Archive
October 2019
Vulnerabilities first published in this month (UTC), newest first.
1,573 results · Feed
-
Unscored —
An issue was discovered in the Infosysta "In-App & Desktop Notifications" app 1.6.13_J8 for Jira. It is possible to obt…
-
Unscored —
An issue was discovered in the Infosysta "In-App & Desktop Notifications" app 1.6.13_J8 for Jira. By using plugins/serv…
-
Unscored —
An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86…
-
Unscored —
Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products…
-
Unscored —
Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product…
-
Unscored —
Honeywell equIP series IP cameras Multiple equIP Series Cameras, A vulnerability exists in the affected products where …
-
Unscored —
Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Lack of sanitization of user-supplied input cause SQL injection vul…
-
Unscored —
Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. XXE vulnerabilities exist that may allow disclosure of sensitive da…
-
Unscored —
Stored XSS in filemanager2.php in CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.885 exists via the cmd_arg param…
-
Unscored —
Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. There is an unsecured function that allows anyone who can access th…
-
Unscored —
IcedTea6 before 1.7.4 allow unsigned apps to read and write arbitrary files, related to Extended JNLP Services.
-
Unscored —
IcedTea6 before 1.7.4 does not properly check property access, which allows unsigned apps to read and write arbitrary f…
-
Unscored —
FreeTDS through 1.1.11 has a Buffer Overflow.
-
Unscored —
Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Path traversal vulnerabilities are caused by a lack of proper valid…
-
Unscored —
Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions.
-
Unscored —
A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant valu…
-
Unscored —
Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an attacker to conduct "poison…
-
Unscored —
Buffer overflow in the thread scheduler in Chicken before 4.8.0.1 allows attackers to cause a denial of service (crash)…
-
Unscored —
Multiple buffer overflows in the (1) R5RS char-ready, (2) tcp-accept-ready, and (3) file-select procedures in Chicken t…
-
Medium 5.3
An exploitable denial-of-service vulnerability exists in the mdnscap binary of the CUJO Smart Firewall running firmware…
-
High 8.8
An exploitable uninitialized pointer vulnerability exists in the Word document parser of the the Atlantis Word Processo…
-
Critical 9.0
An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw li…
-
Unscored —CVE-2018-4064 EPSS 14%
An exploitable unverified password change vulnerability exists in the ACEManager upload.cgi functionality of Sierra Wir…
-
Medium 5.9
An exploitable vulnerability exists in the grsecurity PaX patch for the function read_kmem, in PaX from version pax-lin…
-
High 8.8
A buffer overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Docu…
-
Medium 5.9
An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.…
-
Medium 5.3
An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor, version 4620002. A…
-
Unscored —
OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0.
-
Unscored —
An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver, versions 25.20.15031.5004 and 25.20.1…
-
Unscored —
An issue summary information disclosure vulnerability exists in Atlassian Jira Tempo plugin, version 4.10.0. Authentica…
-
Unscored —
autojump before 21.5.8 allows local users to gain privileges via a Trojan horse custom_install directory in the current…
-
Critical 10.0
An exploitable SQL injection vulnerability exist in YouPHPTube 7.7. A specially crafted unauthenticated HTTP request ca…
-
Unscored —
A cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.5 and 1.20.x before 1.20.4 and allows remote attack…
-
High 8.9
An exploitable SQL injection vulnerability exist in YouPHPTube 7.7. When the "VideoTags" plugin is enabled, a specially…
-
Unscored —
An OS command injection vulnerability in FortiExtender 4.1.0 to 4.1.1, 4.0.0 and below under CLI admin console may allo…
-
Unscored —
-
Unscored —
An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices. A Com…
-
Unscored —
A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.0rc…
-
Unscored —
A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.13 …
-
Unscored —
A cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 allows remote attackers to inject arbitrary web script or…