Archive
October 2019
Vulnerabilities first published in this month (UTC), newest first.
90 results · Clear filters · Feed
-
Medium 5.9
An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.…
-
Unscored —
An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices. A Com…
-
Unscored —
Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi CCTV, NoVus CCTV, and We…
-
Unscored —
SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers…
-
High 7.5CVE-2019-0205 Public exploit
Loop with Unreachable Exit Condition in Apache Thrift
In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects o…
-
Medium 5.5CVE-2019-10743 Public exploit
Path Traversal in MHolt Archiver
All versions of archiver allow attacker to perform a Zip Slip attack via the "unarchive" functions. It is exploited using a specially crafted zip archive, that holds path traversal filenames. When exploited, a filename in a malicious archive is concatenated t…
-
Unscored —
RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS quer…
-
Unscored —
A directory traversal vulnerability was discovered in RepetierServer.exe in Repetier-Server 0.8 through 0.91 that allow…
-
Unscored —
A remote SEH buffer overflow has been discovered in IntraSrv 1.0 (2007-06-03). An attacker may send a crafted HTTP GET …
-
High 8.7
Underflow in PHP-FPM can lead to RCE
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibilit…
KEV Mar 25, 2022 -
Unscored —
An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through …
-
Unscored —
An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through …
-
Unscored —
An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to …
-
Unscored —
An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to …
-
Unscored —CVE-2019-17596 Public exploit
Panic on invalid DSA public keys in crypto/dsa
Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.
-
Unscored —CVE-2019-18418 Public exploit
clonos.php in ClonOS WEB control panel 19.09 allows remote attackers to gain full access via change password requests b…
-
Critical 9.8
Ignite Realtime Openfire vulnerable to Server Side Request Forgery
A Server Side Request Forgery (SSRF) vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send arbitrary HTTP GET requests.
-
Unscored —
An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. There is a directory traversal vulnerabili…
-
Unscored —
An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. The backup file is in tar.gz format. After…
-
Unscored —CVE-2019-9596 Public exploit
Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint.
-
Unscored —CVE-2019-11933 Public exploit
A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.1…
-
Medium 6.1
Jenkins build-metrics Plugin reflected cross-site scripting vulnerability
A reflected cross-site scripting vulnerability in Jenkins build-metrics Plugin allows attackers to inject arbitrary HTML and JavaScript into web pages provided by this plugin.
-
Unscored —
A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows r…
-
Unscored —CVE-2019-17220 Public exploit
Rocket.Chat before 2.1.0 allows XSS via a URL on a ![title] line.
-
Unscored —
Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker t…
-
Unscored —CVE-2019-17498 Public exploit
In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds ch…
-
Unscored —CVE-2019-10716 Public exploit
An Information Disclosure issue in Verodin Director 3.5.3.1 and earlier reveals usernames and passwords of integrated s…
-
High 7.5CVE-2019-17513 Public exploit
io.ratpack:ratpack-core vulnerable to Improper Neutralization of Special Elements in Output ('Injection')
An issue was discovered in Ratpack before 1.7.5. Due to a misuse of the Netty library class DefaultHttpHeaders, there is no validation that headers lack HTTP control characters. Thus, if untrusted data is used to construct HTTP headers with Ratpack, HTTP Resp…
-
Unscored —
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier,…
-
Unscored —
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier,…
-
Unscored —
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier,…
-
Unscored —CVE-2019-15627 Public exploit
Versions 10.0, 11.0 and 12.0 of the Trend Micro Deep Security Agent are vulnerable to an arbitrary file delete attack, …
-
Unscored —
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and s…
-
Unscored —
In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is …
-
Unscored —CVE-2019-17666 Public exploit
rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bou…
-
Unscored —
Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications. The supported vers…
-
High 8.8
Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is …
KEV May 25, 2022 -
Unscored —CVE-2019-2888 Public exploit
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: EJB Container). Supported v…
-
Unscored —
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported ve…
-
Unscored —
ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability ex…