Archive
11 October 2019
Vulnerabilities first published on this day (UTC), newest first.
51 results · Feed
-
High 7.5
graphite.composer.views.send_email vulnerable to SSRF
send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF. The vulnerable SSRF endpoint can be used by an attacker to have the Graphite web server request any resource. The response to this SSRF request is en…
-
Unscored —
Genesys PureEngage Digital (eServices) 8.1.x allows XSS via HtmlChatPanel.jsp or HtmlChatFrameSet.jsp (ActionColor, Cli…
-
Unscored —
There are some web interfaces without authentication requirements on D-Link DIR-868L B1-2.03 and DIR-817LW A1-1.04 rout…
-
Unscored —
Boa through 0.94.14rc21 allows remote attackers to trigger a memory leak because of missing calls to the free function.
-
Unscored —
An issue was discovered on D-Link DIR-816 A1 1.06 devices. An attacker could access management pages of the router via …
-
Unscored —
On D-Link DIR-859 A3-1.06 and DIR-850 A1.13 devices, /etc/services/DEVICE.TIME.php allows command injection via the $SE…
-
Unscored —
D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveragi…
-
Unscored —
D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveragi…
-
Unscored —
Boa through 0.94.14rc21 allows remote attackers to trigger an out-of-memory (OOM) condition because malloc is mishandle…
-
Unscored —
D-Link DAP-1320 A2-V1.21 routers have some web interfaces without authentication requirements, as demonstrated by uplin…
-
Unscored —
The GREE+ (aka com.gree.greeplus) application 1.4.0.8 for Android suffers from Cross Site Request Forgery.
-
High —
High severity vulnerability that affects indico
## Local file disclosure through LaTeX injection ### Impact An external audit of the Indico codebase has discovered a vulnerability in Indico's LaTeX sanitization code, which could have malicious users to run unsafe LaTeX commands on the server. Such commands…
-
Unscored —
In generateServicesMap of RegisteredServicesCache.java, there is a possible account protection bypass due to a caching …
-
High 7.8
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interact…
KEV Nov 3, 2021 -
Unscored —
In nfc_ncif_decode_rf_params of nfc_ncif.cc, there is a possible out of bounds read due to an integer underflow. This c…
-
Unscored —
In the default privileges of NFC, there is a possible local bypass of user interaction requirements on package installa…
-
Unscored —
In ScreenRotationAnimation of ScreenRotationAnimation.java, there is a possible capture of a secure screen due to a mis…
-
Unscored —
In GetMBheader of combined_decode.cpp, there is a possible out of bounds write due to a missing bounds check. This coul…
-
Unscored —
In VlcDequantH263IntraBlock_SH of vlc_dequant.cpp, there is a possible out of bounds write due to a missing bounds chec…
-
Unscored —
In PV_DecodePredictedIntraDC of dec_pred_intra_dc.cpp, there is a possible out of bounds write due to a missing bounds …
-
Unscored —
In startActivityMayWait of ActivityStarter.java, there is a possible incorrect Activity launch due to an incorrect perm…
-
Unscored —
The ThemeMakers SmartIT Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sen…
-
Unscored —
The ThemeMakers Blessing Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain se…
-
Unscored —
The ThemeMakers GamesTheme Premium theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive i…
-
Unscored —
The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sen…
-
Unscored —
The ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress allows remote atta…
-
Unscored —
The ThemeMakers Almera Responsive Portfolio theme through 2015-05-15 for WordPress allows remote attackers to obtain se…
-
Unscored —
The ThemeMakers Axioma Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sens…
-
Unscored —
The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remo…
-
Unscored —
The ThemeMakers Accio One Page Parallax Responsive theme through 2015-05-15 for WordPress allows remote attackers to ob…
-
Unscored —
The ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for WordPress allows remo…
-
Unscored —
The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to o…
-
Unscored —
Memory corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of p…
-
Unscored —
The ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive…
-
Unscored —
Pointer corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of …
-
Unscored —
Improper file permission in software installer for Intel(R) Smart Connect Technology for Intel(R) NUC may allow an auth…
-
Unscored —
Insufficient path checking in the installer for Intel(R) Active System Console before version 8.0 Build 24 may allow an…
-
Unscored —
A potential security vulnerability has been identified with Samsung Laser Printers. This vulnerability could potentiall…
-
Unscored —
A shell injection vulnerability on the Sophos Cyberoam firewall appliance with CyberoamOS before 10.6.6 MR-6 allows rem…
-
Unscored —
An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. An unauthenticated user can access /osm/RE…