Archive
September 2019
Vulnerabilities first published in this month (UTC), newest first.
1,540 results · Feed
-
Unscored —
An input validation and output encoding issue was discovered in the GitLab email notification feature which could resul…
-
Unscored —
An input validation and output encoding issue was discovered in the GitLab CE/EE wiki pages feature which could result …
-
Unscored —
An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of …
-
Unscored —
An input validation problem was discovered in the GitHub service integration which could result in an attacker being ab…
-
Low —
Sensitive Data Exposure in seneca
Seneca < 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users.
-
Critical 9.8
Improper Authentication in Apache Traffic Control
Improper authentication is possible in Apache Traffic Control versions 3.0.0 and 3.0.1 if LDAP is enabled for login in the Traffic Ops API component. Given a username for a user that can be authenticated via LDAP, it is possible to improperly authenticate as …
-
Medium 6.5
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missi…
-
Unscored —
Onigmo through 6.2.0 has a NULL pointer dereference in onig_error_code_to_str because of fetch_token in regparse.c.
-
Unscored —
Onigmo through 6.2.0 has an out-of-bounds read in parse_char_class because of missing codepoint validation in regenc.c.
-
Unscored —
Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.
-
Unscored —
MyHTML through 4.0.5 has a NULL pointer dereference in myhtml_tree_node_remove in tree.c.
-
Unscored —
GNU cflow through 1.6 has a use-after-free in the reference function in parser.c.
-
Unscored —
GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c.
-
Unscored —
BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer overflow. The BGP daemo…
-
Unscored —
An issue was discovered in LibreNMS through 1.47. Many of the scripts rely on the function mysqli_escape_real_string fo…
-
High 8.1
SQL Injection in LibreNMS
An issue was discovered in LibreNMS 1.50.1. A SQL injection flaw was identified in the ajax_rulesuggest.php file where the term parameter is used insecurely in a database query for showing columns of a table, as demonstrated by an ajax_rulesuggest.php?debug=1…
-
High 7.5
Path Traversal in LibreNMS
An issue was discovered in LibreNMS 1.50.1. An authenticated user can perform a directory traversal attack against the /pdf.php file with a partial filename in the report parameter, to cause local file inclusion resulting in code execution.
-
High 8.8
Improper Encoding or Escaping of Output and Injection in LibreNMS
An issue was discovered in LibreNMS 1.50.1. The scripts that handle graphing options (includes/html/graphs/common.inc.php and includes/html/graphs/graphs.inc.php) do not sufficiently validate or encode several fields of user supplied input. Some parameters ar…
-
High 8.8
SQL Injection in LibreNMS
An issue was discovered in LibreNMS through 1.47. It does not parameterize all user supplied input within database queries, resulting in SQL injection. An authenticated attacker can subvert these database queries to extract or manipulate data, as demonstrated…
-
Critical 9.1
Missing Authentication for Critical Function in LibreNMS
An issue was discovered in LibreNMS through 1.47. A number of scripts import the Authentication libraries, but do not enforce an actual authentication check. Several of these scripts disclose information or expose functions that are of a sensitive nature and …
-
Medium 5.3
Exposure of Sensitive Information to an Unauthorized Actor in LibreNMS
An issue was discovered in LibreNMS through 1.47. Information disclosure can occur: an attacker can fingerprint the exact code version installed and disclose local file paths.
-
Unscored —
An issue was discovered in LibreNMS through 1.47. Several of the scripts perform dynamic script inclusion via the inclu…
-
Critical 9.8
LibreNMS Information Disclosure
An issue was discovered in LibreNMS through 1.47. The scripts that handle the graphing options (html/includes/graphs/common.inc.php and html/includes/graphs/graphs.inc.php) do not sufficiently validate or encode several fields of user supplied input. Some par…
-
Unscored —
search-exclude.php in the "Search Exclude" plugin before 1.2.4 for WordPress allows unauthenticated options changes.
-
Unscored —CVE-2019-15639 EPSS 22%
main/translate.c in Sangoma Asterisk 13.28.0 and 16.5.0 allows a remote attacker to send a specific RTP packet during a…
-
Unscored —
An issue was discovered in LibreNMS through 1.47. There is a command injection vulnerability in html/includes/graphs/de…
-
Medium 6.1
Cross-site scripting in Sakai
Sakai through 12.6 allows XSS via a chat user name.
-
Unscored —
In ATutor 2.2.4, an unauthenticated attacker can change the application settings and force it to use his crafted databa…
-
Medium 4.8
Gophish XSS Vulnerability
Gophish through 0.8.0 allows XSS via a username.
-
Unscored —
The buddyboss-media plugin through 3.2.3 for WordPress has stored XSS.
-
Unscored —
The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated by allowing new administrator …
-
Unscored —
The cf7-invisible-recaptcha plugin before 1.3.2 for WordPress has XSS.
-
Unscored —
The charitable plugin before 1.5.14 for WordPress has unauthorized access to user and donation details.
-
High 7.5
Uninitialized memory use in generator
An issue was discovered in the generator crate before 0.6.18 for Rust. Uninitialized memory is used by Scope, done, and yield_ during API calls.
-
Critical 9.8
Algorithms compute incorrect results in blake2
An issue was discovered in the blake2 crate before 0.8.1 for Rust. The BLAKE2b and BLAKE2s algorithms, when used with HMAC, produce incorrect results because the block sizes are half of the required sizes.
-
Critical 9.8
Improper Input Validation in renderdoc
An issue was discovered in the renderdoc crate before 0.5.0 for Rust. Multiple exposed methods take self by immutable reference, which is incompatible with a multi-threaded application.
-
High 7.5
Improper Input Validation in once_cell
An issue was discovered in the once_cell crate before 1.0.1 for Rust. There is a panic during initialization of Lazy.
-
Critical 9.8
Out of bounds access in compact_arena
An issue was discovered in the compact_arena crate before 0.4.0 for Rust. Generativity is mishandled, leading to an out-of-bounds write or read.
-
Critical 9.8
Use after free in image
An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::set_len is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution.
-
High 7.5
Wrong memory orderings violates mutual exclusion in spin
An issue was discovered in the spin crate before 0.5.2 for Rust, when RwLock is used. Because memory ordering is mishandled, two writers can acquire the lock at the same time, violating mutual exclusion.