Archive
28 October 2019
Vulnerabilities first published on this day (UTC), newest first.
56 results · Feed
-
Medium 5.3
IBM API Connect version V5.0.0.0 through 5.0.8.7 could reveal sensitive information to an attacker using a specially cr…
-
Medium 5.9
IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses weaker than expected cryptographic algorithms that could …
-
Medium 5.4
After installing the IBM Maximo Health- Safety and Environment Manager 7.6.1, a user is granted additional privileges t…
-
Low 3.1
IBM Security Guardium Big Data Intelligence (SonarG) 4.0 does not set the secure attribute for cookies in HTTPS session…
-
Medium 4.3
IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses incomplete blacklisting for input validation which allows…
-
Medium 5.3
IBM Security Guardium Big Data Intelligence (SonarG) 4.0 discloses sensitive information to unauthorized users. The inf…
-
Medium 5.9
IBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores sensitive information in cleartext within a resource th…
-
Medium 5.9
IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses hard coded credentials which could allow a local user to …
-
Medium 5.1
IBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores user credentials in plain in clear text which can be re…
-
Medium 6.5
IBM Security Guardium Big Data Intelligence (SonarG) 4.0 specifies permissions for a security-critical resource which c…
-
High 7.5CVE-2019-0205 Public exploit
Loop with Unreachable Exit Condition in Apache Thrift
In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects o…
-
High 7.5
Out-of-bounds read in Apache Thrift
In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.
-
Unscored —CVE-2019-5533 EPSS 17%
In VMware SD-WAN by VeloCloud versions 3.x prior to 3.3.0, the VeloCloud Orchestrator parameter authorization check mis…
-
Medium 5.5CVE-2019-10743 Public exploit
Path Traversal in MHolt Archiver
All versions of archiver allow attacker to perform a Zip Slip attack via the "unarchive" functions. It is exploited using a specially crafted zip archive, that holds path traversal filenames. When exploited, a filename in a malicious archive is concatenated t…
-
Critical 9.8
SQL Injection in sequelize
Sequelize all versions prior to 3.35.1, 4.44.3, and 5.8.11 are vulnerable to SQL Injection due to JSON path keys not being properly escaped for the MySQL/MariaDB dialects.
-
Unscored —
RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below insufficiently validate where upgrade packages are downloa…
-
Unscored —
RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below are vulnerable to a DNS unrelated data attack. The router …
-
Unscored —
RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS quer…
-
Unscored —
RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below are vulnerable to an arbitrary directory creation vulnerab…
-
High 7.5
Hadoop symlink vulnerability
Hadoop 1.0.3 contains a symlink vulnerability.
-
Unscored —
Cisco Video Communications Server (VCS) before X7.0.3 contains a command injection vulnerability which allows remote, a…
-
Unscored —
Trend Micro Apex One could be exploited by an attacker utilizing a command injection vulnerability to extract files fro…
-
High 8.8
Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vu…
KEV Nov 3, 2021 -
Unscored —
A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.…
-
Unscored —
An XML External Entity Injection vulnerability exists in Dzone AnswerHub.
-
Unscored —
A directory traversal vulnerability was discovered in RepetierServer.exe in Repetier-Server 0.8 through 0.91 that allow…
-
Unscored —
A remote SEH buffer overflow has been discovered in IntraSrv 1.0 (2007-06-03). An attacker may send a crafted HTTP GET …
-
High 7.5
Incorrect Default Permissions in keyring
Python keyring lib before 0.10 created keyring files with world-readable permissions.
-
Unscored —
VMware ESXi (6.7 before ESXi670-201908101-SG and 6.5 before ESXi650-201910401-SG), Workstation (15.x before 15.5.0) and…
-
Unscored —
Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Ba…
-
Unscored —
Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Ba…
-
Unscored —
In K7 Antivirus Premium 16.0.xxx through 16.0.0120; K7 Total Security 16.0.xxx through 16.0.0120; and K7 Ultimate Secur…
-
Unscored —
Tiki Wiki CMS Groupware 5.2 has Local File Inclusion
-
Unscored —
Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escal…
-
Unscored —
-
Unscored —
-
Unscored —
pootle 2.0.5 has XSS via 'match_names' parameter
-
Unscored —
The web interface of the Compal Broadband CH7465LG modem (version CH7465LG-NCIP-6.12.18.25-2p6-NOSH) is vulnerable to a…
-
High 7.5
File masquerade attack vulnerability in McAfee Total Protection
A File Masquerade vulnerability in McAfee Total Protection (MTP) version 16.0.R21 and earlier in Windows client allowed an attacker to read the plaintext list of AV-Scan exclusion files from the Windows registry, and to possibly replace excluded files with po…
-
High 8.7
Underflow in PHP-FPM can lead to RCE
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibilit…
KEV Mar 25, 2022