ajax_update_panel.
-
High 7.5CVE-2019-0207 Public exploit
Path traversal attack on Windows platforms
Tapestry processes assets `/assets/ctx` using classes chain `StaticFilesFilter -> AssetDispatcher -> ContextResource`, which doesn't filter the character `\`, so attacker can perform a path traversal attack to read any files on Windows platform.
-
Unscored —
Inteno EG200 EG200-WU7P1U_ADAMO3.16.4-190226_1650 routers have a JUCI ACL misconfiguration that allows the "user" accou…
-
Unscored —
In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from …
-
Unscored —
A race condition in specific microprocessors using Intel (R) DDIO cache allocation and RDMA may allow an authenticated …
-
Unscored —
Improper file permissions in the installer for Intel(R) Easy Streaming Wizard before version 2.1.0731 may allow an auth…
-
Unscored —
The CRM Plugin before 4.2.4 for Redmine allows XSS via crafted vCard data.
-
Critical 9.8CVE-2019-0195 EPSS 14%
Deserialization of Untrusted Data in Apache Tapestry
Manipulating classpath asset file URLs, an attacker could guess the path to a known file in the classpath and have it downloaded. If the attacker found the file with the value of the tapestry.hmac-passphrase configuration symbol, most probably the webapp's Ap…
-
Unscored —
The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for indiv…
-
Medium 4.7
Beego has a file creation race condition
The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation within a directory with weak permissions.
-
Unscored —
Emerson GE Automation Proficy Machine Edition 8.0 allows an access violation and application crash via crafted traffic …
-
Unscored —
AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (NULL po…
-
Unscored —
audio_sample_entry_AddBox() at isomedia/box_code_base.c in GPAC 0.7.1 allows remote attackers to cause a denial of serv…
-
Unscored —
GPAC 0.7.1 has a memory leak in dinf_Read in isomedia/box_code_base.c.
-
Unscored —
ngiflib 0.4 has a heap-based buffer overflow in WritePixel() in ngiflib.c when called from DecodeGifImg, because deinte…
-
Unscored —
ngiflib 0.4 has a heap-based buffer overflow in WritePixels() in ngiflib.c when called from DecodeGifImg, because deint…
-
Unscored —
marc-q libwav through 2017-04-20 has a NULL pointer dereference in gain_file() at wav_gain.c.
-
Unscored —
Bento4 1.5.1-628 has a NULL pointer dereference in AP4_ByteStream::ReadUI32 in Core/Ap4ByteStream.cpp when called from …
-
Unscored —
ffjpeg before 2019-08-18 has a NULL pointer dereference in idct2d8x8() at dct.c.
-
Unscored —
ffjpeg before 2019-08-18 has a NULL pointer dereference in huffman_decode_step() at huffman.c.
-
Unscored —
ffjpeg before 2019-08-21 has a heap-based buffer overflow in jfif_load() at jfif.c.
-
Unscored —
The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an…
-
Unscored —
The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt.
-
Unscored —
The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title.
-
Unscored —
The peepso-core plugin before 1.6.1 for WordPress has PeepSoProfilePreferencesAjax->save() privilege escalation.
-
Unscored —
The real3d-flipbook-lite plugin 1.0 for WordPress has XSS via the wp-content/plugins/real3d-flipbook/includes/flipbooks…
-
Unscored —
The real3d-flipbook-lite plugin 1.0 for WordPress has bookName=../ directory traversal for file upload.
-
Unscored —
The real3d-flipbook-lite plugin 1.0 for WordPress has deleteBook=../ directory traversal for file deletion.
-
Unscored —
The dwnldr plugin before 1.01 for WordPress has XSS via the User-Agent HTTP header.
-
Unscored —
The icegram plugin before 1.9.19 for WordPress has XSS.
-
Unscored —
The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php option_name parameter.
-
Unscored —
The colorway theme before 3.4.2 for WordPress has XSS via the contactName parameter.
-
Unscored —CVE-2016-10960 Scanner template
The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.ph…
-
Unscored —
The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload (exploitable with CSRF) via es_me…
-
Unscored —
The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via es_media_images[] to wp-adm…
-
Unscored —
The Akal theme through 2016-08-22 for WordPress has XSS via the framework/brad-shortcodes/tinymce/preview.php sc parame…
-
Unscored —
In Escuela de Gestion Publica Plurinacional (EGPP) Sistema Integrado de Gestion Academica (GESAC) v1, the username para…