Archive
12 October 2019
Vulnerabilities first published on this day (UTC), newest first.
9 results · Feed
-
Unscored —
An issue was discovered on Belkin Wemo Switch 28B WW_2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to ca…
-
Critical 9.8
jackson-databind polymorphic typing issue
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (versi…
-
Unscored —
Hydra through 0.1.8 has a NULL pointer dereference and daemon crash when processing POST requests that lack a Content-L…
-
Unscored —
An issue was discovered in Bento4 1.5.1.0. There is a SEGV in the function AP4_TfhdAtom::SetDefaultSampleSize at Core/A…
-
Unscored —
An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4_CencSampleEncryption::DoInspec…
-
Unscored —
An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4_PrintInspector::AddField in Co…
-
Unscored —
An issue was discovered in Landing-CMS 0.0.6. There is a CSRF vulnerability that can change the admin's password via th…
-
Unscored —
A stored XSS vulnerability was discovered in Hotaru CMS v1.7.2 via the admin_index.php?page=settings SITE NAME field (a…
-
Unscored —
library/glob.html in the Python 2 and 3 documentation before 2016 has potentially misleading information about whether …