Archive
29 October 2019
Vulnerabilities first published on this day (UTC), newest first.
56 results · Feed
-
Unscored —
An insecure direct object reference (IDOR) vulnerability exists in Magento 2.3 prior to 2.3.1, 2.2 prior to 2.2.8, and …
-
Unscored —
rpcbind 0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /tmp/portma…
-
Unscored —
rpcbind 0.2.0 does not properly validate (1) /tmp/portmap.xdr and (2) /tmp/rpcbind.xdr, which can be created by an atta…
-
Unscored —
SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers…
-
Unscored —
Mapserver 5.2, 5.4 and 5.6 before 5.6.5-2 improperly validates symbol index values during Mapfile parsing.
-
Unscored —
qtum through 0.16 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. The attacker sends i…
-
Unscored —
ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks.
-
Unscored —
An issue was discovered in the Tightrope Media Carousel digital signage product 7.0.4.104. Due to insecure default perm…
-
Unscored —
The Tightrope Media Carousel digital signage product 7.0.4.104 contains an arbitrary file upload vulnerability in the M…
-
Unscored —
The Tightrope Media Carousel Seneca HDn Windows-based appliance 7.0.4.104 is shipped with a default local administrator…
-
Unscored —
A stack based buffer overflow vulnerability exists in the method receiving data from SysTreeView32 control of the GMER …
-
Unscored —
Reflected Cross-Site Scripting (XSS) vulnerability in the fabrik_referrer hidden field in the Fabrikar Fabrik component…
-
Unscored —
Cross Site Scripting (XSS) in ikiwiki before 3.20110122 could allow remote attackers to insert arbitrary JavaScript due…
-
Unscored —
Opera Mini for Android allows attackers to bypass intended restrictions on .apk file download/installation via an RTLO …
-
Medium 5.9
Mercurial Improper Certificate Validation vulnerability
Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack.
-
Unscored —
Sahi Pro 8.0.0 has a script manager arena located at _s_/dyn/pro/DBReports with many different areas that are vulnerabl…
-
Unscored —CVE-2019-15683 EPSS 19%
TurboVNC server code contains stack buffer overflow vulnerability in commit prior to cea98166008301e614e0d36776bf9435a5…
-
Unscored —
An issue was discovered in LabKey Server 19.1.0. It is possible to force a logged-in administrator to execute code thro…
-
Unscored —
TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of Syste…
-
Unscored —CVE-2019-15679 EPSS 12%
TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially r…
-
Unscored —CVE-2019-15678 EPSS 13%
TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result co…
-
Unscored —CVE-2019-8287 EPSS 19%
TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially re…
-
Unscored —
An issue was discovered in LabKey Server 19.1.0. The display name of a user is vulnerable to stored XSS that can execut…
-
Unscored —
An issue was discovered in LabKey Server 19.1.0. Sending an SVG containing an XXE payload to the endpoint visualization…
-
Critical 9.8
SQL Injection in sequelize
sequelize before version 3.35.1 allows attackers to perform a SQL Injection due to the JSON path keys not being properly sanitized in the Postgres dialect.
-
Unscored —
LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, whic…
-
Unscored —
Unquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for Windows.
-
Unscored —
An issue was discovered in the CheckUser extension through 1.34 for MediaWiki. Certain sensitive information within ove…
-
Unscored —
An issue was discovered in the AbuseFilter extension through 1.34 for MediaWiki. Previously hidden (restricted) AbuseFi…
-
High 7.5
Cezerin Unauthorized Acces
Cezerin v0.33.0 allows unauthorized order-information modification because certain internal attributes can be overwritten via a conflicting name when processing order requests. Hence, a malicious customer can manipulate an order (e.g., its payment status or s…
-
Unscored —CVE-2019-6851 EPSS 29%
A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium …
-
Unscored —
A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, whi…
-
Unscored —
A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, whi…
-
Unscored —CVE-2019-6848 EPSS 32%
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU (BMEx58*) and Modicon M…
-
Unscored —
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxC…
-
Unscored —
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon …
-
Unscored —
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon …
-
Unscored —
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxC…
-
Unscored —
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prio…
-
Unscored —
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxC…