Skip to content
OpenAdvisories

Archive

12 October 2019

Vulnerabilities first published on this day (UTC), newest first.

9 results · Feed

  • Unscored —

    An issue was discovered on Belkin Wemo Switch 28B WW_2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to ca…

  • Critical 9.8

    jackson-databind polymorphic typing issue

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (versi…

  • Unscored —

    Hydra through 0.1.8 has a NULL pointer dereference and daemon crash when processing POST requests that lack a Content-L…

  • Unscored —

    An issue was discovered in Bento4 1.5.1.0. There is a SEGV in the function AP4_TfhdAtom::SetDefaultSampleSize at Core/A…

  • Unscored —

    An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4_CencSampleEncryption::DoInspec…

  • Unscored —

    An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4_PrintInspector::AddField in Co…

  • Unscored —

    An issue was discovered in Landing-CMS 0.0.6. There is a CSRF vulnerability that can change the admin's password via th…

  • Unscored —

    A stored XSS vulnerability was discovered in Hotaru CMS v1.7.2 via the admin_index.php?page=settings SITE NAME field (a…

  • Unscored —

    library/glob.html in the Python 2 and 3 documentation before 2016 has potentially misleading information about whether …